last executing test programs: 12.402836835s ago: executing program 1 (id=807): syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) iopl(0x3) r2 = gettid() syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x54) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8802, 0x0) r7 = dup(r6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r7, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x4, 0x141101) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) 11.086053062s ago: executing program 1 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3126060545651228208929c272cc238eb700000000080041007278655f30000000000000923f5e8a6c021a2e4d705c00"/83], 0x38}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000110a0e00000000000000df2500000005"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000014) 7.87914984s ago: executing program 4 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="16eaff000400400005000000ff000000002d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) (async) rmdir(&(0x7f0000000580)='./file1\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, 0x0, &(0x7f00000000c0)) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xefff}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r7}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) timer_create(0x0, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5fe0002030109021b0001000000000904d60001b5e14500090583"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.921278047s ago: executing program 1 (id=833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x9, 0xfff1}}}, 0x24}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x178) dup3(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @initdev}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0xd}) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x1, 0x8001, 0x3}}, 0x28) 5.887264242s ago: executing program 3 (id=837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x54}}, 0x4000056) 5.558382318s ago: executing program 4 (id=838): socket$inet6(0xa, 0x80001, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b3b000/0x4000)=nil) semget(0x1, 0x1, 0x192) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(0xfffffffffffffffc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 5.329980201s ago: executing program 1 (id=840): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xfffffee5}, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="470d00000000fbdbdf250a000016a6200b008d9ee100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 5.329238334s ago: executing program 3 (id=841): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth0\x00', {'veth1_vlan\x00'}, 0x6}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=@random={'trusted.', '-\x00'}, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x2}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) syz_emit_vhci(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x7, 0x9) write$P9_RWRITE(r10, &(0x7f0000000040)={0xb}, 0x11000) read(r9, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r10, &(0x7f0000000680)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r8, r9, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x98862e8a1bd480cb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10}, @generic={0x0, 0x9, 0x0, 0x0, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000000480)='syzkaller\x00', 0x3ff, 0x65, &(0x7f00000004c0)=""/101, 0x40f00, 0x20, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x0, 0x7d360b82, 0x6}, 0x10, 0xf745, r2, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x2, @void, @value}, 0x94) 5.238907896s ago: executing program 4 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.976544252s ago: executing program 4 (id=844): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r0, @ANYRES64, @ANYBLOB="179e180a7ee62c2adf9f96a285b6cc31701b374a5f6432d22c4ae5de9a983036e843e02b918b3f623f91b80769d4c63f7855636448f433a2b2320a3f48478853fc162b831b02cad1559a66b988d3de4c0775019543994f9d745fc2fe42dd82cc879e9b44b688ec732ce00ec36dd7e3cfa254d1c3b6b33ea29e6e18f507470845bfa267267abbf541458ad086fad18d73bdf98667bd87e1dadd236c04e8b2e9ba15e020b74e298547477ca7cab3e67cc022f237f479eba8e3b6cf17861f5c", @ANYRES32], 0xf0}, 0x1, 0x0, 0x0, 0x51}, 0x40000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xb26611ca689c9bea, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000f0000000000000002000000181100cb", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185300000c0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x9c, &(0x7f0000000680)=""/156, 0x41000, 0x2e, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x10, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r1, r1, r1], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='fscache_cookie\x00', r2}, 0x18) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x8, 0x7fffffff}]}) rt_sigpending(0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="b000000000000000030000000000000000000000002000000000000000000000000002000000000000000000000000000000000000000000000000000000000000001700000000000000020000000000000000000000000000000000000000000000000000000000002426a4e5b415187500fcffffff000000000000", @ANYRES32=r8, @ANYRES64=r0, @ANYBLOB="00200000000000000000000000000000000100000000000000a634438543c44548770000000000000000c7da7509208085ae0b09f8cfee8f75dfe70800"/74], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000009837805e7919b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@access_uid={'access', 0x3d, r8}}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@version_L}, {@access_user}], [{@hash}]}}) ioctl(r0, 0x8b2a, &(0x7f0000000ac0)="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") syz_io_uring_setup(0xd3f, 0x0, &(0x7f0000000380), &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xa, 0x11, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000003fcb6355c4f9005509010000000000950000000000b20000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000bd9a000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x5, &(0x7f0000000900)={0x0, 0x27, 0x4, @thr={&(0x7f0000000840)="27ebdbbb4f79fb67036b888a9034f3a54c21883894e1b37e3dbef6c07920de83b98529f4f1743de9cd79662ad95f3cc0980ad4aea7d21f2c62f7eeebc79fe3df11a1ca71c5802593611b5caf206e202a0bc2ef4e152cf8ac79a69ed27b42f52e5be1550f139b75cf1164a8d8d71ad3500f3dff8cc98712a513", &(0x7f00000008c0)="a15b19acc206b0bf626024e4a8"}}, &(0x7f0000000940)=0x0) timer_settime(r10, 0x1, &(0x7f0000000980)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000009c0)) 4.933135675s ago: executing program 1 (id=845): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x13, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0xa4}], 0x1, 0x0, 0x0, 0x0) r4 = syz_usbip_server_init(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000300000001"], 0x30) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000c80)={0xc}) 4.148253027s ago: executing program 0 (id=847): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) sendto$inet(r4, &(0x7f0000000540), 0x0, 0x80, 0x0, 0x0) 4.019116199s ago: executing program 4 (id=848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x0, 0xf6, 0xb7, 0x8002, 0x2, 0x3, 0xfffffeff, 0x2df, 0x40, 0x303, 0x0, 0x4, 0x38, 0x1, 0x4, 0x4, 0xd}, [{0x2, 0x2, 0x3, 0x81, 0x2, 0x7b1, 0x4, 0x8}], "cc613171b7f94d4bd4c720d062fc35a9664e856e6dbabf875f61a1c5c258216b6fca76b02324490e32ddf7ac8625ab760776f481531a0e760aa42a8a9f533be4d5202c7d089adff08efdf6d027f08da4f84b4b80290073b393e672fb006319"}, 0xd7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01064c1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x800}}], 0x1, 0x24000084) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB], 0x10}], 0x1, 0x0, 0x0, 0x22000800}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0xe, 0x0, '\x00', 0x0, 0x19a2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.162985975s ago: executing program 0 (id=850): syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200001c0180c200000086dd60010700000c112efc010000000000000000000000000000ff02000000000000000000000000000100000e220006"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x705, 0x8000000000000001) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x84, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0x3}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_ACT={0x54, 0x1, [@m_xt={0x50, 0x8, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004c885}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000140)=0x10001) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x8000000000000005, 0xffffffffffffffff, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2, 0xa72e, 0xfff, 0x800000000, 0xb, 0x0, 0x0, 0xa73, 0x3, 0x7, 0x9, 0x1, 0xfffffffc, 0x0, 0x3, 0x1, 0x11e6, 0x5}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00042dbd7000fcdbdf25090000001400068008000700", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="1c000180050002000100000008000700", @ANYRES32=r11, @ANYBLOB="08000300ac1e00010800030006000000080403000700000008000300040000000800040005000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4010000) 2.905816345s ago: executing program 0 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x9, 0xfff1}}}, 0x24}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$proc_mixer(r5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x178) dup3(r6, r5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @initdev}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0xd}) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x1, 0x8001, 0x3}}, 0x28) 2.841472715s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.514733363s ago: executing program 2 (id=856): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x9f2164216c0394d2, 0x4, 0x7f, 0x371, 0xc, @empty, @private1, 0x7, 0x7, 0x400, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a000004000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x97, &(0x7f0000002240)=""/151, 0x0, 0x7f, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000002f000000d4000000200000009500080000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x40010) syz_genetlink_get_family_id$ieee802154(0x0, r6) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) 2.210731956s ago: executing program 3 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r3}, 0x9) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x250) ioperm(0x0, 0x6, 0x13cc) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x65, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x21, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.187587797s ago: executing program 0 (id=858): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0xf}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x1}]}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(r0) 1.578296405s ago: executing program 1 (id=859): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x228122, 0xfffffffffffffd04) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c00d1192a94010706001600377f0f6e460b09007a15b3"], 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r0, r1, 0x2) setuid(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(r4, 0x3, &(0x7f0000000280), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0xfffffffc}, {0x7, 0x5, 0xf5, 0x2fdc}, {0xc, 0xe0, 0x6, 0x9}, {0x3c18, 0x7, 0x9, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r6 = socket$inet(0x2, 0x80000, 0xd59d) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000180)) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x12, r5}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 1.507706214s ago: executing program 3 (id=860): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) sendto$inet(r4, &(0x7f0000000540), 0x0, 0x80, 0x0, 0x0) 1.432776752s ago: executing program 2 (id=861): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setitimer(0x2, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='macvlan0\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000d80)}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000001c0)={0x1}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb9) shutdown(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xc7) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f0000000280)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='< \x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) ioctl$HCIINQUIRY(r0, 0x400448e1, 0x0) 1.37391488s ago: executing program 0 (id=862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x4000056) 1.348189847s ago: executing program 0 (id=863): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000000701020000000000000000000000090c00024000000000000000050900010073797a30000000000c00024000000000000000010c0003"], 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000004400)='./file0\x00', 0x101280, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00'}, 0x10) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x20000000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x28, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e727475be4f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238e07936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c471e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9468baa6f94b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f23dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0975f747d192e80608f35c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fcda6338c36710bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8a832a03f1634c0b7e4fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041431bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f7791b1b25d50bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664a7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d001", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x3, 0x6, 0x1, 0x40000000000, 0x4, 0x100000000000, 0xe767, 0x8, 0x10000, 0x8000, 0x0, r8, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.320570342s ago: executing program 2 (id=864): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) (fail_nth: 3) 1.090914461s ago: executing program 2 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x10001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ff0000000000000000000000791008000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, r5, r6, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)={0x1c, 0x38, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x7f}]}]}, 0x1c}}, 0xc000) 867.294248ms ago: executing program 4 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000f3bf47912cecc374da4949ac291ffeb311fcd26074e8eaba1932c7a43ee291009dffad2dd61803e31ad75fbab6d42702a9ab9d7e0985b67caa03783be192c116bb2a8a973ec82d2ba2fae91305df88a76b7d151707ccaaf00df430f8aa27f3c93c5ae084e4a01043ccd5e654c8d4", @ANYRES16=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000100)}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) memfd_create(&(0x7f0000000c40)='\x00\x00\x1a\x00\x00\x00z\x9b\xb2\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x99\xe5\x8f\xe2\xb6\xdc\n\xf5kWnr\x92G\xbd\b\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xc3_M\xbe\x19\xea#\xffWj\xdc\xd4\xb1\xcc\\\xa8N\x8c)[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xbfF}\xbd\x1c\xff\xff\xff\xff\xff\xff\xb5v*R?\xa0Y$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xe8\xd6\xae1\xc3\x9e\xec`\xf2\xd1BM\x10\xc6\xb4F\n\x10q\xde\v\xec\xa2\x92x\xe9\xf5\x1f\xc9hj\xc0\xe5\xce\xd1v\bez\"\xb1\xd3 \xbc\x9b\xe8\x86u\x0e\v\x17\x85\xb8\xdb2\x92\x00\x00\x00\x00\x00\x00\x00\x00\x80\x9c99\n|\xc1,\xd3\xedI\x11\xf9\xa6wN\xa3\xc9M\xe6\x92\xaf\xb2I\x16}\xae\xe8\xa8\xd7\xad\\\x84\v\fB\xe2d\x90\xdd\x90\x1e\x8c\xe4\xc70\x93\xc7\x8b\xec/a8\x95a\x8c?)\xa2\xf6~\xa7\xc3\xfc\x19\xa8\x98\x1f\x8d\x13\x00e;g]\x1c\x1d\xb0\xa0\x96\xac\x9f3\xe8\xa7R\x92\xe6\n\xdda\x86\xa8\x13\xf1\xccQa\xef\x94u\xed\x0fvq=|\xb0\xc2I/\\}\xf4\xb7\xda\xdds\xf3\xf9\f\xff\xcc\xf3\xa8\x02\xa9/\xfd\xcfn\x00\x84wa[,\xd8\xda\xd4h\xdd\xc4\x80\xb9_\x7f\xa1\x90H\x824Y\x89E', 0x7) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") gettid() 422.696583ms ago: executing program 3 (id=867): r0 = io_uring_setup(0x30d7, &(0x7f00000003c0)={0x0, 0x0, 0x800}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x4, 0x2, {}, 0x58603}) close_range(r0, 0xffffffffffffffff, 0x20000000000000) 261.022613ms ago: executing program 3 (id=868): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth0\x00', {'veth1_vlan\x00'}, 0x6}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=@random={'trusted.', '-\x00'}, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x2}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) syz_emit_vhci(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x7, 0x9) write$P9_RWRITE(r10, &(0x7f0000000040)={0xb}, 0x11000) read(r9, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r10, &(0x7f0000000680)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r8, r9, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x98862e8a1bd480cb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10}, @generic={0x0, 0x9, 0x0, 0x0, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000000480)='syzkaller\x00', 0x3ff, 0x65, &(0x7f00000004c0)=""/101, 0x40f00, 0x20, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x0, 0x7d360b82, 0x6}, 0x10, 0xf745, r2, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x2, @void, @value}, 0x94) 0s ago: executing program 2 (id=869): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@ll={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @broadcast}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() close(r0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3d41, &(0x7f0000000380)={0x0, 0xc007, 0x1, 0x0, 0x308, 0x0, r1}, &(0x7f0000000040), &(0x7f00000001c0)) kernel console output (not intermixed with test programs): 251 but max is 0 [ 219.822005][ T25] usb 3-1: config 0 has no interface number 0 [ 219.832843][ T25] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 219.853380][ T25] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 219.867227][ T25] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 219.877177][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.890675][ T25] usb 3-1: Product: syz [ 219.894863][ T25] usb 3-1: Manufacturer: syz [ 219.906671][ T25] usb 3-1: SerialNumber: syz [ 219.924321][ T25] usb 3-1: config 0 descriptor?? [ 219.929912][ T7744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.937768][ T7744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.992385][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 220.134784][ T29] audit: type=1400 audit(1739513774.392:1315): avc: denied { create } for pid=7752 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.189890][ T7743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.201521][ T7743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.229761][ T29] audit: type=1400 audit(1739513774.392:1316): avc: denied { setopt } for pid=7752 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 221.193916][ T7768] input: syz1 as /devices/virtual/input/input31 [ 221.581071][ T29] audit: type=1400 audit(1739513775.922:1317): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.606892][ T25] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 221.641268][ T29] audit: type=1400 audit(1739513775.972:1318): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.680454][ T25] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 221.696007][ T25] asix 3-1:0.251: probe with driver asix failed with error -71 [ 221.717963][ T29] audit: type=1400 audit(1739513776.002:1319): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.754303][ T25] usb 3-1: USB disconnect, device number 15 [ 221.768781][ T29] audit: type=1400 audit(1739513776.002:1320): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.803193][ T29] audit: type=1400 audit(1739513776.032:1321): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 221.834257][ T29] audit: type=1400 audit(1739513776.032:1322): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.069588][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.219618][ T5867] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.250984][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.262047][ T5920] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 222.280803][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.347748][ T5920] usb 2-1: config 0 descriptor?? [ 222.410013][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 222.421289][ T7786] netlink: 'syz.2.537': attribute type 7 has an invalid length. [ 222.429026][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 222.429128][ T7786] netlink: 'syz.2.537': attribute type 8 has an invalid length. [ 222.443376][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 222.487211][ T5867] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 222.506730][ T5867] usb 5-1: config 0 has no interface number 0 [ 222.525299][ T5867] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=66.39 [ 222.540414][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.549558][ T5867] usb 5-1: Product: syz [ 222.554317][ T5867] usb 5-1: Manufacturer: syz [ 222.559952][ T5867] usb 5-1: SerialNumber: syz [ 222.859522][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 222.859538][ T29] audit: type=1400 audit(1739513777.192:1351): avc: denied { write } for pid=7775 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.948651][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'. [ 222.958296][ T7790] netlink: 'syz.3.538': attribute type 7 has an invalid length. [ 222.966361][ T7790] netlink: 'syz.3.538': attribute type 8 has an invalid length. [ 222.974360][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 223.010800][ T7790] ip6gretap0: entered promiscuous mode [ 223.030646][ T7790] syz_tun: entered promiscuous mode [ 223.042394][ T7790] gretap0: entered promiscuous mode [ 223.055102][ T7790] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 223.063251][ T7790] Cannot create hsr debugfs directory [ 223.328638][ T5867] usb 5-1: config 0 descriptor?? [ 223.355786][ T5867] ftdi_sio 5-1:0.110: FTDI USB Serial Device converter detected [ 223.387425][ T5867] ftdi_sio ttyUSB0: unknown device type: 0x6639 [ 223.468543][ T29] audit: type=1400 audit(1739513777.802:1352): avc: denied { read } for pid=7792 comm="syz.2.539" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 223.541299][ T5920] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 223.551137][ T29] audit: type=1400 audit(1739513777.802:1353): avc: denied { open } for pid=7792 comm="syz.2.539" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 223.575182][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.540'. [ 223.591859][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input32 [ 223.623698][ T29] audit: type=1400 audit(1739513777.892:1354): avc: denied { create } for pid=7795 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 223.669622][ T29] audit: type=1400 audit(1739513777.922:1355): avc: denied { write } for pid=7795 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 223.717020][ T5920] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 223.729786][ T29] audit: type=1400 audit(1739513778.052:1356): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.729826][ T29] audit: type=1400 audit(1739513778.052:1357): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.729858][ T29] audit: type=1400 audit(1739513778.052:1358): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2922 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.729889][ T29] audit: type=1400 audit(1739513778.052:1359): avc: denied { map_read map_write } for pid=7797 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.729919][ T29] audit: type=1400 audit(1739513778.052:1360): avc: denied { ioctl } for pid=7797 comm="syz.3.541" path="socket:[16818]" dev="sockfs" ino=16818 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.088400][ T7803] Mount JFS Failure: -22 [ 224.099421][ T7803] jfs_mount failed w/return code = -22 [ 224.174171][ T9] usb 2-1: USB disconnect, device number 19 [ 224.214866][ T7806] netfs: Couldn't get user pages (rc=-14) [ 224.453477][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 225.292472][ T5920] usb 5-1: USB disconnect, device number 25 [ 225.314936][ T5920] ftdi_sio 5-1:0.110: device disconnected [ 225.599572][ T866] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 225.729584][ T5920] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 225.761039][ T866] usb 1-1: config 8 has an invalid interface number: 61 but max is 0 [ 225.773761][ T866] usb 1-1: config 8 has no interface number 0 [ 225.783223][ T866] usb 1-1: config 8 interface 61 has no altsetting 0 [ 225.797158][ T866] usb 1-1: New USB device found, idVendor=13d3, idProduct=3322, bcdDevice=67.29 [ 225.807178][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.817721][ T866] usb 1-1: Product: syz [ 225.824936][ T866] usb 1-1: Manufacturer: syz [ 225.830694][ T866] usb 1-1: SerialNumber: syz [ 225.882387][ T7829] FAULT_INJECTION: forcing a failure. [ 225.882387][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 225.898761][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 225.909684][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.1.550 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 225.909707][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.909718][ T7829] Call Trace: [ 225.909723][ T7829] [ 225.909730][ T7829] dump_stack_lvl+0x16c/0x1f0 [ 225.909755][ T7829] should_fail_ex+0x50a/0x650 [ 225.909779][ T7829] ? fs_reclaim_acquire+0xae/0x150 [ 225.909807][ T7829] should_failslab+0xc2/0x120 [ 225.909826][ T7829] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 225.909846][ T7829] ? __alloc_skb+0x2b1/0x380 [ 225.909870][ T7829] __alloc_skb+0x2b1/0x380 [ 225.909890][ T7829] ? __pfx___alloc_skb+0x10/0x10 [ 225.909913][ T7829] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 225.909939][ T7829] netlink_alloc_large_skb+0x69/0x130 [ 225.909962][ T7829] netlink_sendmsg+0x689/0xd70 [ 225.909987][ T7829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.910017][ T7829] ____sys_sendmsg+0xaaf/0xc90 [ 225.910043][ T7829] ? copy_msghdr_from_user+0x10b/0x160 [ 225.910066][ T7829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.910104][ T7829] ___sys_sendmsg+0x135/0x1e0 [ 225.910128][ T7829] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.910162][ T7829] ? __pfx_lock_release+0x10/0x10 [ 225.910185][ T7829] ? trace_lock_acquire+0x14e/0x1f0 [ 225.910213][ T7829] ? __fget_files+0x206/0x3a0 [ 225.910237][ T7829] __sys_sendmsg+0x16e/0x220 [ 225.910260][ T7829] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.910299][ T7829] do_syscall_64+0xcd/0x250 [ 225.910321][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.910345][ T7829] RIP: 0033:0x7fe51038cde9 [ 225.910360][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.910377][ T7829] RSP: 002b:00007fe511257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.910394][ T7829] RAX: ffffffffffffffda RBX: 00007fe5105a6160 RCX: 00007fe51038cde9 [ 225.910404][ T7829] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000008 [ 225.910414][ T7829] RBP: 00007fe511257090 R08: 0000000000000000 R09: 0000000000000000 [ 225.910424][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.910434][ T7829] R13: 0000000000000000 R14: 00007fe5105a6160 R15: 00007ffe626f8d68 [ 225.910458][ T7829] [ 225.914909][ T5920] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.150489][ T866] usb 1-1: USB disconnect, device number 15 [ 226.157782][ T7832] FAULT_INJECTION: forcing a failure. [ 226.157782][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 226.171133][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.2.551 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 226.171157][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.171167][ T7832] Call Trace: [ 226.171173][ T7832] [ 226.171180][ T7832] dump_stack_lvl+0x16c/0x1f0 [ 226.171205][ T7832] should_fail_ex+0x50a/0x650 [ 226.171236][ T7832] should_failslab+0xc2/0x120 [ 226.171257][ T7832] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 226.171277][ T7832] ? skb_clone+0x190/0x3f0 [ 226.171306][ T7832] skb_clone+0x190/0x3f0 [ 226.171330][ T7832] netlink_deliver_tap+0xabd/0xd30 [ 226.171357][ T7832] netlink_unicast+0x5e1/0x7f0 [ 226.171382][ T7832] ? __pfx_netlink_unicast+0x10/0x10 [ 226.171411][ T7832] netlink_sendmsg+0x8b8/0xd70 [ 226.171441][ T7832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.171473][ T7832] ____sys_sendmsg+0xaaf/0xc90 [ 226.171500][ T7832] ? copy_msghdr_from_user+0x10b/0x160 [ 226.171523][ T7832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.171563][ T7832] ___sys_sendmsg+0x135/0x1e0 [ 226.171588][ T7832] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.171623][ T7832] ? __pfx_lock_release+0x10/0x10 [ 226.171646][ T7832] ? trace_lock_acquire+0x14e/0x1f0 [ 226.171682][ T7832] ? __fget_files+0x206/0x3a0 [ 226.171707][ T7832] __sys_sendmsg+0x16e/0x220 [ 226.171730][ T7832] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.171772][ T7832] do_syscall_64+0xcd/0x250 [ 226.171794][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.171818][ T7832] RIP: 0033:0x7fb0d2d8cde9 [ 226.171833][ T7832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.171850][ T7832] RSP: 002b:00007fb0d3b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.171868][ T7832] RAX: ffffffffffffffda RBX: 00007fb0d2fa5fa0 RCX: 00007fb0d2d8cde9 [ 226.171880][ T7832] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000007 [ 226.171891][ T7832] RBP: 00007fb0d3b51090 R08: 0000000000000000 R09: 0000000000000000 [ 226.171902][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.171913][ T7832] R13: 0000000000000000 R14: 00007fb0d2fa5fa0 R15: 00007ffc9ab2f048 [ 226.171939][ T7832] [ 226.421241][ T5920] usb 5-1: config 0 has no interface number 0 [ 226.429339][ T5920] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.438477][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.447012][ T5920] usb 5-1: Product: syz [ 226.453289][ T5920] usb 5-1: Manufacturer: syz [ 226.457953][ T5920] usb 5-1: SerialNumber: syz [ 226.464709][ T5920] usb 5-1: config 0 descriptor?? [ 226.471758][ T5920] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 226.480661][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 226.522269][ T5868] wlan0 speed is unknown, defaulting to 1000 [ 226.559908][ T5868] wlan0 speed is unknown, defaulting to 1000 [ 226.642804][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.659656][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.667733][ T25] usb 4-1: Product: syz [ 226.671993][ T25] usb 4-1: Manufacturer: syz [ 226.676640][ T25] usb 4-1: SerialNumber: syz [ 226.685637][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.705696][ T866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.767620][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.786797][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.849605][ T5920] usb 5-1: qt2_attach - failed to power on unit: -71 [ 226.869708][ T5920] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 226.908833][ T5920] usb 5-1: USB disconnect, device number 26 [ 227.436601][ T7836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7836 comm=syz.2.552 [ 227.646884][ T7845] wlan0 speed is unknown, defaulting to 1000 [ 227.719635][ T866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 227.828041][ T866] ath9k_htc: Failed to initialize the device [ 227.846539][ T5868] IPVS: starting estimator thread 0... [ 227.883804][ T866] usb 4-1: ath9k_htc: USB layer deinitialized [ 227.974579][ T7850] IPVS: using max 28 ests per chain, 67200 per kthread [ 228.112266][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 228.112281][ T29] audit: type=1400 audit(1739513782.452:1410): avc: denied { read } for pid=7846 comm="syz.1.555" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.214792][ T29] audit: type=1400 audit(1739513782.452:1411): avc: denied { open } for pid=7846 comm="syz.1.555" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.243355][ T29] audit: type=1400 audit(1739513782.492:1412): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 228.264579][ T29] audit: type=1400 audit(1739513782.502:1413): avc: denied { create } for pid=7846 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.529670][ T29] audit: type=1400 audit(1739513782.852:1414): avc: denied { create } for pid=7855 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.767970][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 228.886123][ T7823] syz.3.549 (7823) used greatest stack depth: 20864 bytes left [ 228.895591][ T29] audit: type=1400 audit(1739513783.222:1415): avc: denied { getopt } for pid=7855 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.977851][ T25] usb 4-1: USB disconnect, device number 17 [ 229.112900][ T5867] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 229.179522][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.197643][ T5867] usb 3-1: Product: syz [ 229.794896][ T29] audit: type=1400 audit(1739513784.132:1416): avc: denied { create } for pid=7867 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.799541][ T5867] usb 3-1: Manufacturer: syz [ 229.849558][ T29] audit: type=1400 audit(1739513784.182:1417): avc: denied { read write } for pid=7869 comm="syz.4.563" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 229.875170][ T5867] usb 3-1: SerialNumber: syz [ 229.927070][ T5867] r8152-cfgselector 3-1: Unknown version 0x0000 [ 229.927174][ T29] audit: type=1400 audit(1739513784.182:1418): avc: denied { open } for pid=7869 comm="syz.4.563" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 229.958276][ T29] audit: type=1400 audit(1739513784.222:1419): avc: denied { mount } for pid=7869 comm="syz.4.563" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.985802][ T5867] r8152-cfgselector 3-1: config 0 descriptor?? [ 230.338577][ T5867] r8152-cfgselector 3-1: Needed 1 retries to read version [ 230.345841][ T5867] r8152-cfgselector 3-1: Unknown version 0x0000 [ 230.353989][ T5867] r8152-cfgselector 3-1: bad CDC descriptors [ 230.417588][ T5824] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 230.688532][ T7888] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 230.704151][ T7888] batman_adv: batadv0: Adding interface: gretap1 [ 230.710626][ T7888] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.736529][ T7888] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 231.577324][ T51] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 232.667490][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 232.804197][ T7908] FAULT_INJECTION: forcing a failure. [ 232.804197][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.836162][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.3.572 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 232.836187][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 232.836197][ T7908] Call Trace: [ 232.836203][ T7908] [ 232.836209][ T7908] dump_stack_lvl+0x16c/0x1f0 [ 232.836235][ T7908] should_fail_ex+0x50a/0x650 [ 232.836263][ T7908] _copy_from_user+0x2e/0xd0 [ 232.836281][ T7908] copy_msghdr_from_user+0x99/0x160 [ 232.836303][ T7908] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 232.836328][ T7908] ? __pfx___lock_acquire+0x10/0x10 [ 232.836359][ T7908] ___sys_recvmsg+0xdc/0x1a0 [ 232.836380][ T7908] ? __pfx____sys_recvmsg+0x10/0x10 [ 232.836399][ T7908] ? __pfx_lock_release+0x10/0x10 [ 232.836419][ T7908] ? trace_lock_acquire+0x14e/0x1f0 [ 232.836454][ T7908] do_recvmmsg+0x2f8/0x740 [ 232.836487][ T7908] ? __pfx_do_recvmmsg+0x10/0x10 [ 232.836507][ T7908] ? vfs_write+0x306/0x1150 [ 232.836538][ T7908] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 232.836566][ T7908] ? __fget_files+0x206/0x3a0 [ 232.836589][ T7908] __x64_sys_recvmmsg+0x239/0x290 [ 232.836613][ T7908] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 232.836639][ T7908] do_syscall_64+0xcd/0x250 [ 232.836658][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.836679][ T7908] RIP: 0033:0x7f51e038cde9 [ 232.836693][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.836710][ T7908] RSP: 002b:00007f51e11a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 232.836728][ T7908] RAX: ffffffffffffffda RBX: 00007f51e05a5fa0 RCX: 00007f51e038cde9 [ 232.836740][ T7908] RDX: 0000000000000001 RSI: 0000400000003b00 RDI: 0000000000000003 [ 232.836750][ T7908] RBP: 00007f51e11a0090 R08: 0000000000000000 R09: 0000000000000000 [ 232.836762][ T7908] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 232.836773][ T7908] R13: 0000000000000000 R14: 00007f51e05a5fa0 R15: 00007ffe4cd32348 [ 232.836798][ T7908] [ 233.089177][ T7918] FAULT_INJECTION: forcing a failure. [ 233.089177][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 233.145890][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.4.575 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 233.145917][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.145928][ T7918] Call Trace: [ 233.145933][ T7918] [ 233.145941][ T7918] dump_stack_lvl+0x16c/0x1f0 [ 233.145966][ T7918] should_fail_ex+0x50a/0x650 [ 233.145989][ T7918] ? fs_reclaim_acquire+0xae/0x150 [ 233.146015][ T7918] should_failslab+0xc2/0x120 [ 233.146034][ T7918] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 233.146054][ T7918] ? __alloc_skb+0x2b1/0x380 [ 233.146078][ T7918] __alloc_skb+0x2b1/0x380 [ 233.146098][ T7918] ? __pfx___alloc_skb+0x10/0x10 [ 233.146121][ T7918] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 233.146147][ T7918] netlink_alloc_large_skb+0x69/0x130 [ 233.146169][ T7918] netlink_sendmsg+0x689/0xd70 [ 233.146201][ T7918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.146231][ T7918] ____sys_sendmsg+0xaaf/0xc90 [ 233.146257][ T7918] ? copy_msghdr_from_user+0x10b/0x160 [ 233.146279][ T7918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.146315][ T7918] ___sys_sendmsg+0x135/0x1e0 [ 233.146337][ T7918] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.146369][ T7918] ? __pfx_lock_release+0x10/0x10 [ 233.146392][ T7918] ? trace_lock_acquire+0x14e/0x1f0 [ 233.146421][ T7918] ? __fget_files+0x206/0x3a0 [ 233.146444][ T7918] __sys_sendmsg+0x16e/0x220 [ 233.146465][ T7918] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.146488][ T7918] do_syscall_64+0xcd/0x250 [ 233.146501][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.146515][ T7918] RIP: 0033:0x7f82dd98cde9 [ 233.146524][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.146534][ T7918] RSP: 002b:00007f82de880038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.146544][ T7918] RAX: ffffffffffffffda RBX: 00007f82ddba5fa0 RCX: 00007f82dd98cde9 [ 233.146551][ T7918] RDX: 0000000000000808 RSI: 00004000000001c0 RDI: 0000000000000003 [ 233.146558][ T7918] RBP: 00007f82de880090 R08: 0000000000000000 R09: 0000000000000000 [ 233.146564][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.146569][ T7918] R13: 0000000000000000 R14: 00007f82ddba5fa0 R15: 00007ffd3dd30398 [ 233.146582][ T7918] [ 233.368180][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.582940][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 233.582956][ T29] audit: type=1400 audit(1739513787.922:1440): avc: denied { read write } for pid=7920 comm="syz.3.577" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.613382][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.619508][ T29] audit: type=1400 audit(1739513787.962:1441): avc: denied { open } for pid=7920 comm="syz.3.577" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.643806][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.879000][ T29] audit: type=1400 audit(1739513788.212:1442): avc: denied { read write } for pid=7920 comm="syz.3.577" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 233.999539][ T29] audit: type=1400 audit(1739513788.212:1443): avc: denied { open } for pid=7920 comm="syz.3.577" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.163096][ T5873] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 234.239588][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.437990][ T51] usb 5-1: device descriptor read/64, error -71 [ 234.849163][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 234.860355][ T5873] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 234.868524][ T5873] usb 2-1: config 0 has no interface number 0 [ 234.882453][ T5873] usb 2-1: config 0 interface 12 has no altsetting 0 [ 234.927885][ T5873] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 234.937268][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.947307][ T5873] usb 2-1: Product: syz [ 234.953742][ T5873] usb 2-1: Manufacturer: syz [ 234.958457][ T5873] usb 2-1: SerialNumber: syz [ 234.965974][ T5873] usb 2-1: config 0 descriptor?? [ 235.069276][ T29] audit: type=1400 audit(1739513789.402:1444): avc: denied { name_bind } for pid=7939 comm="syz.0.582" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 235.090360][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.259526][ T51] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 235.318639][ T29] audit: type=1400 audit(1739513789.652:1445): avc: denied { mounton } for pid=7942 comm="syz.3.583" path="/107/file0" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 235.341605][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.419603][ T51] usb 5-1: device descriptor read/64, error -71 [ 235.620756][ T51] usb usb5-port1: attempt power cycle [ 235.857802][ T7951] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 235.870424][ T7951] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 235.899824][ T29] audit: type=1400 audit(1739513790.242:1446): avc: denied { watch watch_reads } for pid=7950 comm="syz.3.585" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 235.973224][ T29] audit: type=1400 audit(1739513790.272:1447): avc: denied { setopt } for pid=7950 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.077146][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 236.110790][ T51] usb 5-1: device descriptor read/8, error -71 [ 236.119496][ T29] audit: type=1400 audit(1739513790.452:1448): avc: denied { create } for pid=7956 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.142941][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 236.359711][ T51] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 236.371727][ T29] audit: type=1400 audit(1739513790.602:1449): avc: denied { read write } for pid=7950 comm="syz.3.585" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.412425][ T51] usb 5-1: device descriptor read/8, error -71 [ 236.441843][ T7957] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.587'. [ 236.512351][ T5868] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 236.571717][ T51] usb usb5-port1: unable to enumerate USB device [ 236.604124][ T5873] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 236.612742][ T5873] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 236.620141][ T5873] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 236.632447][ T5873] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 236.654149][ T5873] usb 2-1: USB disconnect, device number 20 [ 236.741110][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.755701][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.765585][ T5868] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 236.775780][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.776493][ T7963] ip6t_srh: unknown srh match flags 4000 [ 236.785546][ T5868] usb 3-1: config 0 descriptor?? [ 236.848519][ T7966] netlink: 9 bytes leftover after parsing attributes in process `syz.3.590'. [ 237.463063][ T7971] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 238.278281][ T5868] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 239.239249][ T5868] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 239.247631][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 239.696987][ T5868] cp2112 0003:10C4:EA90.0010: error requesting version [ 239.867479][ T5868] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 239.881989][ T5868] usb 3-1: USB disconnect, device number 17 [ 240.029142][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 240.029158][ T29] audit: type=1400 audit(1739513794.362:1464): avc: denied { append } for pid=7987 comm="syz.2.597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 240.058001][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.092153][ T7989] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 240.143062][ T7991] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 240.200631][ T29] audit: type=1400 audit(1739513794.542:1465): avc: denied { listen } for pid=7987 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.266723][ T29] audit: type=1400 audit(1739513794.582:1466): avc: denied { accept } for pid=7987 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.376003][ T29] audit: type=1400 audit(1739513794.712:1467): avc: denied { write } for pid=7997 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.464266][ T29] audit: type=1400 audit(1739513794.712:1468): avc: denied { nlmsg_write } for pid=7997 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.499830][ T29] audit: type=1400 audit(1739513794.782:1469): avc: denied { create } for pid=7973 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.524516][ T29] audit: type=1400 audit(1739513794.792:1470): avc: denied { connect } for pid=7973 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.656448][ T29] audit: type=1400 audit(1739513794.802:1471): avc: denied { ioctl } for pid=7973 comm="syz.4.592" path="socket:[17286]" dev="sockfs" ino=17286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.319272][ T29] audit: type=1400 audit(1739513794.802:1472): avc: denied { write } for pid=7973 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.390675][ T29] audit: type=1400 audit(1739513794.802:1473): avc: denied { getopt } for pid=7973 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.339558][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 242.569640][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 242.737795][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.954685][ T25] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 242.968282][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.129590][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 243.152361][ T25] usb 3-1: Product: syz [ 243.173659][ T25] usb 3-1: Manufacturer: syz [ 243.184012][ T25] usb 3-1: SerialNumber: syz [ 243.222225][ T25] usb 3-1: config 0 descriptor?? [ 243.459592][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 243.466664][ T5873] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 243.487320][ T5873] usb 4-1: config 0 has no interface number 0 [ 243.506118][ T5873] usb 4-1: config 0 interface 12 has no altsetting 0 [ 243.518103][ T5873] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 243.534180][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.588943][ T5873] usb 4-1: Product: syz [ 243.603942][ T5873] usb 4-1: Manufacturer: syz [ 243.610734][ T5873] usb 4-1: SerialNumber: syz [ 243.617569][ T5873] usb 4-1: config 0 descriptor?? [ 243.960214][ T25] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 245.839055][ T8052] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 246.286581][ T25] usb 3-1: USB disconnect, device number 18 [ 246.380835][ T5873] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 246.389106][ T5873] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 246.399866][ T5873] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.407499][ T5873] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 246.419394][ T5873] usb 4-1: USB disconnect, device number 18 [ 246.834985][ T8061] 9p: Unknown access argument cli: -22 [ 247.107975][ T8067] overlay: Unknown parameter 'obj_user' [ 247.268330][ T8068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 247.274880][ T8068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.604748][ T8068] vhci_hcd vhci_hcd.0: Device attached [ 247.628655][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 247.637595][ T8073] netlink: 'syz.4.619': attribute type 7 has an invalid length. [ 247.645331][ T8073] netlink: 'syz.4.619': attribute type 8 has an invalid length. [ 247.652996][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 247.714893][ T8073] ip6gretap0: entered promiscuous mode [ 247.721507][ T8073] syz_tun: entered promiscuous mode [ 247.727017][ T8073] gretap0: entered promiscuous mode [ 247.732508][ T8073] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 247.740099][ T8073] Cannot create hsr debugfs directory [ 247.769569][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 247.769592][ T29] audit: type=1400 audit(1739513802.102:1480): avc: denied { read } for pid=8076 comm="syz.3.620" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.802274][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 247.815392][ T5873] vhci_hcd: vhci_device speed not set [ 247.881328][ T29] audit: type=1400 audit(1739513802.102:1481): avc: denied { open } for pid=8076 comm="syz.3.620" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.909623][ T5873] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 247.917126][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 248.101075][ T9] usb 1-1: config index 0 descriptor too short (expected 8224, got 27) [ 248.109518][ T9] usb 1-1: config 52 has an invalid descriptor of length 122, skipping remainder of the config [ 248.154355][ T9] usb 1-1: config 52 has 0 interfaces, different from the descriptor's value: 32 [ 248.174017][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.196506][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.229598][ T51] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.338241][ T8091] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 248.353215][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.405103][ T29] audit: type=1400 audit(1739513802.742:1482): avc: denied { execute_no_trans } for pid=8083 comm="syz.4.623" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.409616][ T51] usb 4-1: device descriptor read/64, error -71 [ 248.436253][ T9] usb 1-1: string descriptor 0 read error: -71 [ 248.445037][ T9] usb 1-1: USB disconnect, device number 16 [ 248.454508][ T8070] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 248.463832][ T12] vhci_hcd: stop threads [ 248.468186][ T12] vhci_hcd: release socket [ 248.472813][ T12] vhci_hcd: disconnect device [ 248.709536][ T51] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 248.840053][ T51] usb 4-1: device descriptor read/64, error -71 [ 248.951283][ T51] usb usb4-port1: attempt power cycle [ 249.620924][ T51] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.706744][ T51] usb 4-1: device descriptor read/8, error -71 [ 250.066489][ T51] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 250.161227][ T51] usb 4-1: device descriptor read/8, error -71 [ 250.248273][ T5868] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 250.326001][ T51] usb usb4-port1: unable to enumerate USB device [ 250.360730][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 250.362092][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.519959][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 250.530960][ T5868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.541063][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.549103][ T5868] usb 1-1: Product: syz [ 250.557747][ T5868] usb 1-1: Manufacturer: syz [ 250.562452][ T5868] usb 1-1: SerialNumber: syz [ 250.571938][ T5868] usb 1-1: config 0 descriptor?? [ 250.989869][ T5868] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 251.513626][ T29] audit: type=1400 audit(1739513805.852:1483): avc: denied { create } for pid=8118 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.553016][ T5868] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 251.598522][ T29] audit: type=1400 audit(1739513805.872:1484): avc: denied { write } for pid=8118 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.618306][ T5868] usb 1-1: USB disconnect, device number 17 [ 251.714754][ T29] audit: type=1400 audit(1739513806.052:1485): avc: denied { append } for pid=8129 comm="syz.0.635" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 251.836457][ T29] audit: type=1400 audit(1739513806.082:1486): avc: denied { read } for pid=8129 comm="syz.0.635" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.002948][ T29] audit: type=1400 audit(1739513806.082:1487): avc: denied { open } for pid=8129 comm="syz.0.635" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.026343][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.032731][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 252.209740][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.226955][ T9] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 252.245595][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.285954][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 252.315525][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.353926][ T9] usb 4-1: Product: syz [ 252.373933][ T9] usb 4-1: Manufacturer: syz [ 252.391849][ T9] usb 4-1: SerialNumber: syz [ 252.415144][ T9] usb 4-1: config 0 descriptor?? [ 252.710010][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 252.883331][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.908097][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.939552][ T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 252.958874][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.991784][ T9] usb 3-1: config 0 descriptor?? [ 253.070083][ T5873] vhci_hcd: vhci_device speed not set [ 253.215874][ T8145] netlink: 176 bytes leftover after parsing attributes in process `syz.2.638'. [ 253.229925][ T8145] netlink: 176 bytes leftover after parsing attributes in process `syz.2.638'. [ 253.270112][ T5868] wlan0 speed is unknown, defaulting to 1000 [ 253.285554][ T9] usb 3-1: USB disconnect, device number 19 [ 253.354933][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 253.623633][ T8161] overlay: Unknown parameter 'smackfsdef' [ 253.998797][ T8173] Mount JFS Failure: -22 [ 254.012877][ T8173] jfs_mount failed w/return code = -22 [ 254.478600][ T8183] FAULT_INJECTION: forcing a failure. [ 254.478600][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 254.573217][ T8183] CPU: 1 UID: 0 PID: 8183 Comm: syz.2.645 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 254.573243][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.573252][ T8183] Call Trace: [ 254.573258][ T8183] [ 254.573267][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 254.573294][ T8183] should_fail_ex+0x50a/0x650 [ 254.573319][ T8183] ? fs_reclaim_acquire+0xae/0x150 [ 254.573346][ T8183] should_failslab+0xc2/0x120 [ 254.573365][ T8183] __kmalloc_node_noprof+0xd1/0x510 [ 254.573384][ T8183] ? pipe_lock+0x64/0x80 [ 254.573400][ T8183] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 254.573431][ T8183] __kvmalloc_node_noprof+0xad/0x1a0 [ 254.573457][ T8183] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 254.573477][ T8183] fuse_dev_splice_read+0x104/0x490 [ 254.573501][ T8183] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 254.573532][ T8183] ? inode_security+0x101/0x130 [ 254.573558][ T8183] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 254.573580][ T8183] do_splice_read+0x282/0x370 [ 254.573607][ T8183] splice_file_to_pipe+0x109/0x120 [ 254.573635][ T8183] do_splice+0x1182/0x1f70 [ 254.573685][ T8183] ? __pfx_do_splice+0x10/0x10 [ 254.573712][ T8183] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 254.573736][ T8183] ? __pfx_lock_release+0x10/0x10 [ 254.573758][ T8183] ? trace_lock_acquire+0x14e/0x1f0 [ 254.573783][ T8183] __do_splice+0x159/0x360 [ 254.573810][ T8183] ? __pfx___do_splice+0x10/0x10 [ 254.573833][ T8183] ? __fget_files+0x206/0x3a0 [ 254.573857][ T8183] __x64_sys_splice+0x187/0x250 [ 254.573885][ T8183] do_syscall_64+0xcd/0x250 [ 254.573908][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.573931][ T8183] RIP: 0033:0x7fb0d2d8cde9 [ 254.573947][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.573999][ T8183] RSP: 002b:00007fb0d3b51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 254.574018][ T8183] RAX: ffffffffffffffda RBX: 00007fb0d2fa5fa0 RCX: 00007fb0d2d8cde9 [ 254.574029][ T8183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.574038][ T8183] RBP: 00007fb0d3b51090 R08: 0000000000002000 R09: 0000000000000000 [ 254.574048][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.574059][ T8183] R13: 0000000000000000 R14: 00007fb0d2fa5fa0 R15: 00007ffc9ab2f048 [ 254.574084][ T8183] [ 254.811623][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.869375][ T5873] usb 4-1: USB disconnect, device number 23 [ 255.478500][ T29] audit: type=1400 audit(1739513809.812:1488): avc: denied { write } for pid=8188 comm="syz.4.648" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 255.722388][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728700][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.753208][ T8207] wlan0 speed is unknown, defaulting to 1000 [ 256.967871][ T29] audit: type=1400 audit(1739513810.892:1489): avc: denied { getopt } for pid=8196 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.989561][ T29] audit: type=1400 audit(1739513810.892:1490): avc: denied { create } for pid=8196 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 257.019689][ T29] audit: type=1400 audit(1739513810.892:1491): avc: denied { write } for pid=8196 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 257.044483][ T29] audit: type=1400 audit(1739513811.072:1492): avc: denied { read } for pid=8202 comm="syz.4.651" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 257.221084][ T29] audit: type=1400 audit(1739513811.072:1493): avc: denied { open } for pid=8202 comm="syz.4.651" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 257.349593][ T29] audit: type=1400 audit(1739513811.082:1494): avc: denied { write } for pid=8202 comm="syz.4.651" path="socket:[18633]" dev="sockfs" ino=18633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.414051][ T8213] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 257.415351][ T29] audit: type=1400 audit(1739513811.212:1495): avc: denied { create } for pid=8202 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 257.465772][ T29] audit: type=1400 audit(1739513811.732:1496): avc: denied { append } for pid=8212 comm="syz.2.654" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.533587][ T29] audit: type=1400 audit(1739513811.832:1497): avc: denied { create } for pid=8214 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.814027][ T5868] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 258.066749][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.075087][ T5868] usb 4-1: not running at top speed; connect to a high speed hub [ 258.095401][ T5868] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 258.145453][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.207093][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.216389][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.240268][ T5868] usb 4-1: Product: о [ 258.249850][ T5868] usb 4-1: Manufacturer: ⾍赵⿈彲蝗뷨⎍ጄ됽⋥ꃾ᭶㥎Ʈᔖ쌚볃✋䧖ᄴߧ뱋 㲴熱⪛罾⯮懦䚏눰口习跳♟鼜꟨芑ニ让餀埖溤쌚걠너莂☗픖켑댶騝䄡绸矙켏勚罍歟㣰墎蓿ᄹ㮔⇚艺㘴網玀⒘ᤎ맲稾작Ґ켨ᒈ雅쯈벲䱔玟ꝲ㻟齧 [ 258.355157][ T5868] usb 4-1: SerialNumber: 緖䕤峽䕯䍵씵㾩ꪫㅭ䑐ቂ苤쌉偫獕񞬵­㮍꾒ې啸〨棧⽾驜촪Ẁ実ᣠ젰꾢꽏ṋ㦹赪髟ꢫ烲ꁩ욞뉻븡쇢▞賞⿡Ж俛똦儝⨟䃇ꔩ㚸呦讓ﹸ鏱㆓뢆厉氆ꤣ阏݉컓へ㒇ڶጐ숁⎞⑋怇꜍樳羒 [ 258.523838][ T8232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.568950][ T8236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.299596][ T8220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8220 comm=syz.3.655 [ 259.519665][ T5873] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 259.692825][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 259.711262][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 259.720295][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 260.435635][ T5873] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 260.444923][ T5873] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 260.456046][ T5873] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.465933][ T5873] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 260.476003][ T5873] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.511435][ T5873] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.528425][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.564540][ T5873] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 260.582980][ T5868] usb 4-1: 0:2 : does not exist [ 260.599799][ T5873] usb 1-1: no configuration chosen from 1 choice [ 260.617533][ T5868] usb 4-1: USB disconnect, device number 24 [ 260.651426][ T8258] xt_HMARK: spi-set and port-set can't be combined [ 260.805383][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 260.805425][ T29] audit: type=1400 audit(1739513815.132:1504): avc: denied { shutdown } for pid=8257 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.379548][ T29] audit: type=1326 audit(1739513815.712:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.3.668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51e038cde9 code=0x0 [ 261.484929][ T8266] ======================================================= [ 261.484929][ T8266] WARNING: The mand mount option has been deprecated and [ 261.484929][ T8266] and is ignored by this kernel. Remove the mand [ 261.484929][ T8266] option from the mount to silence this warning. [ 261.484929][ T8266] ======================================================= [ 261.520530][ T8266] tmpfs: Unknown parameter 'usrqa' [ 261.737617][ T29] audit: type=1400 audit(1739513815.822:1506): avc: denied { mounton } for pid=8259 comm="syz.3.668" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 261.959535][ T5873] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 262.170004][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.199634][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.235583][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 262.245304][ T5867] usb 1-1: USB disconnect, device number 18 [ 262.279607][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.329054][ T5873] usb 5-1: config 0 descriptor?? [ 262.365609][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.392685][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.033547][ T8285] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 263.071082][ T5873] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 263.084559][ T5873] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 263.084868][ T8282] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 263.105765][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.280464][ T5873] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 264.559681][ T5873] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 264.839371][ T51] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 264.873878][ T8298] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 264.893398][ T8298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.979616][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 265.016365][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 265.063112][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.096859][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.127057][ T51] usb 4-1: Product: syz [ 265.210672][ T51] usb 4-1: Manufacturer: syz [ 265.215530][ T51] usb 4-1: SerialNumber: syz [ 265.260422][ T51] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 265.279377][ T51] usb 4-1: no configuration chosen from 1 choice [ 265.480820][ T29] audit: type=1400 audit(1739513819.822:1507): avc: denied { getattr } for pid=8306 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 266.202031][ T5873] usb 5-1: USB disconnect, device number 31 [ 266.403470][ T8319] program syz.0.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.503948][ T25] usb 4-1: USB disconnect, device number 25 [ 267.640332][ T29] audit: type=1400 audit(1739513821.932:1508): avc: denied { setopt } for pid=8330 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.958512][ T29] audit: type=1400 audit(1739513821.932:1509): avc: denied { map } for pid=8330 comm="syz.4.687" path="socket:[18928]" dev="sockfs" ino=18928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.078170][ T29] audit: type=1400 audit(1739513821.932:1510): avc: denied { read } for pid=8330 comm="syz.4.687" path="socket:[18928]" dev="sockfs" ino=18928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.102308][ T29] audit: type=1400 audit(1739513822.422:1511): avc: denied { append } for pid=8334 comm="syz.3.688" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.126049][ T29] audit: type=1400 audit(1739513822.422:1512): avc: denied { ioctl } for pid=8334 comm="syz.3.688" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.497534][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 268.908725][ T8347] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 269.308509][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 269.315763][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.329658][ T5873] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 269.333594][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 269.348047][ T25] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 269.379617][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.401398][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.422359][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.450459][ T25] usb 4-1: Product: syz [ 269.479068][ T25] usb 4-1: Manufacturer: syz [ 269.502317][ T25] usb 4-1: SerialNumber: syz [ 269.556487][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 269.566659][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.578383][ T5873] usb 2-1: config 0 descriptor?? [ 269.587153][ T5873] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 269.597680][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 269.720936][ T5873] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 269.732327][ T25] usb 4-1: 0:2 : does not exist [ 269.740912][ T29] audit: type=1400 audit(1739513824.062:1513): avc: denied { bind } for pid=8334 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 269.746271][ T25] usb 4-1: USB disconnect, device number 26 [ 269.868291][ T5873] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 269.932873][ T5873] usb 2-1: media controller created [ 270.016208][ T29] audit: type=1400 audit(1739513824.062:1514): avc: denied { write } for pid=8334 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.110026][ T5873] dvb-usb: bulk message failed: -22 (5/0) [ 270.116530][ T5873] dvb-usb: MAC address reading failed. [ 270.140693][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.162085][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 270.169163][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 270.193233][ T5873] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 270.212213][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 270.238626][ T5873] dvb-usb: schedule remote query interval to 100 msecs. [ 270.245752][ T5873] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 270.260732][ T5873] usb 2-1: USB disconnect, device number 21 [ 270.278976][ T5873] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 270.619573][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 270.770070][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 270.776546][ T25] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 270.784739][ T25] usb 3-1: config 0 has no interface number 0 [ 270.790867][ T25] usb 3-1: config 0 interface 12 has no altsetting 0 [ 270.798944][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 270.808293][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.816289][ T25] usb 3-1: Product: syz [ 270.820533][ T25] usb 3-1: Manufacturer: syz [ 270.825129][ T25] usb 3-1: SerialNumber: syz [ 270.831066][ T25] usb 3-1: config 0 descriptor?? [ 270.999565][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 271.674932][ T25] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 271.683287][ T25] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 271.690646][ T25] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 271.698225][ T25] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 271.709321][ T25] usb 3-1: USB disconnect, device number 20 [ 299.195401][ T29] audit: type=1400 audit(1739513853.532:1515): avc: denied { ioctl } for pid=8367 comm="syz.2.698" path="socket:[18213]" dev="sockfs" ino=18213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.224564][ T8368] ntfs3(nullb0): Primary boot signature is not NTFS. [ 299.248248][ T8368] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 299.348043][ T29] audit: type=1400 audit(1739513853.602:1516): avc: denied { listen } for pid=8363 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 299.936507][ T8378] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 300.289550][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 300.455896][ T5867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 300.499519][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.534389][ T5867] usb 1-1: Product: syz [ 300.544433][ T5867] usb 1-1: Manufacturer: syz [ 300.549080][ T5867] usb 1-1: SerialNumber: syz [ 300.582264][ T5867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 300.611917][ T5868] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 300.853514][ T29] audit: type=1400 audit(1739513855.192:1517): avc: denied { ioctl } for pid=8389 comm="syz.1.703" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.538615][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 301.563583][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.574102][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.639632][ T5868] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 301.673348][ T5868] ath9k_htc: Failed to initialize the device [ 301.758394][ T5868] usb 1-1: ath9k_htc: USB layer deinitialized [ 302.171938][ T974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.363560][ T974] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 302.391270][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.537801][ T974] usb 3-1: Product: syz [ 302.547392][ T974] usb 3-1: Manufacturer: syz [ 302.557469][ T974] usb 3-1: SerialNumber: syz [ 302.567577][ T974] usb 3-1: config 0 descriptor?? [ 302.581910][ T974] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 302.591348][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 302.609196][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.646176][ T29] audit: type=1400 audit(1739513856.962:1518): avc: denied { create } for pid=8413 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 302.669930][ T974] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 302.681177][ T974] usb 3-1: media controller created [ 302.710749][ T29] audit: type=1400 audit(1739513856.962:1519): avc: denied { connect } for pid=8413 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 302.719222][ T25] usb 1-1: USB disconnect, device number 19 [ 302.737476][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.746804][ T29] audit: type=1400 audit(1739513856.972:1520): avc: denied { write } for pid=8413 comm="syz.1.710" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.080742][ T974] DVB: Unable to find symbol mt352_attach() [ 303.121044][ T974] DVB: Unable to find symbol nxt6000_attach() [ 303.127191][ T974] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 303.151213][ T974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 303.180489][ T974] dvb-usb: schedule remote query interval to 1000 msecs. [ 303.188342][ T974] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 303.219488][ T974] dvb-usb: bulk message failed: -22 (7/0) [ 303.225325][ T974] dvb-usb: bulk message failed: -22 (7/0) [ 303.249866][ T974] usb 3-1: USB disconnect, device number 21 [ 303.283191][ T974] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 303.592443][ T8437] FAULT_INJECTION: forcing a failure. [ 303.592443][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.643450][ T8437] CPU: 0 UID: 0 PID: 8437 Comm: syz.4.715 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 303.643477][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 303.643495][ T8437] Call Trace: [ 303.643501][ T8437] [ 303.643508][ T8437] dump_stack_lvl+0x16c/0x1f0 [ 303.643536][ T8437] should_fail_ex+0x50a/0x650 [ 303.643565][ T8437] _copy_from_user+0x2e/0xd0 [ 303.643584][ T8437] copy_msghdr_from_user+0x99/0x160 [ 303.643608][ T8437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 303.643643][ T8437] ___sys_sendmsg+0xff/0x1e0 [ 303.643666][ T8437] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.643699][ T8437] ? __pfx_lock_release+0x10/0x10 [ 303.643722][ T8437] ? trace_lock_acquire+0x14e/0x1f0 [ 303.643751][ T8437] ? __fget_files+0x206/0x3a0 [ 303.643775][ T8437] __sys_sendmsg+0x16e/0x220 [ 303.643797][ T8437] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.643836][ T8437] do_syscall_64+0xcd/0x250 [ 303.643859][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.643882][ T8437] RIP: 0033:0x7f82dd98cde9 [ 303.643898][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.643914][ T8437] RSP: 002b:00007f82de880038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.643932][ T8437] RAX: ffffffffffffffda RBX: 00007f82ddba5fa0 RCX: 00007f82dd98cde9 [ 303.643944][ T8437] RDX: 0000000000000000 RSI: 0000400000000780 RDI: 0000000000000004 [ 303.643956][ T8437] RBP: 00007f82de880090 R08: 0000000000000000 R09: 0000000000000000 [ 303.643967][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.643992][ T8437] R13: 0000000000000000 R14: 00007f82ddba5fa0 R15: 00007ffd3dd30398 [ 303.644021][ T8437] [ 303.649804][ T8434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 303.827214][ T8434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 303.834633][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.853398][ T8434] vhci_hcd vhci_hcd.0: Device attached [ 304.028651][ T8444] ALSA: mixer_oss: invalid OSS volume '' [ 304.034574][ T5868] vhci_hcd: vhci_device speed not set [ 304.099596][ T5868] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 304.132976][ T29] audit: type=1400 audit(1739513858.472:1521): avc: denied { map } for pid=8445 comm="syz.3.719" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.156001][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.156065][ T974] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 304.228656][ T29] audit: type=1400 audit(1739513858.472:1522): avc: denied { execute } for pid=8445 comm="syz.3.719" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.251911][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.258063][ T5873] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 304.306626][ T974] usb 2-1: config index 0 descriptor too short (expected 8224, got 27) [ 304.314925][ T29] audit: type=1400 audit(1739513858.502:1523): avc: denied { ioctl } for pid=8445 comm="syz.3.719" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.368438][ T974] usb 2-1: config 52 has an invalid descriptor of length 122, skipping remainder of the config [ 304.379184][ T974] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 32 [ 304.388718][ T974] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.401140][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.422343][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.433833][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.444143][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 304.453706][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.493352][ T5873] usb 5-1: config 0 descriptor?? [ 304.616155][ T8438] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 304.623778][ T974] usb 2-1: string descriptor 0 read error: -71 [ 304.651339][ T974] usb 2-1: USB disconnect, device number 22 [ 304.657498][ T12] vhci_hcd: stop threads [ 304.669658][ T12] vhci_hcd: release socket [ 304.674390][ T12] vhci_hcd: disconnect device [ 304.702111][ T29] audit: type=1400 audit(1739513859.042:1524): avc: denied { mounton } for pid=8451 comm="syz.0.721" path="/proc/552/task" dev="proc" ino=19540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 304.719584][ T5867] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 304.746813][ T29] audit: type=1400 audit(1739513859.042:1525): avc: denied { mount } for pid=8451 comm="syz.0.721" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.879586][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 304.891224][ T5867] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 304.909579][ T5867] usb 4-1: config 0 has no interface number 0 [ 304.918083][ T5867] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=66.39 [ 304.930455][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.938495][ T5867] usb 4-1: Product: syz [ 304.953255][ T5867] usb 4-1: Manufacturer: syz [ 304.957905][ T5867] usb 4-1: SerialNumber: syz [ 304.990886][ T5867] usb 4-1: config 0 descriptor?? [ 305.011893][ T5873] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 305.020836][ T5867] ftdi_sio 4-1:0.110: FTDI USB Serial Device converter detected [ 305.031628][ T5873] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 305.057938][ T5867] ftdi_sio ttyUSB0: unknown device type: 0x6639 [ 305.158115][ T8457] syz.0.722 (8457): drop_caches: 0 [ 305.176966][ T8457] overlayfs: conflicting options: nfs_export=on,index=off [ 305.224889][ T8457] team0: No ports can be present during mode change [ 305.244500][ T8457] vlan0: entered promiscuous mode [ 305.291350][ T29] audit: type=1400 audit(1739513859.572:1526): avc: denied { bind } for pid=8454 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.622313][ T8457] team0: Port device vlan0 added [ 305.636701][ T5873] cp2112 0003:10C4:EA90.0012: error requesting version [ 305.645616][ T5873] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 305.656379][ T5873] usb 5-1: USB disconnect, device number 32 [ 305.664625][ T29] audit: type=1400 audit(1739513859.572:1527): avc: denied { name_bind } for pid=8454 comm="syz.0.722" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 305.694872][ T29] audit: type=1400 audit(1739513859.572:1528): avc: denied { node_bind } for pid=8454 comm="syz.0.722" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 306.539912][ T5873] usb 4-1: USB disconnect, device number 27 [ 306.546799][ T5873] ftdi_sio 4-1:0.110: device disconnected [ 306.613934][ T29] audit: type=1400 audit(1739513860.952:1529): avc: denied { setopt } for pid=8463 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.885799][ T8470] FAULT_INJECTION: forcing a failure. [ 306.885799][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 306.898523][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.3.725 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 306.898546][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 306.898557][ T8470] Call Trace: [ 306.898563][ T8470] [ 306.898570][ T8470] dump_stack_lvl+0x16c/0x1f0 [ 306.898596][ T8470] should_fail_ex+0x50a/0x650 [ 306.898621][ T8470] ? fs_reclaim_acquire+0xae/0x150 [ 306.898648][ T8470] ? tomoyo_encode2+0x100/0x3e0 [ 306.898671][ T8470] should_failslab+0xc2/0x120 [ 306.898692][ T8470] __kmalloc_noprof+0xcb/0x510 [ 306.898714][ T8470] ? rcu_is_watching+0x12/0xc0 [ 306.898737][ T8470] tomoyo_encode2+0x100/0x3e0 [ 306.898764][ T8470] tomoyo_encode+0x29/0x50 [ 306.898787][ T8470] tomoyo_realpath_from_path+0x19d/0x720 [ 306.898814][ T8470] ? tomoyo_path_number_perm+0x235/0x590 [ 306.898839][ T8470] tomoyo_path_number_perm+0x248/0x590 [ 306.898859][ T8470] ? tomoyo_path_number_perm+0x235/0x590 [ 306.898883][ T8470] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.898932][ T8470] ? __pfx_lock_release+0x10/0x10 [ 306.898956][ T8470] ? trace_lock_acquire+0x14e/0x1f0 [ 306.898981][ T8470] ? lock_acquire+0x2f/0xb0 [ 306.899002][ T8470] ? __fget_files+0x40/0x3a0 [ 306.899023][ T8470] ? __fget_files+0x206/0x3a0 [ 306.899045][ T8470] security_file_ioctl+0x9b/0x240 [ 306.899076][ T8470] __x64_sys_ioctl+0xb7/0x200 [ 306.899102][ T8470] do_syscall_64+0xcd/0x250 [ 306.899125][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.899149][ T8470] RIP: 0033:0x7f51e038cde9 [ 306.899165][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.899182][ T8470] RSP: 002b:00007f51e115e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.899199][ T8470] RAX: ffffffffffffffda RBX: 00007f51e05a6160 RCX: 00007f51e038cde9 [ 306.899212][ T8470] RDX: 0000400000000040 RSI: 00000000000089e0 RDI: 0000000000000006 [ 306.899224][ T8470] RBP: 00007f51e115e090 R08: 0000000000000000 R09: 0000000000000000 [ 306.899235][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.899246][ T8470] R13: 0000000000000000 R14: 00007f51e05a6160 R15: 00007ffe4cd32348 [ 306.899272][ T8470] [ 306.899354][ T8470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.070063][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.135170][ T29] audit: type=1400 audit(1739513861.472:1530): avc: denied { ioctl } for pid=8465 comm="syz.3.725" path="socket:[19310]" dev="sockfs" ino=19310 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.279683][ T29] audit: type=1400 audit(1739513861.622:1531): avc: denied { ioctl } for pid=8472 comm="syz.1.726" path="socket:[19325]" dev="sockfs" ino=19325 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 307.863667][ T8487] FAULT_INJECTION: forcing a failure. [ 307.863667][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 307.890858][ T8487] CPU: 1 UID: 0 PID: 8487 Comm: syz.1.728 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 307.890885][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.890894][ T8487] Call Trace: [ 307.890899][ T8487] [ 307.890906][ T8487] dump_stack_lvl+0x16c/0x1f0 [ 307.890930][ T8487] should_fail_ex+0x50a/0x650 [ 307.890952][ T8487] ? fs_reclaim_acquire+0xae/0x150 [ 307.890977][ T8487] should_failslab+0xc2/0x120 [ 307.890995][ T8487] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 307.891014][ T8487] ? ptlock_alloc+0x1f/0x70 [ 307.891035][ T8487] ptlock_alloc+0x1f/0x70 [ 307.891051][ T8487] pte_alloc_one+0x74/0x390 [ 307.891077][ T8487] __pte_alloc+0x6e/0x3d0 [ 307.891099][ T8487] ? __pfx___pte_alloc+0x10/0x10 [ 307.891118][ T8487] ? __pfx_lock_release+0x10/0x10 [ 307.891140][ T8487] ? do_raw_spin_lock+0x12d/0x2c0 [ 307.891158][ T8487] do_pte_missing+0x2828/0x3e10 [ 307.891178][ T8487] ? _raw_spin_unlock+0x28/0x50 [ 307.891199][ T8487] ? __pmd_alloc+0x3c2/0x870 [ 307.891223][ T8487] __handle_mm_fault+0x1166/0x2c60 [ 307.891247][ T8487] ? __pfx___handle_mm_fault+0x10/0x10 [ 307.891262][ T8487] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 307.891298][ T8487] ? find_vma+0xc0/0x140 [ 307.891321][ T8487] ? __pfx_find_vma+0x10/0x10 [ 307.891345][ T8487] handle_mm_fault+0x3fa/0xaa0 [ 307.891367][ T8487] do_user_addr_fault+0x7a3/0x13f0 [ 307.891394][ T8487] exc_page_fault+0x5c/0xc0 [ 307.891412][ T8487] asm_exc_page_fault+0x26/0x30 [ 307.891432][ T8487] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 307.891460][ T8487] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 307.891475][ T8487] RSP: 0018:ffffc900025efc20 EFLAGS: 00050206 [ 307.891489][ T8487] RAX: 0000000000000001 RBX: 0000000000000090 RCX: 0000000000000090 [ 307.891500][ T8487] RDX: fffff520004bdfa4 RSI: ffffc900025efc90 RDI: 0000400000000440 [ 307.891512][ T8487] RBP: 0000400000000440 R08: 0000000000000000 R09: fffff520004bdfa3 [ 307.891524][ T8487] R10: ffffc900025efd1f R11: 0000000000000000 R12: ffffc900025efc90 [ 307.891536][ T8487] R13: 00004000000004d0 R14: 00007ffffffff000 R15: 0000000000000000 [ 307.891561][ T8487] _copy_to_user+0xbb/0xd0 [ 307.891582][ T8487] cp_new_stat+0x469/0x5a0 [ 307.891602][ T8487] ? __pfx_cp_new_stat+0x10/0x10 [ 307.891631][ T8487] ? vfs_write+0x306/0x1150 [ 307.891657][ T8487] ? putname+0x12/0x180 [ 307.891681][ T8487] __do_sys_newfstatat+0x11a/0x130 [ 307.891703][ T8487] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 307.891723][ T8487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.891763][ T8487] ? ksys_write+0x1ba/0x250 [ 307.891785][ T8487] ? __pfx_ksys_write+0x10/0x10 [ 307.891816][ T8487] do_syscall_64+0xcd/0x250 [ 307.891836][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.891858][ T8487] RIP: 0033:0x7fe51038cde9 [ 307.891872][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.891888][ T8487] RSP: 002b:00007fe511299038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 307.891903][ T8487] RAX: ffffffffffffffda RBX: 00007fe5105a5fa0 RCX: 00007fe51038cde9 [ 307.891914][ T8487] RDX: 0000400000000440 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 307.891925][ T8487] RBP: 00007fe511299090 R08: 0000000000000000 R09: 0000000000000000 [ 307.891935][ T8487] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 307.891945][ T8487] R13: 0000000000000001 R14: 00007fe5105a5fa0 R15: 00007ffe626f8d68 [ 307.891968][ T8487] [ 308.246111][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.252682][ T8488] nvme_fabrics: missing parameter 'transport=%s' [ 308.259180][ T8488] nvme_fabrics: missing parameter 'nqn=%s' [ 308.455131][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 308.747961][ T8509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 308.754527][ T8509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 308.933850][ T8509] vhci_hcd vhci_hcd.0: Device attached [ 309.264848][ T5867] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 309.445251][ T5867] usb 2-1: config index 0 descriptor too short (expected 8224, got 27) [ 309.642113][ T5867] usb 2-1: config 52 has an invalid descriptor of length 122, skipping remainder of the config [ 309.653661][ T5867] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 32 [ 309.663262][ T5867] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.672424][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.980090][ T974] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 310.047477][ T8510] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 310.057592][ T5867] usb 2-1: string descriptor 0 read error: -71 [ 310.065614][ T52] vhci_hcd: stop threads [ 310.085323][ T52] vhci_hcd: release socket [ 310.085529][ T5867] usb 2-1: USB disconnect, device number 23 [ 310.143113][ T52] vhci_hcd: disconnect device [ 310.200005][ T5868] vhci_hcd: vhci_device speed not set [ 310.219961][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 310.231637][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 310.240608][ T8526] netlink: 'syz.0.739': attribute type 7 has an invalid length. [ 310.248217][ T8526] netlink: 'syz.0.739': attribute type 8 has an invalid length. [ 310.257245][ T974] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 310.265504][ T974] usb 3-1: config 0 has no interface number 0 [ 310.271898][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 310.300234][ T974] usb 3-1: too many endpoints for config 0 interface 51 altsetting 0: 126, using maximum allowed: 30 [ 310.324272][ T974] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 310.325343][ T8526] syz_tun: entered promiscuous mode [ 310.365183][ T974] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 310.376434][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.388503][ T974] usb 3-1: Product: syz [ 310.496157][ T974] usb 3-1: Manufacturer: syz [ 310.500858][ T974] usb 3-1: SerialNumber: syz [ 310.508092][ T974] usb 3-1: config 0 descriptor?? [ 310.533262][ T8526] syz_tun: left promiscuous mode [ 310.877925][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.740'. [ 311.538851][ T974] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 311.563311][ T974] usb 3-1: qt2_attach - failed to power on unit: -71 [ 311.680238][ T974] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 312.089920][ T974] usb 3-1: USB disconnect, device number 22 [ 312.689362][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 312.703740][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 312.703755][ T29] audit: type=1400 audit(1739513867.042:1535): avc: denied { recv } for pid=5805 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.118 dest=44382 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 312.728234][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 312.902294][ T974] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 313.033981][ T29] audit: type=1400 audit(1739513867.242:1536): avc: denied { create } for pid=8546 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 313.222917][ T8547] trusted_key: syz.0.743 sent an empty control message without MSG_MORE. [ 313.478156][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.509517][ T974] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.533585][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.564323][ T974] usb 3-1: config 0 descriptor?? [ 313.565015][ T8552] FAULT_INJECTION: forcing a failure. [ 313.565015][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 313.634075][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.1.746 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 313.634105][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.634116][ T8552] Call Trace: [ 313.634122][ T8552] [ 313.634129][ T8552] dump_stack_lvl+0x16c/0x1f0 [ 313.634155][ T8552] should_fail_ex+0x50a/0x650 [ 313.634180][ T8552] ? fs_reclaim_acquire+0xae/0x150 [ 313.634208][ T8552] ? tomoyo_encode2+0x100/0x3e0 [ 313.634231][ T8552] should_failslab+0xc2/0x120 [ 313.634252][ T8552] __kmalloc_noprof+0xcb/0x510 [ 313.634270][ T8552] ? d_absolute_path+0x137/0x1b0 [ 313.634293][ T8552] ? rcu_is_watching+0x12/0xc0 [ 313.634316][ T8552] tomoyo_encode2+0x100/0x3e0 [ 313.634344][ T8552] tomoyo_encode+0x29/0x50 [ 313.634365][ T8552] tomoyo_realpath_from_path+0x19d/0x720 [ 313.634398][ T8552] tomoyo_path_number_perm+0x248/0x590 [ 313.634418][ T8552] ? tomoyo_path_number_perm+0x235/0x590 [ 313.634442][ T8552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.634489][ T8552] ? __pfx_lock_release+0x10/0x10 [ 313.634511][ T8552] ? trace_lock_acquire+0x14e/0x1f0 [ 313.634534][ T8552] ? lock_acquire+0x2f/0xb0 [ 313.634555][ T8552] ? __fget_files+0x40/0x3a0 [ 313.634576][ T8552] ? __fget_files+0x206/0x3a0 [ 313.634597][ T8552] security_file_ioctl+0x9b/0x240 [ 313.634622][ T8552] __x64_sys_ioctl+0xb7/0x200 [ 313.634648][ T8552] do_syscall_64+0xcd/0x250 [ 313.634675][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.634699][ T8552] RIP: 0033:0x7fe51038cde9 [ 313.634714][ T8552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.634731][ T8552] RSP: 002b:00007fe511299038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.634750][ T8552] RAX: ffffffffffffffda RBX: 00007fe5105a5fa0 RCX: 00007fe51038cde9 [ 313.634762][ T8552] RDX: 0000400000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 313.634774][ T8552] RBP: 00007fe511299090 R08: 0000000000000000 R09: 0000000000000000 [ 313.634785][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.634796][ T8552] R13: 0000000000000000 R14: 00007fe5105a5fa0 R15: 00007ffe626f8d68 [ 313.634821][ T8552] [ 313.857687][ T8552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.151209][ T974] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 314.162258][ T974] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input38 [ 314.583995][ T8559] syz.3.749 (8559): drop_caches: 0 [ 314.590450][ T8559] overlayfs: conflicting options: nfs_export=on,index=off [ 314.608831][ T8559] team0: No ports can be present during mode change [ 314.624372][ T974] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 314.630057][ T8559] vlan0: entered promiscuous mode [ 314.648293][ T8559] team0: Port device vlan0 added [ 314.793933][ T974] usb 3-1: USB disconnect, device number 23 [ 315.358645][ T29] audit: type=1400 audit(1739513869.682:1537): avc: denied { connect } for pid=8566 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 315.440983][ T29] audit: type=1400 audit(1739513869.682:1538): avc: denied { name_connect } for pid=8566 comm="syz.3.750" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 315.499048][ T29] audit: type=1400 audit(1739513869.772:1539): avc: denied { append } for pid=8571 comm="syz.2.751" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 315.748390][ T29] audit: type=1400 audit(1739513870.082:1540): avc: denied { connect } for pid=8571 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.804342][ T29] audit: type=1400 audit(1739513870.082:1541): avc: denied { write } for pid=8571 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.948420][ T29] audit: type=1400 audit(1739513870.122:1542): avc: denied { read } for pid=8571 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.967709][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.041380][ T29] audit: type=1400 audit(1739513870.342:1543): avc: denied { bind } for pid=8571 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.065548][ T29] audit: type=1400 audit(1739513870.342:1544): avc: denied { listen } for pid=8571 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.085031][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.383862][ T5873] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 316.582919][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.677211][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.820292][ T5873] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 316.942286][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.991940][ T5873] usb 4-1: config 0 descriptor?? [ 317.118127][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.757'. [ 317.178547][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.184908][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.342071][ T8597] xt_TCPMSS: Only works on TCP SYN packets [ 317.759657][ T974] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 317.972824][ T974] usb 2-1: Invalid ep0 maxpacket: 32 [ 317.974138][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 317.987308][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 317.987348][ T29] audit: type=1400 audit(1739513872.302:1548): avc: denied { execute } for pid=8576 comm="syz.3.752" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 317.990453][ T5873] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 317.996239][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.760'. [ 318.019474][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.032436][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 318.249775][ T29] audit: type=1400 audit(1739513872.402:1549): avc: denied { write } for pid=8590 comm="syz.4.753" name="fib_trie" dev="proc" ino=4026533351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 318.290137][ T8596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59664 sclass=netlink_route_socket pid=8596 comm=syz.0.760 [ 318.309535][ T974] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 318.369657][ T8603] program syz.2.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.518339][ T29] audit: type=1400 audit(1739513872.852:1550): avc: denied { write } for pid=8604 comm="syz.0.762" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.548934][ T25] usb 4-1: USB disconnect, device number 28 [ 318.589609][ T974] usb 2-1: Invalid ep0 maxpacket: 32 [ 318.608491][ T974] usb usb2-port1: attempt power cycle [ 318.615413][ T29] audit: type=1400 audit(1739513872.922:1551): avc: denied { sqpoll } for pid=8604 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 318.641873][ T29] audit: type=1400 audit(1739513872.942:1552): avc: denied { getopt } for pid=8604 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.663481][ T29] audit: type=1400 audit(1739513872.962:1553): avc: denied { append } for pid=8604 comm="syz.0.762" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 319.067272][ T974] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 319.090742][ T974] usb 2-1: Invalid ep0 maxpacket: 32 [ 319.120205][ T51] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 319.188980][ T29] audit: type=1400 audit(1739513873.522:1554): avc: denied { create } for pid=8619 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 319.271483][ T974] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 319.356863][ T974] usb 2-1: Invalid ep0 maxpacket: 32 [ 319.446714][ T974] usb usb2-port1: unable to enumerate USB device [ 319.819563][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 319.836460][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.853556][ T51] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 319.869505][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.879249][ T51] usb 5-1: Product: syz [ 319.884548][ T51] usb 5-1: Manufacturer: syz [ 319.889573][ T51] usb 5-1: SerialNumber: syz [ 319.910845][ T51] usb 5-1: config 0 descriptor?? [ 320.204759][ T866] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 320.810111][ T51] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 320.859608][ T866] usb 4-1: Using ep0 maxpacket: 32 [ 320.869687][ T866] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 320.877971][ T866] usb 4-1: config 0 has no interface number 0 [ 320.888539][ T866] usb 4-1: config 0 interface 12 has no altsetting 0 [ 320.896990][ T866] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 320.907820][ T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.915936][ T866] usb 4-1: Product: syz [ 320.920380][ T866] usb 4-1: Manufacturer: syz [ 320.925051][ T866] usb 4-1: SerialNumber: syz [ 320.931774][ T866] usb 4-1: config 0 descriptor?? [ 320.954174][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.975663][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.982839][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.099617][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.193196][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 321.205564][ T8651] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 321.218310][ T8651] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 321.279674][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 321.287911][ T25] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 321.303167][ T25] usb 2-1: config 0 has no interface number 0 [ 321.337795][ T25] usb 2-1: config 0 interface 12 has no altsetting 0 [ 321.350312][ T25] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 321.359825][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.367886][ T25] usb 2-1: Product: syz [ 321.378294][ T51] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 321.389459][ T25] usb 2-1: Manufacturer: syz [ 321.394117][ T25] usb 2-1: SerialNumber: syz [ 321.415274][ T51] usb 5-1: USB disconnect, device number 33 [ 321.426270][ T25] usb 2-1: config 0 descriptor?? [ 322.129783][ T29] audit: type=1400 audit(1739513876.462:1555): avc: denied { write } for pid=8659 comm="syz.2.774" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.165517][ T29] audit: type=1400 audit(1739513876.462:1556): avc: denied { ioctl } for pid=8659 comm="syz.2.774" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.326707][ T8665] capability: warning: `syz.2.776' uses 32-bit capabilities (legacy support in use) [ 322.399664][ T866] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 322.408017][ T866] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 322.429586][ T866] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 322.437332][ T866] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 322.463519][ T866] usb 4-1: USB disconnect, device number 29 [ 322.489572][ T5920] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 322.579587][ T29] audit: type=1400 audit(1739513876.912:1557): avc: denied { getopt } for pid=8670 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.700135][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 322.719213][ T5920] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.746841][ T5920] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.439127][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.459990][ T5920] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 323.473999][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.799265][ T25] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 323.817278][ T5920] usb 1-1: config 0 descriptor?? [ 323.984176][ T25] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 324.114187][ T25] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 324.123679][ T25] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 324.136437][ T25] usb 2-1: USB disconnect, device number 28 [ 324.265228][ T8687] FAULT_INJECTION: forcing a failure. [ 324.265228][ T8687] name failslab, interval 1, probability 0, space 0, times 0 [ 324.278692][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.4.783 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 324.278714][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 324.278725][ T8687] Call Trace: [ 324.278730][ T8687] [ 324.278736][ T8687] dump_stack_lvl+0x16c/0x1f0 [ 324.278759][ T8687] should_fail_ex+0x50a/0x650 [ 324.278783][ T8687] ? fs_reclaim_acquire+0xae/0x150 [ 324.278807][ T8687] should_failslab+0xc2/0x120 [ 324.278827][ T8687] __kmalloc_node_noprof+0xd1/0x510 [ 324.278847][ T8687] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 324.278878][ T8687] __kvmalloc_node_noprof+0xad/0x1a0 [ 324.278902][ T8687] seq_read_iter+0x82a/0x12b0 [ 324.278937][ T8687] copy_splice_read+0x61d/0xb80 [ 324.278965][ T8687] ? __pfx_copy_splice_read+0x10/0x10 [ 324.278993][ T8687] ? __pfx_register_lock_class+0x10/0x10 [ 324.279032][ T8687] ? __pfx_copy_splice_read+0x10/0x10 [ 324.279053][ T8687] do_splice_read+0x282/0x370 [ 324.279079][ T8687] splice_direct_to_actor+0x2a4/0xa40 [ 324.279104][ T8687] ? __pfx_direct_splice_actor+0x10/0x10 [ 324.279133][ T8687] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 324.279158][ T8687] ? __pfx___might_resched+0x10/0x10 [ 324.279186][ T8687] do_splice_direct+0x178/0x250 [ 324.279208][ T8687] ? __pfx_do_splice_direct+0x10/0x10 [ 324.279230][ T8687] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 324.279257][ T8687] ? rw_verify_area+0xcf/0x680 [ 324.279282][ T8687] do_sendfile+0xafb/0xe40 [ 324.279311][ T8687] ? __pfx_do_sendfile+0x10/0x10 [ 324.279340][ T8687] ? irqentry_exit+0x3b/0x90 [ 324.279361][ T8687] __x64_sys_sendfile64+0x1da/0x220 [ 324.279380][ T8687] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 324.279409][ T8687] do_syscall_64+0xcd/0x250 [ 324.279431][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.279453][ T8687] RIP: 0033:0x7f82dd98cde9 [ 324.279466][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.279481][ T8687] RSP: 002b:00007f82de85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 324.279496][ T8687] RAX: ffffffffffffffda RBX: 00007f82ddba6080 RCX: 00007f82dd98cde9 [ 324.279508][ T8687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 324.279518][ T8687] RBP: 00007f82de85f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.279528][ T8687] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.279537][ T8687] R13: 0000000000000000 R14: 00007f82ddba6080 R15: 00007ffd3dd30398 [ 324.279561][ T8687] [ 324.281428][ T8688] FAULT_INJECTION: forcing a failure. [ 324.281428][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 324.609233][ T5920] chicony 0003:04F2:1421.0015: nested delimiters [ 324.615941][ T5920] chicony 0003:04F2:1421.0015: item 0 4 2 10 parsing failed [ 324.626880][ T5920] chicony 0003:04F2:1421.0015: Chicony hid parse failed: -22 [ 324.635019][ T5920] chicony 0003:04F2:1421.0015: probe with driver chicony failed with error -22 [ 324.658487][ T8688] CPU: 1 UID: 0 PID: 8688 Comm: syz.3.784 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 324.658513][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 324.658523][ T8688] Call Trace: [ 324.658528][ T8688] [ 324.658536][ T8688] dump_stack_lvl+0x16c/0x1f0 [ 324.658560][ T8688] should_fail_ex+0x50a/0x650 [ 324.658585][ T8688] ? fs_reclaim_acquire+0xae/0x150 [ 324.658611][ T8688] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 324.658637][ T8688] should_failslab+0xc2/0x120 [ 324.658657][ T8688] __kmalloc_noprof+0xcb/0x510 [ 324.658674][ T8688] ? __pfx___mutex_trylock_common+0x10/0x10 [ 324.658700][ T8688] ? genl_rcv_msg+0x580/0x800 [ 324.658726][ T8688] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 324.658765][ T8688] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 324.658790][ T8688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 324.658812][ T8688] ? __pfx___mutex_lock+0x10/0x10 [ 324.658827][ T8688] ? genl_get_cmd+0x195/0x580 [ 324.658854][ T8688] ? __radix_tree_lookup+0x21f/0x2c0 [ 324.658877][ T8688] genl_rcv_msg+0x565/0x800 [ 324.658901][ T8688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.658920][ T8688] ? __pfx_ctrl_getfamily+0x10/0x10 [ 324.658951][ T8688] netlink_rcv_skb+0x16b/0x440 [ 324.658969][ T8688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.658992][ T8688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.659025][ T8688] ? down_read+0xc9/0x330 [ 324.659044][ T8688] ? __pfx_down_read+0x10/0x10 [ 324.659065][ T8688] ? netlink_deliver_tap+0x1ae/0xd30 [ 324.659089][ T8688] genl_rcv+0x28/0x40 [ 324.659108][ T8688] netlink_unicast+0x53c/0x7f0 [ 324.659132][ T8688] ? __pfx_netlink_unicast+0x10/0x10 [ 324.659162][ T8688] netlink_sendmsg+0x8b8/0xd70 [ 324.659187][ T8688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.659218][ T8688] __sys_sendto+0x488/0x4f0 [ 324.659241][ T8688] ? __pfx___sys_sendto+0x10/0x10 [ 324.659260][ T8688] ? kvm_sched_clock_read+0x11/0x20 [ 324.659276][ T8688] ? sched_clock+0x38/0x60 [ 324.659306][ T8688] ? hrtimer_reprogram+0x283/0x460 [ 324.659355][ T8688] __x64_sys_sendto+0xe0/0x1c0 [ 324.659375][ T8688] ? do_syscall_64+0x91/0x250 [ 324.659396][ T8688] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.659412][ T8688] do_syscall_64+0xcd/0x250 [ 324.659432][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.659454][ T8688] RIP: 0033:0x7f51e038ec7c [ 324.659467][ T8688] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 324.659483][ T8688] RSP: 002b:00007f51e119eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 324.659500][ T8688] RAX: ffffffffffffffda RBX: 00007f51e119efc0 RCX: 00007f51e038ec7c [ 324.659512][ T8688] RDX: 0000000000000020 RSI: 00007f51e119f010 RDI: 0000000000000003 [ 324.659522][ T8688] RBP: 0000000000000000 R08: 00007f51e119ef14 R09: 000000000000000c [ 324.659532][ T8688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 324.659542][ T8688] R13: 00007f51e119ef68 R14: 00007f51e119f010 R15: 0000000000000000 [ 324.659566][ T8688] [ 324.953761][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.261709][ T8697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (30657490936 ns) > initial count (16777288 ns). Using initial count to start timer. [ 325.381811][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 325.391562][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 325.391572][ T29] audit: type=1400 audit(1739513879.712:1559): avc: denied { mount } for pid=8693 comm="syz.2.786" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 325.416154][ T8696] overlayfs: failed to resolve './file1': -2 [ 325.419390][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.440669][ T8700] FAULT_INJECTION: forcing a failure. [ 325.440669][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 325.465965][ T29] audit: type=1400 audit(1739513879.752:1560): avc: denied { listen } for pid=8693 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.485262][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.511425][ T8700] CPU: 1 UID: 0 PID: 8700 Comm: syz.4.788 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 325.511452][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.511463][ T8700] Call Trace: [ 325.511468][ T8700] [ 325.511476][ T8700] dump_stack_lvl+0x16c/0x1f0 [ 325.511503][ T8700] should_fail_ex+0x50a/0x650 [ 325.511532][ T8700] ? vxlan_fdb_append.part.0.constprop.0+0x5b/0x400 [ 325.511555][ T8700] should_failslab+0xc2/0x120 [ 325.511577][ T8700] __kmalloc_cache_noprof+0x68/0x410 [ 325.511610][ T8700] vxlan_fdb_append.part.0.constprop.0+0x5b/0x400 [ 325.511638][ T8700] vxlan_fdb_create+0x4e7/0x5e0 [ 325.511666][ T8700] ? __pfx_vxlan_fdb_create+0x10/0x10 [ 325.511694][ T8700] ? __asan_memset+0x23/0x50 [ 325.511721][ T8700] ? __asan_memcpy+0x3c/0x60 [ 325.511748][ T8700] __vxlan_dev_create+0x2e5/0xa30 [ 325.511780][ T8700] ? __pfx___vxlan_dev_create+0x10/0x10 [ 325.511809][ T8700] ? rcu_is_watching+0x12/0xc0 [ 325.511835][ T8700] vxlan_newlink+0xd1/0x130 [ 325.511860][ T8700] ? __pfx_vxlan_newlink+0x10/0x10 [ 325.511896][ T8700] ? rtnl_create_link+0xa51/0xfa0 [ 325.511919][ T8700] ? __pfx_vxlan_newlink+0x10/0x10 [ 325.511945][ T8700] rtnl_newlink+0xb95/0x1d60 [ 325.511964][ T8700] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.511980][ T8700] ? __pfx___lock_acquire+0x10/0x10 [ 325.511994][ T8700] ? cred_has_capability.isra.0+0x192/0x2f0 [ 325.512010][ T8700] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 325.512027][ T8700] ? find_held_lock+0x2d/0x110 [ 325.512040][ T8700] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 325.512052][ T8700] ? __pfx_lock_release+0x10/0x10 [ 325.512065][ T8700] ? trace_lock_acquire+0x14e/0x1f0 [ 325.512079][ T8700] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.512092][ T8700] rtnetlink_rcv_msg+0x95b/0xea0 [ 325.512106][ T8700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.512129][ T8700] netlink_rcv_skb+0x16b/0x440 [ 325.512141][ T8700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.512155][ T8700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.512175][ T8700] ? netlink_deliver_tap+0x1ae/0xd30 [ 325.512189][ T8700] netlink_unicast+0x53c/0x7f0 [ 325.512203][ T8700] ? __pfx_netlink_unicast+0x10/0x10 [ 325.512219][ T8700] netlink_sendmsg+0x8b8/0xd70 [ 325.512233][ T8700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.512250][ T8700] ____sys_sendmsg+0xaaf/0xc90 [ 325.512267][ T8700] ? copy_msghdr_from_user+0x10b/0x160 [ 325.512280][ T8700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.512303][ T8700] ___sys_sendmsg+0x135/0x1e0 [ 325.512317][ T8700] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.512336][ T8700] ? __pfx_lock_release+0x10/0x10 [ 325.512348][ T8700] ? trace_lock_acquire+0x14e/0x1f0 [ 325.512364][ T8700] ? __fget_files+0x206/0x3a0 [ 325.512378][ T8700] __sys_sendmsg+0x16e/0x220 [ 325.512391][ T8700] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.512414][ T8700] do_syscall_64+0xcd/0x250 [ 325.512427][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.512441][ T8700] RIP: 0033:0x7f82dd98cde9 [ 325.512451][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.512461][ T8700] RSP: 002b:00007f82de880038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.512471][ T8700] RAX: ffffffffffffffda RBX: 00007f82ddba5fa0 RCX: 00007f82dd98cde9 [ 325.512477][ T8700] RDX: 0000000020008844 RSI: 0000400000000000 RDI: 0000000000000003 [ 325.512483][ T8700] RBP: 00007f82de880090 R08: 0000000000000000 R09: 0000000000000000 [ 325.512489][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.512495][ T8700] R13: 0000000000000000 R14: 00007f82ddba5fa0 R15: 00007ffd3dd30398 [ 325.512509][ T8700] [ 325.516898][ T29] audit: type=1400 audit(1739513879.752:1561): avc: denied { read } for pid=8693 comm="syz.2.786" path="socket:[20111]" dev="sockfs" ino=20111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 326.069821][ T29] audit: type=1400 audit(1739513880.382:1562): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 326.161965][ T8710] 9pnet_fd: Insufficient options for proto=fd [ 326.612241][ T29] audit: type=1400 audit(1739513880.942:1563): avc: denied { mount } for pid=8715 comm="syz.1.793" name="/" dev="rpc_pipefs" ino=20980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 326.635323][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.717516][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 326.724639][ T29] audit: type=1400 audit(1739513881.022:1564): avc: denied { create } for pid=8726 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 326.758509][ T5873] usb 1-1: USB disconnect, device number 20 [ 326.782792][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 326.792917][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 327.239918][ T8734] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 327.572009][ T8732] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 327.648410][ T8741] libceph: resolve '. [ 327.648410][ T8741] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 327.648410][ T8741] ' (ret=-3): failed [ 327.666850][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.041993][ T8750] CIFS: VFS: Malformed UNC in devname [ 328.671044][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 328.680228][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 329.245266][ T29] audit: type=1400 audit(1739513883.582:1565): avc: denied { create } for pid=8786 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.762683][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 329.911321][ T8811] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 329.930767][ T8811] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 330.120315][ T866] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 331.262852][ T866] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.274344][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.294965][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.308007][ T866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.322242][ T866] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 331.331395][ T29] audit: type=1400 audit(1739513885.662:1566): avc: denied { name_connect } for pid=8826 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 331.351442][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.361535][ T866] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 331.375964][ T866] usb 1-1: Manufacturer: syz [ 331.386006][ T866] usb 1-1: config 0 descriptor?? [ 331.442241][ T8828] netlink: 'syz.2.816': attribute type 5 has an invalid length. [ 332.415742][ T29] audit: type=1400 audit(1739513886.752:1567): avc: denied { write } for pid=8786 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 332.440900][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.822'. [ 332.486364][ T866] usbhid 1-1:0.0: can't add hid device: -71 [ 332.493317][ T866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 332.503760][ T866] usb 1-1: USB disconnect, device number 21 [ 332.625034][ T8849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.823'. [ 332.826600][ T8852] syz.2.821 (8852): drop_caches: 0 [ 332.836921][ T8852] overlayfs: conflicting options: nfs_export=on,index=off [ 332.882181][ T8852] team0: No ports can be present during mode change [ 332.885763][ T29] audit: type=1400 audit(1739513887.222:1568): avc: denied { ioctl } for pid=8853 comm="syz.4.825" path="socket:[21299]" dev="sockfs" ino=21299 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 332.917387][ T8852] vlan0: entered promiscuous mode [ 332.931526][ T8852] team0: Port device vlan0 added [ 333.034676][ T29] audit: type=1400 audit(1739513887.352:1569): avc: denied { map } for pid=8853 comm="syz.4.825" path="socket:[21299]" dev="sockfs" ino=21299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.132946][ T29] audit: type=1400 audit(1739513887.352:1570): avc: denied { read } for pid=8853 comm="syz.4.825" path="socket:[21299]" dev="sockfs" ino=21299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.609695][ T29] audit: type=1400 audit(1739513887.912:1571): avc: denied { getopt } for pid=8857 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 333.809618][ T5873] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 333.819166][ T8867] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 333.860303][ T8867] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 333.995372][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 334.016987][ T5873] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 334.025358][ T5873] usb 5-1: config 0 has no interface number 0 [ 334.038051][ T5873] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.057004][ T5873] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fe.f5 [ 334.066443][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 334.077900][ T5873] usb 5-1: Product: syz [ 334.082757][ T5873] usb 5-1: SerialNumber: syz [ 334.226746][ T5873] usb 5-1: config 0 descriptor?? [ 334.372821][ T8875] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 334.591599][ T5873] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 334.598622][ T5873] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 334.900384][ T5873] usb 5-1: USB disconnect, device number 34 [ 335.012095][ T8884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.834'. [ 335.022906][ T29] audit: type=1400 audit(1739513889.352:1572): avc: denied { ioctl } for pid=8883 comm="syz.3.834" path="socket:[20454]" dev="sockfs" ino=20454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.199597][ T29] audit: type=1400 audit(1739513889.412:1573): avc: denied { accept } for pid=8883 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.300676][ T8886] syz.2.835 (8886): drop_caches: 0 [ 335.307524][ T8886] overlayfs: conflicting options: nfs_export=on,index=off [ 335.365597][ T8891] team0: No ports can be present during mode change [ 336.599902][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 336.725765][ T29] audit: type=1400 audit(1739513891.062:1574): avc: denied { ioctl } for pid=8912 comm="syz.4.844" path="socket:[21653]" dev="sockfs" ino=21653 ioctlcmd=0x8b2a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 336.879017][ T8922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 336.885570][ T8922] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.931798][ T8922] vhci_hcd vhci_hcd.0: Device attached [ 337.250684][ T866] vhci_hcd: vhci_device speed not set [ 337.342034][ T866] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 337.796390][ T5873] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 337.902242][ T29] audit: type=1400 audit(1739513892.242:1575): avc: denied { setopt } for pid=8949 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.961023][ T5873] usb 2-1: config index 0 descriptor too short (expected 8224, got 27) [ 337.987732][ T5873] usb 2-1: config 52 has an invalid descriptor of length 122, skipping remainder of the config [ 338.018689][ T5873] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 32 [ 338.037187][ T5873] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.053125][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.063110][ T29] audit: type=1400 audit(1739513892.402:1576): avc: denied { bind } for pid=8949 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 338.154436][ T8957] program syz.2.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.332324][ T8961] ALSA: mixer_oss: invalid OSS volume '' [ 338.429540][ T5873] usb 2-1: string descriptor 0 read error: -71 [ 338.429597][ T8923] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 338.436909][ T5873] usb 2-1: USB disconnect, device number 29 [ 338.474479][ T12] vhci_hcd: stop threads [ 338.497807][ T12] vhci_hcd: release socket [ 338.518890][ T12] vhci_hcd: disconnect device [ 339.423557][ T8970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=8970 comm=syz.0.858 [ 339.643582][ T8977] syz.2.861 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 339.669963][ T8977] rdma_op ffff88805b18b9f0 conn xmit_rdma 0000000000000000 [ 339.756334][ T8982] FAULT_INJECTION: forcing a failure. [ 339.756334][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.774228][ T8982] CPU: 0 UID: 0 PID: 8982 Comm: syz.2.864 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 339.774254][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.774264][ T8982] Call Trace: [ 339.774270][ T8982] [ 339.774278][ T8982] dump_stack_lvl+0x16c/0x1f0 [ 339.774303][ T8982] should_fail_ex+0x50a/0x650 [ 339.774333][ T8982] _copy_to_user+0x32/0xd0 [ 339.774353][ T8982] simple_read_from_buffer+0xd0/0x160 [ 339.774380][ T8982] proc_fail_nth_read+0x198/0x270 [ 339.774406][ T8982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.774432][ T8982] ? rw_verify_area+0xcf/0x680 [ 339.774455][ T8982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.774478][ T8982] vfs_read+0x1df/0xbf0 [ 339.774503][ T8982] ? __fget_files+0x1fc/0x3a0 [ 339.774520][ T8982] ? __pfx___mutex_lock+0x10/0x10 [ 339.774540][ T8982] ? __pfx_vfs_read+0x10/0x10 [ 339.774572][ T8982] ? __fget_files+0x206/0x3a0 [ 339.774598][ T8982] ksys_read+0x12b/0x250 [ 339.774622][ T8982] ? __pfx_ksys_read+0x10/0x10 [ 339.774654][ T8982] do_syscall_64+0xcd/0x250 [ 339.774677][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.774701][ T8982] RIP: 0033:0x7fb0d2d8b7fc [ 339.774716][ T8982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 339.774732][ T8982] RSP: 002b:00007fb0d3b51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.774749][ T8982] RAX: ffffffffffffffda RBX: 00007fb0d2fa5fa0 RCX: 00007fb0d2d8b7fc [ 339.774761][ T8982] RDX: 000000000000000f RSI: 00007fb0d3b510a0 RDI: 0000000000000005 [ 339.774772][ T8982] RBP: 00007fb0d3b51090 R08: 0000000000000000 R09: 0000000000000000 [ 339.774783][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.774793][ T8982] R13: 0000000000000000 R14: 00007fb0d2fa5fa0 R15: 00007ffc9ab2f048 [ 339.774819][ T8982] [ 339.876579][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 339.975910][ T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 340.139563][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 340.146065][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.159039][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.168891][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.193240][ T51] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.205641][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.225742][ T51] usb 2-1: config 0 descriptor?? [ 340.479676][ T5867] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 340.653945][ T51] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 340.682201][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.693839][ T5867] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.698361][ T51] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 340.705223][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.729694][ T5867] usb 5-1: config 0 descriptor?? [ 340.736406][ T51] microsoft 0003:045E:07DA.0016: no inputs found [ 340.764848][ T51] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 341.186845][ T5867] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 341.200234][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input40 [ 341.273337][ T5867] keytouch 0003:0926:3333.0017: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 341.393138][ T5867] [ 341.393148][ T5867] ====================================================== [ 341.393158][ T5867] WARNING: possible circular locking dependency detected [ 341.393166][ T5867] 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 Not tainted [ 341.393178][ T5867] ------------------------------------------------------ [ 341.393184][ T5867] kworker/0:3/5867 is trying to acquire lock: [ 341.393195][ T5867] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 341.393241][ T5867] [ 341.393241][ T5867] but task is already holding lock: [ 341.393247][ T5867] ffffffff8e1aa580 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 341.393293][ T5867] [ 341.393293][ T5867] which lock already depends on the new lock. [ 341.393293][ T5867] [ 341.393298][ T5867] [ 341.393298][ T5867] the existing dependency chain (in reverse order) is: [ 341.393304][ T5867] [ 341.393304][ T5867] -> #2 (console_lock){+.+.}-{0:0}: [ 341.393325][ T5867] console_lock+0x7a/0xa0 [ 341.393347][ T5867] con_flush_chars+0x5e/0x80 [ 341.393365][ T5867] n_tty_write+0xe17/0x1140 [ 341.393387][ T5867] file_tty_write.constprop.0+0x506/0x9a0 [ 341.393407][ T5867] vfs_write+0x5ae/0x1150 [ 341.393432][ T5867] ksys_write+0x12b/0x250 [ 341.393455][ T5867] do_syscall_64+0xcd/0x250 [ 341.393475][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.393500][ T5867] [ 341.393500][ T5867] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 341.393524][ T5867] down_write+0x93/0x200 [ 341.393541][ T5867] n_tty_flush_buffer+0x25/0x1b0 [ 341.393560][ T5867] tty_buffer_flush+0x236/0x310 [ 341.393571][ T5867] tty_ldisc_flush+0x64/0xe0 [ 341.393580][ T5867] tty_port_close_start+0x337/0x540 [ 341.393592][ T5867] tty_port_close+0x26/0x160 [ 341.393603][ T5867] uart_close+0x7b/0x220 [ 341.393616][ T5867] tty_release+0x3a8/0x1410 [ 341.393626][ T5867] __fput+0x3ff/0xb70 [ 341.393636][ T5867] task_work_run+0x14e/0x250 [ 341.393649][ T5867] syscall_exit_to_user_mode+0x27b/0x2a0 [ 341.393659][ T5867] do_syscall_64+0xda/0x250 [ 341.393669][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.393682][ T5867] [ 341.393682][ T5867] -> #0 (&buf->lock){+.+.}-{4:4}: [ 341.393695][ T5867] __lock_acquire+0x249e/0x3c40 [ 341.393708][ T5867] lock_acquire.part.0+0x11b/0x380 [ 341.393721][ T5867] __mutex_lock+0x19b/0xb10 [ 341.393730][ T5867] tty_buffer_flush+0x72/0x310 [ 341.393740][ T5867] tty_ldisc_flush+0x64/0xe0 [ 341.393748][ T5867] __do_SAK+0x6a7/0x800 [ 341.393758][ T5867] vc_SAK+0x7f/0x310 [ 341.393773][ T5867] process_one_work+0x9c5/0x1ba0 [ 341.393785][ T5867] worker_thread+0x6c8/0xf00 [ 341.393796][ T5867] kthread+0x3af/0x750 [ 341.393807][ T5867] ret_from_fork+0x45/0x80 [ 341.393820][ T5867] ret_from_fork_asm+0x1a/0x30 [ 341.393831][ T5867] [ 341.393831][ T5867] other info that might help us debug this: [ 341.393831][ T5867] [ 341.393834][ T5867] Chain exists of: [ 341.393834][ T5867] &buf->lock --> &tty->termios_rwsem --> console_lock [ 341.393834][ T5867] [ 341.393850][ T5867] Possible unsafe locking scenario: [ 341.393850][ T5867] [ 341.393853][ T5867] CPU0 CPU1 [ 341.393856][ T5867] ---- ---- [ 341.393859][ T5867] lock(console_lock); [ 341.393865][ T5867] lock(&tty->termios_rwsem); [ 341.393872][ T5867] lock(console_lock); [ 341.393879][ T5867] lock(&buf->lock); [ 341.393886][ T5867] [ 341.393886][ T5867] *** DEADLOCK *** [ 341.393886][ T5867] [ 341.393888][ T5867] 4 locks held by kworker/0:3/5867: [ 341.393894][ T5867] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 341.393921][ T5867] #1: ffffc9000439fd18 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 341.393948][ T5867] #2: ffffffff8e1aa580 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 341.393975][ T5867] #3: ffff8880787f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 341.393998][ T5867] [ 341.393998][ T5867] stack backtrace: [ 341.394002][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: kworker/0:3 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 341.394019][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 341.394026][ T5867] Workqueue: events vc_SAK [ 341.394040][ T5867] Call Trace: [ 341.394043][ T5867] [ 341.394047][ T5867] dump_stack_lvl+0x116/0x1f0 [ 341.394058][ T5867] print_circular_bug+0x490/0x760 [ 341.394072][ T5867] check_noncircular+0x31a/0x400 [ 341.394085][ T5867] ? __pfx_check_noncircular+0x10/0x10 [ 341.394099][ T5867] ? lockdep_lock+0xc6/0x200 [ 341.394109][ T5867] ? __pfx_lockdep_lock+0x10/0x10 [ 341.394121][ T5867] __lock_acquire+0x249e/0x3c40 [ 341.394136][ T5867] ? __pfx___lock_acquire+0x10/0x10 [ 341.394149][ T5867] ? __pfx_stack_trace_save+0x10/0x10 [ 341.394162][ T5867] lock_acquire.part.0+0x11b/0x380 [ 341.394175][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394186][ T5867] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 341.394200][ T5867] ? rcu_is_watching+0x12/0xc0 [ 341.394210][ T5867] ? trace_lock_acquire+0x14e/0x1f0 [ 341.394222][ T5867] ? __pfx___lock_acquire+0x10/0x10 [ 341.394241][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394258][ T5867] ? lock_acquire+0x2f/0xb0 [ 341.394277][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394289][ T5867] __mutex_lock+0x19b/0xb10 [ 341.394299][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394310][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394320][ T5867] ? __pfx___mutex_lock+0x10/0x10 [ 341.394330][ T5867] ? rcu_is_watching+0x12/0xc0 [ 341.394340][ T5867] ? lock_acquire.part.0+0x11b/0x380 [ 341.394354][ T5867] ? tty_ldisc_flush+0x1c/0xe0 [ 341.394364][ T5867] ? tty_buffer_flush+0x72/0x310 [ 341.394374][ T5867] tty_buffer_flush+0x72/0x310 [ 341.394385][ T5867] tty_ldisc_flush+0x64/0xe0 [ 341.394394][ T5867] __do_SAK+0x6a7/0x800 [ 341.394405][ T5867] ? lock_acquire+0x2f/0xb0 [ 341.394417][ T5867] ? vc_SAK+0x13/0x310 [ 341.394432][ T5867] vc_SAK+0x7f/0x310 [ 341.394444][ T5867] process_one_work+0x9c5/0x1ba0 [ 341.394458][ T5867] ? __pfx_console_callback+0x10/0x10 [ 341.394470][ T5867] ? __pfx_process_one_work+0x10/0x10 [ 341.394484][ T5867] ? assign_work+0x1a0/0x250 [ 341.394496][ T5867] worker_thread+0x6c8/0xf00 [ 341.394510][ T5867] ? __kthread_parkme+0x148/0x220 [ 341.394520][ T5867] ? __pfx_worker_thread+0x10/0x10 [ 341.394532][ T5867] kthread+0x3af/0x750 [ 341.394543][ T5867] ? __pfx_kthread+0x10/0x10 [ 341.394554][ T5867] ? lock_acquire+0x2f/0xb0 [ 341.394568][ T5867] ? __pfx_kthread+0x10/0x10 [ 341.394579][ T5867] ret_from_fork+0x45/0x80 [ 341.394591][ T5867] ? __pfx_kthread+0x10/0x10 [ 341.394602][ T5867] ret_from_fork_asm+0x1a/0x30 [ 341.394615][ T5867] [ 341.397936][ T5867] tty tty1: SAK: killed process 7300 (syz.4.398): by fd#7 [ 341.426221][ T51] usb 2-1: USB disconnect, device number 30 [ 341.785673][ T5867] usb 5-1: USB disconnect, device number 35 [ 342.509472][ T866] vhci_hcd: vhci_device speed not set