last executing test programs: 4m35.526422627s ago: executing program 2 (id=121): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 4m35.234944481s ago: executing program 2 (id=123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x2, "d07b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x15, 0x5, "7dcb85cdb5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000840)={0x0, 0x3c, 0x6, "d25d12581079"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m31.38542668s ago: executing program 2 (id=136): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) 4m31.274826196s ago: executing program 2 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) sendmmsg$unix(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000040)="034dd4907e5500e714ff3d6c8a095f1541949f8171defbbeb1df54daf8559fbf7e60cd9ea4cf11a79f9392f04dde9743e851a34f24b4df5b28598366", 0x3c}, {&(0x7f00000001c0)="43bdb8274cda4b40f0c7", 0xa}], 0x3, 0x0, 0x0, 0x8009c}}], 0x1, 0x20040000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 4m31.003274389s ago: executing program 2 (id=141): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m30.572883943s ago: executing program 2 (id=146): io_uring_setup(0x3450, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create(0x10000047) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000140)={0x0, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x20000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) ioperm(0x0, 0xe4d, 0x2) brk(0x5) 4m30.158046402s ago: executing program 32 (id=146): io_uring_setup(0x3450, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create(0x10000047) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000140)={0x0, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x20000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) ioperm(0x0, 0xe4d, 0x2) brk(0x5) 4m23.515002188s ago: executing program 1 (id=176): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4m23.198524203s ago: executing program 1 (id=177): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004851) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140), 0x1, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.714732229s ago: executing program 1 (id=178): syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2100) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m21.101409436s ago: executing program 1 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x200100, 0x3, 0x5, '\x00', '\x00', '\x00', 0x6, 0x4, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={&(0x7f0000001000)}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000380)={0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x21, {0x0, 0x0, 0x0, r4, {0xc, 0x6}, {0x3, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x200}]}}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) io_setup(0x30, &(0x7f0000000600)=0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000000c0)="01", 0x18}]) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x80000000}]}}]}, 0x40}}, 0x4c080) r9 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x1e, 0x0, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m19.454852284s ago: executing program 1 (id=187): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 4m18.345424119s ago: executing program 1 (id=189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x48}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x301000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) connect(r4, &(0x7f00000002c0)=@rc={0x1f, @none, 0x8}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/222, 0xde) getdents(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000540)={{}, [@bcast, @netrom, @remote, @netrom, @bcast, @null, @bcast, @netrom]}, &(0x7f0000000400)=0x48, 0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 4m2.69021861s ago: executing program 33 (id=189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x48}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x301000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) connect(r4, &(0x7f00000002c0)=@rc={0x1f, @none, 0x8}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/222, 0xde) getdents(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000540)={{}, [@bcast, @netrom, @remote, @netrom, @bcast, @null, @bcast, @netrom]}, &(0x7f0000000400)=0x48, 0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 3m0.045937896s ago: executing program 5 (id=398): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) bind$inet6(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5c6, 0x0, 0x0, 0x10000, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000140)}, 0x5b) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000776c8ef98d60058c03527bbd2f7f977596c31fd40000046404050725010300bfbb0905020200040a410307250103070c000725010108040009050b001000030509072501010702000905050000042703080905010c00024e090709050a0c20000501000725010106d00009058008200000b4"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2m57.590697446s ago: executing program 5 (id=402): r0 = socket(0x2, 0x80805, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (fail_nth: 3) 2m56.391094572s ago: executing program 5 (id=406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x1f4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x154, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_ctinfo={0x110, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0xc9, 0x6, "b2d12cd121f7cb5bff8367042946557118c6741d36b7f9b9f6dcf47be9f2c0980de670e4ceef8cbe8420219ee42b28bd49199519c19c80742f25be2045e94f1e0799e77e16ecc5012a9fa9dd5dd094b3141544622540449929555b1dfeb814040e19e4e5e0ac59514da95f740cc7cdae076565f4654a9401fbe530495a69f0f81662ecee0e9be71d3d3beaeda22e5530d317a5397dada7c59b734a375dc54c5f6f4d896dff93b6953bb8a504b25ff0b1d1ebd4b1df5861742f93d7e6da964a31b00c67b872"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x400, 0x5, 0xee}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m56.182647373s ago: executing program 5 (id=409): r0 = syz_usb_connect$hid(0x0, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000004080103000000000000200002000009050003003a000000050003002f000000"], 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='host1x_channel_submit\x00', r3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="0a007114080211000001000005008a"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x840) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x1004003, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grgup_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "9628ef04"}]}}, 0x0}, 0x0) 2m51.056616038s ago: executing program 5 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r7, 0x0, 0x200) mkdirat(r7, 0x0, 0x189) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) 2m49.851114498s ago: executing program 5 (id=424): getuid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20060000) 2m49.447941523s ago: executing program 34 (id=424): getuid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20060000) 12.465590359s ago: executing program 4 (id=918): socket(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r2, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000540)='\xcb@[r\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r0, 0x2c, 0x30, r0, @void, @void, @void, @value=r4, r3}, 0x20) pipe(&(0x7f00000004c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES32=r7], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 10.583035702s ago: executing program 3 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 9.615709287s ago: executing program 3 (id=924): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x30048881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x4c00) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd65d15cdc00442ffffc02000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a76f5b8ce6575b95549c170f718c1fe344b7eaaf4200"]) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000540)=0x1) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 8.204968462s ago: executing program 3 (id=927): syz_usbip_server_init(0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000240)=0x7, 0x4) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) io_uring_enter(0xffffffffffffffff, 0x2c34, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x4ca9, &(0x7f0000000380)={0x0, 0xda80, 0x0, 0x0, 0x392}) ptrace$peeksig(0x4209, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}]) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x1000, 0x2000004}, 0x20) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 7.457406892s ago: executing program 4 (id=931): unshare(0x2c020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0xeba45e42f78e2070, 0x1000) msgsnd(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00Y'], 0x8, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0900100ffffffffffff0802113362188dc82c77000001505050e15ac32c12af78ae38b7d3770ba78950505082000600c88127008c18df06ff07b79b5faa31c15aceea90f52200"], 0x58}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) 7.160620381s ago: executing program 6 (id=932): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) (async) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = msgget$private(0x0, 0x80) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) (async) msgrcv(r4, 0x0, 0x0, 0xa783166cb8bfc237, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000000)={0x0, 0x2, 0xaa, 0x0, {0x18, 0x200, 0x9, 0xd9, 0xb86c}, [0x688, 0x5]}}, @name="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"}) 6.602815764s ago: executing program 6 (id=936): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200000, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x4000000}) 6.602090342s ago: executing program 3 (id=937): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = socket$netlink(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/228, 0xe4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "a86945a3568bc5776f9ff5c817fe6833"}, 0x11, 0x1) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x810, r1, 0xd7627000) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 6.491246265s ago: executing program 6 (id=938): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xfffffd56, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x87, 0x1c, 0xf7, 0x10, 0x6cd, 0x10c, 0xd0ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf3, 0x0, 0x1, 0xcf, 0xaa, 0x63, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 5.807772138s ago: executing program 0 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x2c, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @typed={0x5, 0x13c, 0x0, 0x0, @str='\x00'}]}]}, 0x3c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 5.663081343s ago: executing program 7 (id=943): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x4, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r1 = syz_io_uring_setup(0x111, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00010000000000"], 0x2c}}, 0x4014080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt(r4, 0x9, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200000d1, &(0x7f0000000140), 0x1) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.749630673s ago: executing program 0 (id=944): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="362e640f01c5c744240000300000c7442402c7e77165c7442406000000000f011424c443c57c79000b8fa978c190a821104f410f79e7c4425990a4438000c0fe3e440f01710db9c20300000f32d9c90f09", 0x51}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(0x0, 0x800000000157, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x28, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x34324948}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvtap0\x00'}) pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfe, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x16, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 4.347812624s ago: executing program 7 (id=945): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1703def7dfe2abf7614f058d12358d2875e17d43560dd4d736221f2f799e372e8c12ba210230768f74202f64536bf6816deff63b0270747c8e9ea25829cd9cc9ee5f1b6be2c0aa91ff035e5c8efa19122b0cf3d01beece3679627bcbdca7c62eb7aaa3555692022063e458e66a186a80c64040a250d0b4f650f3f37f15308b283d31b7bba6f5ce36c2a692491ae66b8abd71f4dfe796b745fe4d890a98370e927c588dd4d8"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) 4.251141593s ago: executing program 6 (id=946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000006c0)=@ethtool_perm_addr}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f00000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000f2ffffffffffff38b698d0c654d1fab6aff5cf1813c586494f1844529b8b0614ac3c2cc2cdfea1a7e8b69597aeffdf734ef86e8af32a513332f4aa0f07f1642f60e3c9661184e062f02465daef07003b2518690df0ea3ea5ea67f1140d227455db57542a15629be6ba5a19bda8b840560ecb7c647dedb3e27016cdd31369c2cc1498282d2875f57ca0b21d30480dbf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 3.826737414s ago: executing program 4 (id=947): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x1000000, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000980)={0x1f, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) 2.550349836s ago: executing program 3 (id=948): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000680)=""/199, 0xc7}], 0x5, 0xc, 0x7ff) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x1}, 0x0, 0x0, 0x1fffe000000, 0x1bb, 0x3, 0x3, 0x20, 0x6}}], 0x58}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000300", @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4088) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x440101, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000f60008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x58}}, 0x0) 2.528505259s ago: executing program 7 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.379085837s ago: executing program 4 (id=950): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007e80)={&(0x7f00000002c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x757f, 0x808000, 0xfd88, 0x7, 0x9, 0x63, 0x0, 0x0, 0x2, 0xfffffff7}}, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0xfdc}}, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, 0x0, &(0x7f0000000580)={0x28, 0x0, 0xff, {{0x100000000, 0x9}}}, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x9}, &(0x7f0000002940)={0x78, 0x0, 0x9, {0x100000000, 0xb5d, 0x0, {0x0, 0xfffffffffffffffd, 0x894, 0x9, 0x80000000, 0x0, 0xfffffffd, 0x4, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 2.378675916s ago: executing program 3 (id=951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x45, @tick=0x3, 0x2, {0x0, 0x86}, 0x6, 0x0, 0x2}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x7f, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc04c5349, &(0x7f0000000500)) tkill(r1, 0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x4) 2.287617019s ago: executing program 0 (id=952): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) 2.149330828s ago: executing program 0 (id=953): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="eca8a863b6329db09c224df8943cb927fa2729f59f9c00ff0fe30354eb6d2df6e6108ef8d973156bd6c485da735bda5ce0c33361b2b94b703158daa8457a79a3d52c33504b6a5ff7cbbe43048fbff1814c70b56e9474f7079d5e421c6849fbd78e1b866a1f88764aae9e07bf9c7d28a32d4e92", 0x73, r0) keyctl$link(0x8, r2, r0) keyctl$set_timeout(0xf, r1, 0x0) 2.146253975s ago: executing program 6 (id=954): ioperm(0x0, 0x9, 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) llistxattr(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 1.519728536s ago: executing program 7 (id=955): socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000002c0), 0x20, 0x40100) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x100000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 1.49519708s ago: executing program 4 (id=956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x20}}, 0xfffd}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000006c0)=@ethtool_perm_addr}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f00000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000f2ffffffffffff38b698d0c654d1fab6aff5cf1813c586494f1844529b8b0614ac3c2cc2cdfea1a7e8b69597aeffdf734ef86e8af32a513332f4aa0f07f1642f60e3c9661184e062f02465daef07003b2518690df0ea3ea5ea67f1140d227455db57542a15629be6ba5a19bda8b840560ecb7c647dedb3e27016cdd31369c2cc1498282d2875f57ca0b21d30480dbf1f82cb39e7bab7140988d0c89d9973d96fec9017be31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 1.283821176s ago: executing program 0 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (fail_nth: 7) 1.283107903s ago: executing program 6 (id=958): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000580)={0x48, 0x3, 0x0, 0x0, 0x4cbc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe7b}], 0x1, 0x12123, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x10}, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005700)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200004604000000001080030000000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000400)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2a, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xf, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r8, 0x4, &(0x7f00000005c0)=[r10, r10, r7, r10, r7, r7, r7, r10, r10, r7], &(0x7f0000000600)=[{0x0, 0x1, 0x10, 0xb}, {0x4, 0x4, 0x4, 0x3}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x4, 0x7, 0x1}], 0x10, 0x101, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000000040)={0x1, 0x8, {0xffffffffffffffff}, {}, 0x660, 0xfff}) bind$x25(r10, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040), 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 1.219007715s ago: executing program 7 (id=959): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1703def7dfe2abf7614f058d12358d2875e17d43560dd4d736221f2f799e372e8c12ba210230768f74202f64536bf6816deff63b0270747c8e9ea25829cd9cc9ee5f1b6be2c0aa91ff035e5c8efa19122b0cf3d01beece3679627bcbdca7c62eb7aaa3555692022063e458e66a186a80c64040a250d0b4f650f3f37f15308b283d31b7bba6f5ce36c2a692491ae66b8abd71f4dfe796b745fe4d890a98370e927c588dd4d8"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) 565.320676ms ago: executing program 0 (id=960): ioperm(0x0, 0x9, 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x110) pipe(&(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000003c0)=""/4096, 0x1d, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v3={0x3000000, [{0x10000}, {0x5, 0x5}], r2}, 0x18, 0x2) ioperm(0xe2, 0x10001, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1400000004000000040000000400020000000000", @ANYRES32, @ANYBLOB="0000000000000000000001000000000000000000eeb4b8f9b3170f35571856e402cb1ce1bc0bda7acdd65d4f30639f087a09bb41fff6a440db12a66644ab721d5c3dca5fe55f788888cae517d30dd46d66ba5cd464a9253bb9dc5aeb950ca7d89c9585e325483d4c76731081c3e83091c95216fbbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000800100"/28], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) llistxattr(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 59.991212ms ago: executing program 4 (id=961): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000140)='\x00', 0x1, 0x6}]) (fail_nth: 7) dup3(r2, r0, 0x0) 0s ago: executing program 7 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r4, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x11, 0x0, 0xf5, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x1000) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) kernel console output (not intermixed with test programs): atadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.592857][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.645364][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.788813][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.283078][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.521839][ T8105] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 507.783996][ T5893] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 507.793241][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 507.793257][ T29] audit: type=1326 audit(1735621365.317:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 507.858124][ T29] audit: type=1326 audit(1735621365.317:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 507.899423][ T29] audit: type=1326 audit(1735621365.317:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 507.959116][ T7943] hsr_slave_0: entered promiscuous mode [ 507.993488][ T5893] usb 7-1: unable to get BOS descriptor or descriptor too short [ 508.033039][ T7943] hsr_slave_1: entered promiscuous mode [ 508.064750][ T5893] usb 7-1: not running at top speed; connect to a high speed hub [ 508.075692][ T7943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.084883][ T7943] Cannot create hsr debugfs directory [ 508.098867][ T5893] usb 7-1: config 4 has an invalid descriptor of length 148, skipping remainder of the config [ 508.195189][ T5893] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 508.216387][ T29] audit: type=1326 audit(1735621365.347:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.327158][ T29] audit: type=1326 audit(1735621365.417:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.383174][ T29] audit: type=1326 audit(1735621365.507:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.419235][ T29] audit: type=1326 audit(1735621365.507:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.453447][ T29] audit: type=1326 audit(1735621365.507:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.479401][ T29] audit: type=1326 audit(1735621365.507:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.504225][ T29] audit: type=1326 audit(1735621365.507:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.6.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006218592b code=0x7ffc0000 [ 508.581412][ T5893] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 508.590663][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.598930][ T5893] usb 7-1: Product: syz [ 508.603231][ T5893] usb 7-1: Manufacturer: syz [ 508.608090][ T5893] usb 7-1: SerialNumber: syz [ 508.612031][ T5933] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 509.306001][ T5895] hsr_slave_0: left promiscuous mode [ 509.361123][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 509.374578][ T5895] hsr_slave_1: left promiscuous mode [ 509.415677][ T5933] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 509.459293][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.509671][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.517007][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.545391][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.562734][ T5933] usb 1-1: config 0 descriptor?? [ 509.569890][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.572674][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.622058][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.712382][ T8114] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 509.811506][ T5895] veth1_macvtap: left promiscuous mode [ 509.826668][ T5895] veth0_macvtap: left promiscuous mode [ 509.832410][ T5895] veth1_vlan: left promiscuous mode [ 509.837741][ T5895] veth0_vlan: left promiscuous mode [ 510.394877][ T5933] elo 0003:04E7:0009.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 510.657161][ T5933] usb 1-1: USB disconnect, device number 9 [ 510.914705][ T5893] usb 7-1: USB disconnect, device number 7 [ 511.948985][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 512.035806][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 512.202709][ T969] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 512.402114][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 512.413938][ T969] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 512.446874][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.459100][ T969] usb 4-1: config 0 descriptor?? [ 512.709981][ T969] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 512.758060][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.786971][ T969] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 512.803014][ T969] usb 4-1: media controller created [ 512.825007][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.839878][ T8169] fuse: Unknown parameter 'd' [ 514.100905][ T7943] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 514.140930][ T7943] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.335296][ T7943] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 515.095649][ T7943] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 515.252256][ T969] stb0899_attach: Driver disabled by Kconfig [ 515.258287][ T969] az6027: no front-end attached [ 515.258287][ T969] [ 515.272751][ T969] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 515.281125][ T969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 515.303401][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 515.325894][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.336338][ T969] dvb-usb: schedule remote query interval to 400 msecs. [ 515.356883][ T969] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 515.361660][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.395335][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.402473][ T7754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.422882][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.430036][ T7754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.472948][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 515.484066][ T5890] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 515.502223][ T5890] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.513276][ T5819] usb 4-1: USB disconnect, device number 8 [ 515.526196][ T5890] usb 1-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.578299][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 515.586282][ T5890] usb 1-1: New USB device found, idVendor=2247, idProduct=0001, bcdDevice= 0.00 [ 515.599547][ T5819] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 515.619395][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.656821][ T5890] usb 1-1: config 0 descriptor?? [ 515.773182][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.073959][ T5890] hid-generic 0003:2247:0001.0007: unknown main item tag 0x0 [ 516.107426][ T7943] veth0_vlan: entered promiscuous mode [ 516.122525][ T5890] hid-generic 0003:2247:0001.0007: hidraw0: USB HID v0.00 Device [HID 2247:0001] on usb-dummy_hcd.0-1/input0 [ 516.155708][ T7943] veth1_vlan: entered promiscuous mode [ 516.234597][ T7943] veth0_macvtap: entered promiscuous mode [ 516.279371][ T7943] veth1_macvtap: entered promiscuous mode [ 516.318748][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 516.393661][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.412284][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.667096][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.707989][ T5890] usb 1-1: USB disconnect, device number 10 [ 516.938106][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.978857][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.996291][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.140147][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.414795][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.463496][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.473468][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.484809][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.499500][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.515762][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.529221][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.539849][ T7943] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.551063][ T7943] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.571684][ T7943] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.580888][ T7943] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.644631][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.664964][ T8266] batadv_slave_1: entered promiscuous mode [ 518.935569][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.105255][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.232344][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.240192][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.722185][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 521.722225][ T29] audit: type=1400 audit(1735621379.187:654): avc: denied { setopt } for pid=8301 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 522.001761][ T29] audit: type=1400 audit(1735621379.437:655): avc: denied { watch watch_reads } for pid=8301 comm="syz.4.482" path="/proc/340" dev="proc" ino=18441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 524.743942][ T8332] block device autoloading is deprecated and will be removed. [ 525.964352][ T8344] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 528.307469][ T29] audit: type=1400 audit(1735621385.707:656): avc: denied { read } for pid=8358 comm="syz.7.495" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 528.332006][ T29] audit: type=1400 audit(1735621385.707:657): avc: denied { open } for pid=8358 comm="syz.7.495" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 528.354473][ T29] audit: type=1400 audit(1735621385.707:658): avc: denied { ioctl } for pid=8358 comm="syz.7.495" path="/4/file0" dev="tmpfs" ino=38 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 529.359235][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.498'. [ 529.443640][ T5934] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 530.053504][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 530.063749][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 530.072658][ T5934] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 530.080993][ T5934] usb 4-1: config 129 has an invalid descriptor of length 127, skipping remainder of the config [ 530.095819][ T5934] usb 4-1: config 129 has no interface number 0 [ 530.102682][ T5934] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 530.117780][ T5934] usb 4-1: config 129 interface 135 has no altsetting 0 [ 530.135642][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 530.149036][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.900408][ T5934] usb 4-1: Product: syz [ 530.904618][ T5934] usb 4-1: Manufacturer: syz [ 530.909202][ T5934] usb 4-1: SerialNumber: syz [ 531.044292][ T8400] Illegal XDP return value 4294967274 on prog (id 75) dev N/A, expect packet loss! [ 531.268585][ T5934] usb 4-1: USB disconnect, device number 9 [ 532.115855][ T29] audit: type=1400 audit(1735621389.637:659): avc: denied { mount } for pid=8432 comm="syz.4.511" name="/" dev="ramfs" ino=18315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 533.592078][ T29] audit: type=1400 audit(1735621390.117:660): avc: denied { read } for pid=8451 comm="syz.3.513" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 533.744472][ T29] audit: type=1400 audit(1735621390.117:661): avc: denied { open } for pid=8451 comm="syz.3.513" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 535.108019][ T8469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8469 comm=syz.7.518 [ 535.184291][ T29] audit: type=1400 audit(1735621392.697:662): avc: denied { read } for pid=8468 comm="syz.7.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 535.312518][ T5934] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 535.357576][ T29] audit: type=1400 audit(1735621392.877:663): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 535.486390][ T5934] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.498673][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.519773][ T5934] usb 1-1: config 0 descriptor?? [ 535.541317][ T5934] cp210x 1-1:0.0: cp210x converter detected [ 536.266717][ T5934] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 536.283989][ T5934] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 536.396211][ T5934] usb 1-1: cp210x converter now attached to ttyUSB0 [ 536.439991][ T5934] usb 1-1: USB disconnect, device number 11 [ 536.510491][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 536.580649][ T5934] cp210x 1-1:0.0: device disconnected [ 537.384403][ T8516] loop7: detected capacity change from 0 to 16384 [ 537.711867][ T8530] netlink: 'syz.7.531': attribute type 39 has an invalid length. [ 541.236802][ T8569] FAULT_INJECTION: forcing a failure. [ 541.236802][ T8569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.250733][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.7.540 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 541.261344][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 541.271391][ T8569] Call Trace: [ 541.274658][ T8569] [ 541.277574][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 541.282254][ T8569] should_fail_ex+0x497/0x5b0 [ 541.286925][ T8569] ? fs_reclaim_acquire+0xae/0x150 [ 541.292027][ T8569] should_fail_alloc_page+0xe7/0x130 [ 541.297305][ T8569] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 541.303453][ T8569] ? __pfx___might_resched+0x10/0x10 [ 541.308734][ T8569] ? vhost_dev_set_owner+0x197/0xa70 [ 541.314011][ T8569] __alloc_pages_noprof+0x190/0x25b0 [ 541.319284][ T8569] ? hlock_class+0x4e/0x130 [ 541.323782][ T8569] ? hlock_class+0x4e/0x130 [ 541.328276][ T8569] ? mark_lock+0xb5/0xc60 [ 541.332594][ T8569] ? __pfx_mark_lock+0x10/0x10 [ 541.337344][ T8569] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 541.343055][ T8569] ? mark_lock+0xb5/0xc60 [ 541.347378][ T8569] ? mark_held_locks+0x9f/0xe0 [ 541.352136][ T8569] ? irqentry_exit+0x3b/0x90 [ 541.356725][ T8569] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.361920][ T8569] ? vhost_dev_set_owner+0x197/0xa70 [ 541.367201][ T8569] ___kmalloc_large_node+0x84/0x1b0 [ 541.372398][ T8569] __kmalloc_large_node_noprof+0x1c/0x70 [ 541.378023][ T8569] __kmalloc_noprof.cold+0xc/0x61 [ 541.383046][ T8569] ? rcu_is_watching+0x12/0xc0 [ 541.387807][ T8569] vhost_dev_set_owner+0x197/0xa70 [ 541.392906][ T8569] ? __mutex_lock+0x1cc/0xa60 [ 541.397579][ T8569] vhost_dev_ioctl+0x8e9/0xdb0 [ 541.402335][ T8569] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 541.407613][ T8569] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 541.414459][ T8569] vhost_vsock_dev_ioctl+0x3aa/0xb50 [ 541.419736][ T8569] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 541.425536][ T8569] ? selinux_file_ioctl+0xb4/0x270 [ 541.430640][ T8569] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 541.436446][ T8569] __x64_sys_ioctl+0x190/0x200 [ 541.441203][ T8569] do_syscall_64+0xcd/0x250 [ 541.445699][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.451583][ T8569] RIP: 0033:0x7f2403185d29 [ 541.455990][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.475582][ T8569] RSP: 002b:00007f240401d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.483983][ T8569] RAX: ffffffffffffffda RBX: 00007f2403376080 RCX: 00007f2403185d29 [ 541.491951][ T8569] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 541.499910][ T8569] RBP: 00007f240401d090 R08: 0000000000000000 R09: 0000000000000000 [ 541.507872][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.515829][ T8569] R13: 0000000000000000 R14: 00007f2403376080 R15: 00007ffe6a9380b8 [ 541.523796][ T8569] [ 541.729345][ T8540] block nbd6: shutting down sockets [ 541.912079][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 542.082409][ T29] audit: type=1400 audit(1735621399.597:664): avc: denied { module_request } for pid=8571 comm="syz.0.539" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 542.128291][ T29] audit: type=1400 audit(1735621399.647:665): avc: denied { create } for pid=8578 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 542.185140][ T5888] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 542.199428][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.208699][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.323886][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.128798][ T5888] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 543.235596][ T7774] udevd[7774]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.286976][ T5819] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 543.297098][ T5933] usb 5-1: USB disconnect, device number 12 [ 543.469630][ T29] audit: type=1400 audit(1735621400.987:666): avc: denied { connect } for pid=8601 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 543.506741][ T8604] dvmrp5: entered allmulticast mode [ 543.524253][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.542041][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 543.562204][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.586415][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.688229][ T5819] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.698121][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.722405][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 544.296741][ T5819] usb 7-1: config 0 descriptor?? [ 544.303269][ T8588] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 544.463284][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 544.482582][ T5935] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 544.535672][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.567427][ T29] audit: type=1400 audit(1735621402.087:667): avc: denied { cmd } for pid=8616 comm="syz.0.549" path="socket:[19608]" dev="sockfs" ino=19608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 544.599796][ T8588] binder: 8587:8588 ioctl c0306201 200003c0 returned -14 [ 544.607235][ T5935] usb 4-1: Product: syz [ 544.611421][ T5935] usb 4-1: Manufacturer: syz [ 544.640700][ T5935] usb 4-1: SerialNumber: syz [ 544.692920][ T5935] usb 4-1: config 0 descriptor?? [ 544.713115][ T5935] hub 4-1:0.0: bad descriptor, ignoring hub [ 544.719895][ T5935] hub 4-1:0.0: probe with driver hub failed with error -5 [ 544.754108][ T5935] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 544.908616][ T5935] gspca_vc032x: reg_w err -71 [ 544.916719][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.926650][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.934583][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.940274][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.948724][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.956935][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.976950][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.012149][ T29] audit: type=1326 audit(1735621402.527:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.013618][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.051155][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.089994][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.132245][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.145884][ T29] audit: type=1326 audit(1735621402.527:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.178275][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.204519][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.213275][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.235947][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.256388][ T29] audit: type=1326 audit(1735621402.527:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.279725][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.290066][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.305928][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.314155][ T8633] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 545.314645][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.341109][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 545.387049][ T5935] gspca_vc032x: Unknown sensor... [ 545.398803][ T29] audit: type=1326 audit(1735621402.527:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.432195][ T5935] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 545.449415][ T5934] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 545.463374][ T29] audit: type=1326 audit(1735621402.527:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.507382][ T5935] usb 4-1: USB disconnect, device number 10 [ 545.545490][ T29] audit: type=1326 audit(1735621402.527:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 545.644495][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 545.664119][ T5934] usb 5-1: not running at top speed; connect to a high speed hub [ 545.890058][ T5819] usbhid 7-1:0.0: can't add hid device: -71 [ 545.896326][ T5934] usb 5-1: config 4 has an invalid descriptor of length 148, skipping remainder of the config [ 545.906837][ T5819] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 545.915380][ T5934] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 545.928392][ T5819] usb 7-1: USB disconnect, device number 8 [ 545.936366][ T5934] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 545.945634][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.966983][ T5934] usb 5-1: Product: syz [ 545.971183][ T5934] usb 5-1: Manufacturer: syz [ 546.618813][ T5934] usb 5-1: SerialNumber: syz [ 547.399151][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 547.399189][ T29] audit: type=1326 audit(1735621404.917:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.404002][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.428565][ T29] audit: type=1326 audit(1735621404.917:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.437181][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.555308][ T29] audit: type=1326 audit(1735621404.917:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.579219][ T29] audit: type=1326 audit(1735621404.927:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.602616][ T29] audit: type=1326 audit(1735621404.927:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.626078][ T29] audit: type=1326 audit(1735621404.927:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 547.649459][ T29] audit: type=1326 audit(1735621404.927:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f42184690 code=0x7ffc0000 [ 547.674757][ T29] audit: type=1326 audit(1735621404.927:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f4218592b code=0x7ffc0000 [ 547.698250][ T29] audit: type=1326 audit(1735621404.927:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f4218592b code=0x7ffc0000 [ 547.721612][ T29] audit: type=1326 audit(1735621404.997:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42185d29 code=0x7ffc0000 [ 548.233533][ T5888] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 549.468682][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 549.546704][ T5888] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 549.612097][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.655051][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 549.749206][ T5888] usb 4-1: config 0 descriptor?? [ 549.807824][ T8666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 550.409477][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 550.432767][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.477351][ T5888] usb 4-1: USB disconnect, device number 11 [ 550.518952][ T5935] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 550.524718][ T8691] loop2: detected capacity change from 0 to 524287999 [ 550.823865][ T5934] usb 5-1: USB disconnect, device number 13 [ 551.392065][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 551.398875][ T5935] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.409349][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.492370][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 551.516953][ T5935] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.564862][ T5935] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.593300][ T5935] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.601674][ T5935] usb 8-1: Manufacturer: syz [ 551.618874][ T5935] usb 8-1: config 0 descriptor?? [ 552.202143][ T5935] rc_core: IR keymap rc-hauppauge not found [ 552.302222][ T5935] Registered IR keymap rc-empty [ 552.317555][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 552.937710][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 552.994225][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 553.012061][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 553.012078][ T29] audit: type=1400 audit(1735621410.527:718): avc: denied { create } for pid=8721 comm="syz.6.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 553.069805][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input10 [ 553.125064][ T29] audit: type=1400 audit(1735621410.567:719): avc: denied { write } for pid=8721 comm="syz.6.570" path="socket:[19725]" dev="sockfs" ino=19725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 553.217601][ T8730] FAULT_INJECTION: forcing a failure. [ 553.217601][ T8730] name failslab, interval 1, probability 0, space 0, times 0 [ 553.230552][ T8730] CPU: 1 UID: 0 PID: 8730 Comm: syz.0.571 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 553.241151][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 553.251206][ T8730] Call Trace: [ 553.254473][ T8730] [ 553.257392][ T8730] dump_stack_lvl+0x16c/0x1f0 [ 553.262072][ T8730] should_fail_ex+0x497/0x5b0 [ 553.266770][ T8730] ? fs_reclaim_acquire+0xae/0x150 [ 553.271872][ T8730] should_failslab+0xc2/0x120 [ 553.276626][ T8730] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 553.281990][ T8730] ? alloc_empty_file+0x73/0x1e0 [ 553.286934][ T8730] alloc_empty_file+0x73/0x1e0 [ 553.291691][ T8730] path_openat+0xe1/0x2d60 [ 553.296093][ T8730] ? hlock_class+0x4e/0x130 [ 553.300592][ T8730] ? __lock_acquire+0x15a9/0x3c40 [ 553.305614][ T8730] ? __pfx_path_openat+0x10/0x10 [ 553.310555][ T8730] ? __pfx___lock_acquire+0x10/0x10 [ 553.315741][ T8730] ? lock_acquire.part.0+0x11b/0x380 [ 553.321012][ T8730] ? find_held_lock+0x2d/0x110 [ 553.325771][ T8730] do_filp_open+0x20c/0x470 [ 553.330266][ T8730] ? __pfx_do_filp_open+0x10/0x10 [ 553.335276][ T8730] ? find_held_lock+0x2d/0x110 [ 553.340060][ T8730] ? alloc_fd+0x41f/0x760 [ 553.344385][ T8730] do_sys_openat2+0x17a/0x1e0 [ 553.349053][ T8730] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.354256][ T8730] __x64_sys_openat+0x175/0x210 [ 553.359100][ T8730] ? __pfx___x64_sys_openat+0x10/0x10 [ 553.364462][ T8730] ? ksys_write+0x1ba/0x250 [ 553.368965][ T8730] do_syscall_64+0xcd/0x250 [ 553.373468][ T8730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.379351][ T8730] RIP: 0033:0x7f76a4185d29 [ 553.383751][ T8730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.403365][ T8730] RSP: 002b:00007f76a5071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 553.411764][ T8730] RAX: ffffffffffffffda RBX: 00007f76a4376080 RCX: 00007f76a4185d29 [ 553.419725][ T8730] RDX: 00000000008e4081 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 553.427684][ T8730] RBP: 00007f76a5071090 R08: 0000000000000000 R09: 0000000000000000 [ 553.435640][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.443599][ T8730] R13: 0000000000000000 R14: 00007f76a4376080 R15: 00007fff68ce3c28 [ 553.451570][ T8730] [ 553.510567][ T29] audit: type=1400 audit(1735621410.567:720): avc: denied { nlmsg_read } for pid=8721 comm="syz.6.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 553.675151][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.703569][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.733482][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.813242][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.890781][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 553.944765][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 554.018378][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 554.082386][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 554.156746][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 554.273064][ T5935] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 554.387739][ T5935] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 554.439619][ T5935] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 554.571109][ T5935] usb 8-1: USB disconnect, device number 2 [ 558.048569][ T5934] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 558.221105][ T8789] FAULT_INJECTION: forcing a failure. [ 558.221105][ T8789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.235154][ T8789] CPU: 0 UID: 0 PID: 8789 Comm: syz.0.588 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 558.245773][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 558.246254][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 558.256014][ T8789] Call Trace: [ 558.256050][ T8789] [ 558.256060][ T8789] dump_stack_lvl+0x16c/0x1f0 [ 558.256090][ T8789] should_fail_ex+0x497/0x5b0 [ 558.263353][ T5934] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.264464][ T8789] _copy_to_user+0x32/0xd0 [ 558.267403][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.272039][ T8789] simple_read_from_buffer+0xd0/0x160 [ 558.272075][ T8789] proc_fail_nth_read+0x198/0x270 [ 558.272101][ T8789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.272128][ T8789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.272152][ T8789] vfs_read+0x1df/0xbe0 [ 558.277979][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 558.286844][ T8789] ? __fget_files+0x1fc/0x3a0 [ 558.286874][ T8789] ? __pfx___mutex_lock+0x10/0x10 [ 558.286899][ T8789] ? __pfx_vfs_read+0x10/0x10 [ 558.291572][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.302204][ T8789] ? __fget_files+0x206/0x3a0 [ 558.302242][ T8789] ksys_read+0x12b/0x250 [ 558.302262][ T8789] ? __pfx_ksys_read+0x10/0x10 [ 558.302292][ T8789] do_syscall_64+0xcd/0x250 [ 558.302321][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.302346][ T8789] RIP: 0033:0x7f76a418473c [ 558.302361][ T8789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 558.302379][ T8789] RSP: 002b:00007f76a5092030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.302399][ T8789] RAX: ffffffffffffffda RBX: 00007f76a4375fa0 RCX: 00007f76a418473c [ 558.302413][ T8789] RDX: 000000000000000f RSI: 00007f76a50920a0 RDI: 0000000000000004 [ 558.302426][ T8789] RBP: 00007f76a5092090 R08: 0000000000000000 R09: 0000000000000000 [ 558.302438][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.302450][ T8789] R13: 0000000000000000 R14: 00007f76a4375fa0 R15: 00007fff68ce3c28 [ 558.302477][ T8789] [ 559.013150][ T5934] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.022417][ T5934] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.030437][ T5934] usb 7-1: Manufacturer: syz [ 559.037153][ T5934] usb 7-1: config 0 descriptor?? [ 559.128378][ T29] audit: type=1400 audit(1735621416.647:721): avc: denied { create } for pid=8792 comm="syz.7.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 559.203252][ T8795] FAULT_INJECTION: forcing a failure. [ 559.203252][ T8795] name failslab, interval 1, probability 0, space 0, times 0 [ 559.216412][ T8795] CPU: 1 UID: 0 PID: 8795 Comm: syz.7.589 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 559.227029][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 559.237182][ T8795] Call Trace: [ 559.240462][ T8795] [ 559.243400][ T8795] dump_stack_lvl+0x16c/0x1f0 [ 559.248096][ T8795] should_fail_ex+0x497/0x5b0 [ 559.252789][ T8795] ? fs_reclaim_acquire+0xae/0x150 [ 559.257922][ T8795] should_failslab+0xc2/0x120 [ 559.262605][ T8795] __kmalloc_cache_noprof+0x68/0x410 [ 559.267888][ T8795] ip_set_create+0x33f/0x14d0 [ 559.272741][ T8795] ? __pfx_ip_set_create+0x10/0x10 [ 559.277874][ T8795] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 559.282901][ T8795] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 559.288789][ T8795] ? __pfx___lock_acquire+0x10/0x10 [ 559.294012][ T8795] ? lock_acquire+0x2f/0xb0 [ 559.298517][ T8795] ? avc_has_perm_noaudit+0x61/0x3a0 [ 559.303804][ T8795] netlink_rcv_skb+0x16b/0x440 [ 559.308561][ T8795] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 559.314043][ T8795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.319421][ T8795] ? bpf_lsm_capable+0x9/0x10 [ 559.324181][ T8795] ? security_capable+0x7e/0x260 [ 559.329113][ T8795] ? ns_capable+0xd7/0x110 [ 559.333530][ T8795] nfnetlink_rcv+0x1b4/0x430 [ 559.338116][ T8795] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 559.343223][ T8795] ? netlink_deliver_tap+0x1ae/0xd30 [ 559.348507][ T8795] netlink_unicast+0x53c/0x7f0 [ 559.353278][ T8795] ? __pfx_netlink_unicast+0x10/0x10 [ 559.358563][ T8795] netlink_sendmsg+0x8b8/0xd70 [ 559.363324][ T8795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.368612][ T8795] ____sys_sendmsg+0xaaf/0xc90 [ 559.373372][ T8795] ? copy_msghdr_from_user+0x10b/0x160 [ 559.378820][ T8795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.384117][ T8795] ___sys_sendmsg+0x135/0x1e0 [ 559.388788][ T8795] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.393997][ T8795] ? __sys_sendmsg+0xd7/0x220 [ 559.398685][ T8795] __sys_sendmsg+0x16e/0x220 [ 559.403276][ T8795] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.408566][ T8795] do_syscall_64+0xcd/0x250 [ 559.413068][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.418960][ T8795] RIP: 0033:0x7f2403185d29 [ 559.423364][ T8795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.442968][ T8795] RSP: 002b:00007f240401d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.451399][ T8795] RAX: ffffffffffffffda RBX: 00007f2403376080 RCX: 00007f2403185d29 [ 559.459359][ T8795] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b [ 559.467318][ T8795] RBP: 00007f240401d090 R08: 0000000000000000 R09: 0000000000000000 [ 559.475276][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.483235][ T8795] R13: 0000000000000000 R14: 00007f2403376080 R15: 00007ffe6a9380b8 [ 559.491218][ T8795] [ 559.494316][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.528758][ T8792] delete_channel: no stack [ 559.612867][ T5934] rc_core: IR keymap rc-hauppauge not found [ 559.623748][ T5934] Registered IR keymap rc-empty [ 559.628878][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 559.654273][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 559.677735][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 559.723225][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 559.763917][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 559.799361][ T8806] autofs: Unknown parameter '0x0000000000000000' [ 559.806673][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 559.842200][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.015615][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.052351][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.082516][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.112391][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.133264][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.152771][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 560.219687][ T8814] netlink: 52 bytes leftover after parsing attributes in process `syz.7.594'. [ 560.239640][ T29] audit: type=1326 audit(1735621417.761:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.7.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2403185d29 code=0x0 [ 560.262355][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.824367][ T5934] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 561.346952][ T5934] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 561.367284][ T5934] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 561.634187][ T5934] usb 7-1: USB disconnect, device number 9 [ 561.728402][ T8836] netlink: 'syz.6.596': attribute type 11 has an invalid length. [ 562.074888][ T8838] mkiss: ax0: crc mode is auto. [ 562.900262][ T5819] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 562.944112][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.958495][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.097737][ T8869] autofs: Unknown parameter '0x0000000000000000' [ 564.255601][ T8871] loop7: detected capacity change from 0 to 16384 [ 564.423207][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 564.431758][ T5819] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 564.441293][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.449448][ T5819] usb 8-1: Product: syz [ 564.453988][ T5819] usb 8-1: Manufacturer: syz [ 564.458612][ T5819] usb 8-1: SerialNumber: syz [ 564.477906][ T5819] usb 8-1: config 0 descriptor?? [ 564.489136][ T5819] gspca_main: se401-2.14.0 probing 047d:5003 [ 565.217273][ T29] audit: type=1326 audit(1735621422.741:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.7.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2403185d29 code=0x0 [ 565.241553][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.322668][ T8901] [U] [ 565.325561][ T8901] [U] [ 565.328246][ T8901] [U] [ 565.331095][ T8901] [U] [ 565.333762][ T8901] [U] [ 565.336427][ T8901] [U] [ 565.339114][ T8901] [U] [ 565.341779][ T8901] [U] [ 565.459675][ T5819] gspca_se401: read req failed req 0x06 error -19 [ 565.467835][ T5846] Bluetooth: Wrong link type (-22) [ 565.489863][ T5819] usb 8-1: USB disconnect, device number 3 [ 565.499872][ T8901] [U] [ 565.502627][ T8901] [U] [ 565.505324][ T8901] [U] [ 565.640143][ T29] audit: type=1400 audit(1735621423.161:724): avc: denied { write } for pid=8906 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 566.012541][ T8896] [U] [ 566.048100][ T8911] fuse: Bad value for 'fd' [ 567.115447][ T8931] autofs: Unknown parameter '0x0000000000000000' [ 568.342219][ T5888] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 568.588517][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.646814][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.701633][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.749214][ T5888] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.800140][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.855679][ T5888] usb 8-1: config 0 descriptor?? [ 569.146778][ T969] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 569.304410][ T969] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 569.355564][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.367517][ T969] usb 5-1: config 0 descriptor?? [ 570.071740][ T5888] usbhid 8-1:0.0: can't add hid device: -71 [ 570.156928][ T5888] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 570.192800][ T5888] usb 8-1: USB disconnect, device number 4 [ 570.273683][ T5893] usb 5-1: USB disconnect, device number 14 [ 570.298250][ T29] audit: type=1326 audit(1735621427.821:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.0.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x0 [ 570.409170][ T5846] Bluetooth: Wrong link type (-22) [ 571.381258][ T29] audit: type=1400 audit(1735621428.901:726): avc: denied { setopt } for pid=9014 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 574.709990][ T29] audit: type=1326 audit(1735621432.231:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.7.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2403185d29 code=0x0 [ 574.772165][ T29] audit: type=1400 audit(1735621432.261:728): avc: denied { create } for pid=9028 comm="syz.6.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 574.791740][ T5846] Bluetooth: Wrong link type (-22) [ 574.797354][ T29] audit: type=1400 audit(1735621432.271:729): avc: denied { bind } for pid=9028 comm="syz.6.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 576.173169][ T9091] FAULT_INJECTION: forcing a failure. [ 576.173169][ T9091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.192081][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.7.647 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 576.202715][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 576.212795][ T9091] Call Trace: [ 576.216097][ T9091] [ 576.219035][ T9091] dump_stack_lvl+0x16c/0x1f0 [ 576.223742][ T9091] should_fail_ex+0x497/0x5b0 [ 576.228445][ T9091] _copy_from_iter+0x2a1/0x1560 [ 576.233322][ T9091] ? trace_lock_acquire+0x14e/0x1f0 [ 576.238555][ T9091] ? __alloc_skb+0x1fe/0x380 [ 576.243169][ T9091] ? __pfx__copy_from_iter+0x10/0x10 [ 576.248484][ T9091] ? __virt_addr_valid+0x1a4/0x590 [ 576.253724][ T9091] ? __virt_addr_valid+0x5e/0x590 [ 576.258769][ T9091] ? __phys_addr_symbol+0x30/0x80 [ 576.263814][ T9091] ? __check_object_size+0x488/0x710 [ 576.269125][ T9091] netlink_sendmsg+0x813/0xd70 [ 576.273910][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.279200][ T9091] ____sys_sendmsg+0xaaf/0xc90 [ 576.283954][ T9091] ? copy_msghdr_from_user+0x10b/0x160 [ 576.289400][ T9091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.294685][ T9091] ___sys_sendmsg+0x135/0x1e0 [ 576.299353][ T9091] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.304546][ T9091] ? __pfx_lock_release+0x10/0x10 [ 576.309570][ T9091] ? trace_lock_acquire+0x14e/0x1f0 [ 576.314768][ T9091] ? __fget_files+0x206/0x3a0 [ 576.319438][ T9091] __sys_sendmsg+0x16e/0x220 [ 576.324037][ T9091] ? __pfx___sys_sendmsg+0x10/0x10 [ 576.329158][ T9091] do_syscall_64+0xcd/0x250 [ 576.333665][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.339562][ T9091] RIP: 0033:0x7f2403185d29 [ 576.343964][ T9091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.363567][ T9091] RSP: 002b:00007f240403e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.371971][ T9091] RAX: ffffffffffffffda RBX: 00007f2403375fa0 RCX: 00007f2403185d29 [ 576.379954][ T9091] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 576.387911][ T9091] RBP: 00007f240403e090 R08: 0000000000000000 R09: 0000000000000000 [ 576.395870][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.403837][ T9091] R13: 0000000000000000 R14: 00007f2403375fa0 R15: 00007ffe6a9380b8 [ 576.411805][ T9091] [ 576.444192][ T9090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.862205][ T5888] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 578.032088][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 578.088188][ T5888] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 578.102094][ T5888] usb 5-1: config 0 has no interface number 0 [ 578.334400][ T5888] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 579.068269][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.076480][ T5888] usb 5-1: Product: syz [ 579.080634][ T5888] usb 5-1: Manufacturer: syz [ 579.085310][ T5888] usb 5-1: SerialNumber: syz [ 579.172115][ T5888] usb 5-1: config 0 descriptor?? [ 579.344025][ T29] audit: type=1326 audit(1735621436.871:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 579.361393][ T5888] smsc95xx v2.0.0 [ 579.372122][ T29] audit: type=1326 audit(1735621436.871:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 579.401182][ T9126] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 579.432029][ T29] audit: type=1326 audit(1735621436.891:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 579.491135][ T29] audit: type=1326 audit(1735621436.891:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 579.843479][ T29] audit: type=1326 audit(1735621436.891:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 579.963165][ T5846] Bluetooth: Wrong link type (-22) [ 579.983099][ T46] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 580.197556][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 580.208220][ T29] audit: type=1326 audit(1735621436.891:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 580.208455][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 580.311567][ T29] audit: type=1326 audit(1735621436.891:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 580.340342][ T29] audit: type=1326 audit(1735621436.901:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 580.367709][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 580.489766][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 580.616993][ T46] usb 1-1: config 4 has an invalid descriptor of length 148, skipping remainder of the config [ 580.632221][ T46] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 580.670200][ T29] audit: type=1326 audit(1735621436.921:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 580.766637][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 580.803058][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.848336][ T29] audit: type=1326 audit(1735621436.921:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9123 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 580.882062][ T46] usb 1-1: Product: syz [ 580.887929][ T46] usb 1-1: Manufacturer: syz [ 580.912089][ T46] usb 1-1: SerialNumber: syz [ 581.151866][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.161806][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.179050][ T46] usb 1-1: USB disconnect, device number 12 [ 581.653127][ T9174] autofs: Unknown parameter 'fd0x0000000000000000' [ 582.140228][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 582.281069][ T5888] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 582.651529][ T9184] siw: device registration error -23 [ 582.679317][ T5893] usb 5-1: USB disconnect, device number 15 [ 582.954546][ T46] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 583.194657][ T9197] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.222255][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 583.233505][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.242752][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.260271][ T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.278324][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.296198][ T9197] bridge0: entered allmulticast mode [ 583.303092][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 583.331620][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.457015][ T46] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.502126][ T46] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.537253][ T46] usb 7-1: Manufacturer: syz [ 583.568161][ T46] usb 7-1: config 0 descriptor?? [ 584.204552][ T46] rc_core: IR keymap rc-hauppauge not found [ 584.254991][ T46] Registered IR keymap rc-empty [ 584.291597][ T9221] Device name cannot be null; rc = [-22] [ 584.291640][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 584.332345][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 584.683616][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 584.698589][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 584.698606][ T29] audit: type=1400 audit(1735621442.211:822): avc: denied { search } for pid=5483 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=20490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 584.743141][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 584.794839][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 584.829680][ T9226] autofs: Unknown parameter 'fd0x0000000000000000' [ 584.992289][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.022362][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.070560][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.102599][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.155487][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.212478][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.389581][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.484755][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.657727][ T46] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 585.694285][ T46] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 585.774500][ T46] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 585.841905][ T46] usb 7-1: USB disconnect, device number 10 [ 586.092108][ T5893] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 586.243419][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 586.458026][ T46] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 586.638156][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 586.807996][ T46] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 586.824772][ T5893] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 586.833093][ T5893] usb 8-1: config 0 has no interface number 0 [ 586.842514][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.873994][ T46] usb 7-1: config 0 descriptor?? [ 586.880787][ T9255] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 586.883632][ T5893] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 586.976876][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.985134][ T5893] usb 8-1: Product: syz [ 586.989325][ T5893] usb 8-1: Manufacturer: syz [ 586.994060][ T5893] usb 8-1: SerialNumber: syz [ 587.010845][ T5893] usb 8-1: config 0 descriptor?? [ 587.036695][ T5893] smsc95xx v2.0.0 [ 587.568829][ T9275] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 587.595892][ T9275] CIFS: Unable to determine destination address [ 587.746471][ T5893] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 587.760146][ T5893] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 587.774915][ T46] usbhid 7-1:0.0: can't add hid device: -71 [ 587.780942][ T46] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 587.790746][ T46] usb 7-1: USB disconnect, device number 11 [ 587.800032][ T29] audit: type=1400 audit(1735621445.321:823): avc: denied { listen } for pid=9274 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 587.842986][ T5934] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 587.948108][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 587.972421][ T9284] bridge_slave_1: left allmulticast mode [ 587.978103][ T9284] bridge_slave_1: left promiscuous mode [ 587.993896][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.005256][ T5934] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 588.031743][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.081384][ T5934] usb 4-1: config 0 descriptor?? [ 588.092018][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.109933][ T9284] bridge_slave_0: left allmulticast mode [ 588.120388][ T9284] bridge_slave_0: left promiscuous mode [ 588.140003][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.288695][ T9296] autofs: Unknown parameter 'fd0x0000000000000000' [ 588.332089][ T5890] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 588.683573][ T9299] block device autoloading is deprecated and will be removed. [ 588.727232][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.811547][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 588.940766][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.961184][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.991873][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.044449][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 589.058839][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 589.109293][ T5934] usb 4-1: USB disconnect, device number 12 [ 589.142225][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.154886][ T5890] usb 5-1: config 0 descriptor?? [ 590.199555][ T5893] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 590.210508][ T5893] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61 [ 590.224328][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.232660][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.241013][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.254435][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.263696][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.274285][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.283064][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.291299][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.301122][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.312096][ T5890] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 590.339027][ T5890] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 590.371864][ T5890] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 590.398050][ T9318] FAULT_INJECTION: forcing a failure. [ 590.398050][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 590.412436][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.3.690 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 590.423055][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.433213][ T9318] Call Trace: [ 590.436496][ T9318] [ 590.439438][ T9318] dump_stack_lvl+0x16c/0x1f0 [ 590.444131][ T9318] should_fail_ex+0x497/0x5b0 [ 590.448809][ T9318] ? fs_reclaim_acquire+0xae/0x150 [ 590.454042][ T9318] should_failslab+0xc2/0x120 [ 590.458731][ T9318] __kmalloc_noprof+0xcb/0x510 [ 590.463499][ T9318] ? kernfs_fop_write_iter+0x1d/0x500 [ 590.468876][ T9318] kernfs_fop_write_iter+0x223/0x500 [ 590.474166][ T9318] vfs_write+0x5ae/0x1150 [ 590.478487][ T9318] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 590.484292][ T9318] ? __pfx___mutex_lock+0x10/0x10 [ 590.489317][ T9318] ? __pfx_vfs_write+0x10/0x10 [ 590.494096][ T9318] ? __rcu_read_unlock+0x2b4/0x580 [ 590.499220][ T9318] ksys_write+0x12b/0x250 [ 590.503548][ T9318] ? __pfx_ksys_write+0x10/0x10 [ 590.508510][ T9318] ? __x64_sys_write+0x68/0xb0 [ 590.513283][ T9318] do_syscall_64+0xcd/0x250 [ 590.517789][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.523769][ T9318] RIP: 0033:0x7f0a45f85d29 [ 590.528180][ T9318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.547799][ T9318] RSP: 002b:00007f0a46ce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.556226][ T9318] RAX: ffffffffffffffda RBX: 00007f0a46176080 RCX: 00007f0a45f85d29 [ 590.564202][ T9318] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 590.572341][ T9318] RBP: 00007f0a46ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 590.580303][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.588269][ T9318] R13: 0000000000000000 R14: 00007f0a46176080 R15: 00007ffeaa937fc8 [ 590.596243][ T9318] [ 591.713708][ T969] usb 5-1: USB disconnect, device number 16 [ 591.732791][ T5890] usb 8-1: USB disconnect, device number 5 [ 593.352190][ T5890] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 593.509422][ T5890] usb 8-1: device descriptor read/64, error -71 [ 593.952068][ T5890] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 594.112801][ T5890] usb 8-1: device descriptor read/64, error -71 [ 594.263046][ T5890] usb usb8-port1: attempt power cycle [ 594.422222][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 594.622217][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 594.637213][ T46] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 594.832197][ T5890] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 595.199756][ T46] usb 4-1: config 0 has no interface number 0 [ 595.272761][ T46] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 595.283263][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.291286][ T46] usb 4-1: Product: syz [ 595.295998][ T29] audit: type=1400 audit(1735621452.271:824): avc: denied { lock } for pid=9368 comm="syz.6.706" path="socket:[21348]" dev="sockfs" ino=21348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 595.334186][ T46] usb 4-1: Manufacturer: syz [ 595.338831][ T46] usb 4-1: SerialNumber: syz [ 595.354231][ T46] usb 4-1: config 0 descriptor?? [ 595.357088][ T5890] usb 8-1: device descriptor read/8, error -71 [ 595.360948][ T46] smsc95xx v2.0.0 [ 595.586484][ T29] audit: type=1400 audit(1735621453.031:825): avc: denied { mount } for pid=9382 comm="syz.7.709" name="/" dev="hugetlbfs" ino=21366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 596.244410][ T9395] fuse: Bad value for 'group_id' [ 596.249442][ T9395] fuse: Bad value for 'group_id' [ 596.966119][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 596.976910][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 597.922697][ T29] audit: type=1400 audit(1735621455.451:826): avc: denied { create } for pid=9382 comm="syz.7.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 598.709819][ T9425] FAULT_INJECTION: forcing a failure. [ 598.709819][ T9425] name failslab, interval 1, probability 0, space 0, times 0 [ 598.723845][ T9425] CPU: 1 UID: 0 PID: 9425 Comm: syz.4.719 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 598.734468][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.744551][ T9425] Call Trace: [ 598.747841][ T9425] [ 598.750787][ T9425] dump_stack_lvl+0x16c/0x1f0 [ 598.755583][ T9425] should_fail_ex+0x497/0x5b0 [ 598.760291][ T9425] ? fs_reclaim_acquire+0xae/0x150 [ 598.765425][ T9425] should_failslab+0xc2/0x120 [ 598.770132][ T9425] __kmalloc_node_noprof+0xd1/0x510 [ 598.775359][ T9425] ? trace_contention_end+0xee/0x140 [ 598.780670][ T9425] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 598.786157][ T9425] ? find_held_lock+0x2d/0x110 [ 598.790952][ T9425] __kvmalloc_node_noprof+0xad/0x1a0 [ 598.796264][ T9425] traverse.part.0.constprop.0+0x392/0x640 [ 598.802098][ T9425] ? trace_lock_acquire+0x14e/0x1f0 [ 598.807340][ T9425] seq_lseek+0x2b4/0x440 [ 598.811594][ T9425] proc_reg_llseek+0x205/0x2f0 [ 598.816443][ T9425] ksys_lseek+0xf0/0x1b0 [ 598.820688][ T9425] do_syscall_64+0xcd/0x250 [ 598.825192][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.831084][ T9425] RIP: 0033:0x7f6f42185d29 [ 598.835496][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.855139][ T9425] RSP: 002b:00007f6f42fc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 598.863736][ T9425] RAX: ffffffffffffffda RBX: 00007f6f42376080 RCX: 00007f6f42185d29 [ 598.871732][ T9425] RDX: 0000000000000000 RSI: 0000000000000401 RDI: 0000000000000009 [ 598.879716][ T9425] RBP: 00007f6f42fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 598.887698][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.895677][ T9425] R13: 0000000000000000 R14: 00007f6f42376080 R15: 00007ffd780ea8f8 [ 598.903667][ T9425] [ 599.158209][ T46] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 599.290699][ T46] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 599.596419][ T46] usb 4-1: USB disconnect, device number 13 [ 601.688407][ T9448] fuse: Bad value for 'group_id' [ 601.693493][ T9448] fuse: Bad value for 'group_id' [ 602.232876][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.726'. [ 602.308138][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.726'. [ 602.842081][ T969] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 603.144518][ T9468] capability: warning: `syz.4.730' uses 32-bit capabilities (legacy support in use) [ 603.329480][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 603.340580][ T969] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 603.349785][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.369360][ T969] usb 4-1: config 0 descriptor?? [ 603.375051][ T9458] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.498942][ T29] audit: type=1400 audit(1735621461.011:827): avc: denied { read } for pid=9476 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.626678][ T29] audit: type=1400 audit(1735621461.151:828): avc: denied { setopt } for pid=9476 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.742161][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 603.843598][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 603.849658][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 603.880410][ T969] usb 4-1: USB disconnect, device number 14 [ 603.896844][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 603.917751][ T5890] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 603.926439][ T5890] usb 5-1: config 0 has no interface number 0 [ 603.936072][ T5890] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 603.945332][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.953406][ T5890] usb 5-1: Product: syz [ 603.957632][ T5890] usb 5-1: Manufacturer: syz [ 603.962331][ T5890] usb 5-1: SerialNumber: syz [ 603.979392][ T5890] usb 5-1: config 0 descriptor?? [ 603.986254][ T5890] smsc95xx v2.0.0 [ 603.999667][ T29] audit: type=1400 audit(1735621461.521:829): avc: denied { read } for pid=9490 comm="syz.6.734" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 604.072063][ T29] audit: type=1400 audit(1735621461.591:830): avc: denied { ioctl } for pid=9490 comm="syz.6.734" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 604.112950][ T29] audit: type=1400 audit(1735621461.641:831): avc: denied { bind } for pid=9469 comm="syz.7.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.248094][ T29] audit: type=1400 audit(1735621461.771:832): avc: denied { setopt } for pid=9469 comm="syz.7.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.391392][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 604.405806][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 605.306458][ T5843] Bluetooth: hci5: sending frame failed (-49) [ 605.314393][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 605.528696][ T9516] fuse: Bad value for 'group_id' [ 605.533834][ T9516] fuse: Bad value for 'group_id' [ 606.352518][ T29] audit: type=1400 audit(2000000000.119:833): avc: denied { read append } for pid=9512 comm="syz.6.741" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 606.403910][ T7750] Bluetooth: hci5: Frame reassembly failed (-84) [ 606.554406][ T29] audit: type=1400 audit(2000000000.119:834): avc: denied { open } for pid=9512 comm="syz.6.741" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 606.590002][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 606.606653][ T5890] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 608.550361][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 609.556669][ T9549] FAULT_INJECTION: forcing a failure. [ 609.556669][ T9549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.571675][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.4.755 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 609.582296][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 609.592368][ T9549] Call Trace: [ 609.595665][ T9549] [ 609.598596][ T9549] dump_stack_lvl+0x16c/0x1f0 [ 609.603290][ T9549] should_fail_ex+0x497/0x5b0 [ 609.607989][ T9549] _copy_from_user+0x2e/0xd0 [ 609.612595][ T9549] ppp_set_compress+0x112/0x6c0 [ 609.617548][ T9549] ? __pfx_ppp_set_compress+0x10/0x10 [ 609.622937][ T9549] ? __might_fault+0xe3/0x190 [ 609.627639][ T9549] ppp_ioctl+0x18a4/0x2590 [ 609.632090][ T9549] ? __pfx_lock_release+0x10/0x10 [ 609.637127][ T9549] ? __pfx_ppp_ioctl+0x10/0x10 [ 609.642338][ T9549] ? selinux_file_ioctl+0xb4/0x270 [ 609.647471][ T9549] ? __pfx_ppp_ioctl+0x10/0x10 [ 609.652247][ T9549] __x64_sys_ioctl+0x190/0x200 [ 609.657044][ T9549] do_syscall_64+0xcd/0x250 [ 609.661592][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.667500][ T9549] RIP: 0033:0x7f6f42185d29 [ 609.671919][ T9549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.692066][ T9549] RSP: 002b:00007f6f42fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.700523][ T9549] RAX: ffffffffffffffda RBX: 00007f6f42375fa0 RCX: 00007f6f42185d29 [ 609.708518][ T9549] RDX: 0000000020000000 RSI: 000000004010744d RDI: 0000000000000005 [ 609.716521][ T9549] RBP: 00007f6f42fea090 R08: 0000000000000000 R09: 0000000000000000 [ 609.724528][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.732518][ T9549] R13: 0000000000000000 R14: 00007f6f42375fa0 R15: 00007ffd780ea8f8 [ 609.740618][ T9549] [ 609.743911][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.723908][ T5890] usb 5-1: USB disconnect, device number 17 [ 611.514621][ T9567] fuse: Bad value for 'group_id' [ 611.519649][ T9567] fuse: Bad value for 'group_id' [ 611.873882][ T9570] syz.0.756 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 612.130788][ T29] audit: type=1326 audit(2000000005.799:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 612.481466][ T29] audit: type=1326 audit(2000000005.799:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 612.635127][ T29] audit: type=1326 audit(2000000005.799:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76a4187c47 code=0x7ffc0000 [ 612.664626][ T5846] Bluetooth: Wrong link type (-22) [ 612.853223][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 612.880316][ T29] audit: type=1326 audit(2000000005.799:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f76a4187bbc code=0x7ffc0000 [ 613.362410][ T29] audit: type=1326 audit(2000000005.809:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f76a4187af4 code=0x7ffc0000 [ 613.611620][ T29] audit: type=1326 audit(2000000005.809:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76a418498a code=0x7ffc0000 [ 613.680325][ T29] audit: type=1326 audit(2000000005.809:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 613.727677][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 613.743341][ T29] audit: type=1326 audit(2000000005.809:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 613.768040][ T29] audit: type=1326 audit(2000000005.809:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 614.289531][ T29] audit: type=1326 audit(2000000005.809:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9569 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a4185d29 code=0x7ffc0000 [ 614.892097][ T5890] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 615.142168][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 615.161658][ T5890] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 615.186728][ T5890] usb 5-1: config 0 has no interface number 0 [ 615.261568][ T5890] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 615.281571][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.422364][ T5890] usb 5-1: Product: syz [ 615.426641][ T5890] usb 5-1: Manufacturer: syz [ 615.431329][ T5890] usb 5-1: SerialNumber: syz [ 615.447273][ T5890] usb 5-1: config 0 descriptor?? [ 615.455583][ T5890] smsc95xx v2.0.0 [ 615.752266][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 615.788107][ T9619] fuse: Bad value for 'group_id' [ 615.793225][ T9619] fuse: Bad value for 'group_id' [ 616.219056][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 616.226050][ T9620] Bluetooth: MGMT ver 1.23 [ 616.230267][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 618.140750][ T5890] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 618.185684][ T5890] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 618.640315][ T9663] ntfs3(nullb0): Primary boot signature is not NTFS. [ 618.649218][ T9663] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 618.797931][ T9663] bridge0: port 3(erspan0) entered blocking state [ 618.805300][ T9663] bridge0: port 3(erspan0) entered disabled state [ 618.814247][ T9663] erspan0: entered allmulticast mode [ 618.839704][ T9663] erspan0: entered promiscuous mode [ 618.849742][ T9663] bridge0: port 3(erspan0) entered blocking state [ 618.856278][ T9663] bridge0: port 3(erspan0) entered forwarding state [ 619.111278][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 619.111295][ T29] audit: type=1400 audit(2000000012.369:856): avc: denied { module_load } for pid=9653 comm="syz.7.780" path="/sys/power/image_size" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 619.305046][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.777'. [ 619.637734][ T5935] usb 5-1: USB disconnect, device number 18 [ 619.656510][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.777'. [ 619.831338][ T7755] Bluetooth: hci5: Frame reassembly failed (-84) [ 620.540132][ T9685] fuse: Bad value for 'group_id' [ 620.545228][ T9685] fuse: Bad value for 'group_id' [ 621.367989][ T9688] ptrace attach of "./syz-executor exec"[9692] was attempted by "./syz-executor exec"[9688] [ 621.495899][ T29] audit: type=1400 audit(2000000015.279:857): avc: denied { read write } for pid=9686 comm="syz.4.786" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 621.517308][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 621.548953][ T29] audit: type=1400 audit(2000000015.279:858): avc: denied { open } for pid=9686 comm="syz.4.786" path="/147/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 621.600528][ T29] audit: type=1800 audit(2000000015.329:859): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.786" name="/" dev="9p" ino=2 res=0 errno=0 [ 621.651358][ T29] audit: type=1326 audit(2000000015.449:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.7.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2403185d29 code=0x0 [ 621.730913][ T5846] Bluetooth: Wrong link type (-22) [ 621.824315][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 623.650833][ T5819] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 624.195059][ T9728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.202878][ T9728] IPv6: NLM_F_CREATE should be set when creating new route [ 624.210154][ T9728] IPv6: NLM_F_CREATE should be set when creating new route [ 624.316670][ T29] audit: type=1400 audit(2000000018.089:861): avc: denied { read } for pid=9719 comm="syz.3.795" path="socket:[22874]" dev="sockfs" ino=22874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 624.519125][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.525972][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.737505][ T29] audit: type=1400 audit(2000000018.099:862): avc: denied { read } for pid=9719 comm="syz.3.795" lport=56462 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 624.942125][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 624.956146][ T5819] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 624.964537][ T5819] usb 7-1: config 0 has no interface number 0 [ 624.975613][ T5819] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 624.985393][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.004425][ T5819] usb 7-1: Product: syz [ 625.008699][ T5819] usb 7-1: Manufacturer: syz [ 625.566395][ T5819] usb 7-1: SerialNumber: syz [ 625.659277][ T5819] usb 7-1: config 0 descriptor?? [ 625.669846][ T5819] smsc95xx v2.0.0 [ 626.369350][ T5890] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 626.386558][ T5819] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 626.399067][ T5819] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 627.152088][ T5819] usb 7-1: USB disconnect, device number 12 [ 627.343356][ T5890] usb 8-1: Using ep0 maxpacket: 8 [ 627.378969][ T5890] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 627.446208][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.457481][ T5890] usb 8-1: Product: syz [ 627.465696][ T5890] usb 8-1: Manufacturer: syz [ 627.472900][ T5890] usb 8-1: SerialNumber: syz [ 627.622154][ T5890] usb 8-1: config 0 descriptor?? [ 627.912371][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 627.987653][ T5890] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 629.150826][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 629.162078][ T46] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 629.172581][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.181714][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.265182][ T9769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 629.275828][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.300442][ T9769] netlink: 76 bytes leftover after parsing attributes in process `syz.4.810'. [ 630.369030][ T9792] FAULT_INJECTION: forcing a failure. [ 630.369030][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 630.428940][ T5893] usb 5-1: USB disconnect, device number 19 [ 630.459189][ T29] audit: type=1400 audit(2000000024.259:863): avc: denied { watch_mount } for pid=9793 comm="syz.6.817" path="/103" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 630.682229][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.0.816 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 630.692866][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.702937][ T9792] Call Trace: [ 630.706225][ T9792] [ 630.709162][ T9792] dump_stack_lvl+0x16c/0x1f0 [ 630.713855][ T9792] should_fail_ex+0x497/0x5b0 [ 630.718535][ T9792] ? fs_reclaim_acquire+0xae/0x150 [ 630.723646][ T9792] should_failslab+0xc2/0x120 [ 630.728406][ T9792] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 630.734769][ T9792] ? kstrdup_const+0x63/0x80 [ 630.739371][ T9792] kstrdup+0x53/0x100 [ 630.743345][ T9792] kstrdup_const+0x63/0x80 [ 630.747757][ T9792] kvasprintf_const+0x10f/0x1a0 [ 630.752597][ T9792] kobject_set_name_vargs+0x5a/0x140 [ 630.757879][ T9792] dev_set_name+0xc8/0x100 [ 630.762306][ T9792] ? __pfx_dev_set_name+0x10/0x10 [ 630.767357][ T9792] tty_register_device_attr+0x302/0x7c0 [ 630.772910][ T9792] ? __pfx_tty_register_device_attr+0x10/0x10 [ 630.778985][ T9792] rfcomm_dev_ioctl+0x16b0/0x1ca0 [ 630.784014][ T9792] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 630.789388][ T9792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 630.795279][ T9792] rfcomm_sock_ioctl+0xaa/0xd0 [ 630.800040][ T9792] sock_do_ioctl+0x116/0x280 [ 630.804634][ T9792] ? __pfx_sock_do_ioctl+0x10/0x10 [ 630.809749][ T9792] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 630.816246][ T9792] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 630.822740][ T9792] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 630.829590][ T9792] sock_ioctl+0x228/0x6c0 [ 630.833912][ T9792] ? __pfx_sock_ioctl+0x10/0x10 [ 630.838757][ T9792] ? selinux_file_ioctl+0x180/0x270 [ 630.843948][ T9792] ? selinux_file_ioctl+0xb4/0x270 [ 630.849052][ T9792] ? __pfx_sock_ioctl+0x10/0x10 [ 630.853894][ T9792] __x64_sys_ioctl+0x190/0x200 [ 630.858658][ T9792] do_syscall_64+0xcd/0x250 [ 630.863159][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.869066][ T9792] RIP: 0033:0x7f76a4185d29 [ 630.873507][ T9792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.893372][ T9792] RSP: 002b:00007f76a5071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.901778][ T9792] RAX: ffffffffffffffda RBX: 00007f76a4376080 RCX: 00007f76a4185d29 [ 630.909741][ T9792] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 630.917709][ T9792] RBP: 00007f76a5071090 R08: 0000000000000000 R09: 0000000000000000 [ 630.925671][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.933632][ T9792] R13: 0000000000000000 R14: 00007f76a4376080 R15: 00007fff68ce3c28 [ 630.941611][ T9792] [ 631.061759][ T5890] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 631.096983][ T5890] usb 8-1: USB disconnect, device number 10 [ 632.284045][ T29] audit: type=1400 audit(2000000026.089:864): avc: denied { mounton } for pid=9811 comm="syz.3.823" path="/proc/622/task" dev="proc" ino=23887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 632.418747][ T29] audit: type=1326 audit(2000000026.219:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.7.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2403185d29 code=0x0 [ 632.662342][ T5819] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 632.857055][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 632.880245][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.899355][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.909801][ T5819] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 632.919097][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.965139][ T5819] usb 1-1: config 0 descriptor?? [ 633.118638][ T5890] kernel read not supported for file /video7 (pid: 5890 comm: kworker/0:4) [ 633.153148][ T9837] xt_time: unknown flags 0xc [ 633.231814][ T9839] loop7: detected capacity change from 0 to 16384 [ 633.238505][ T29] audit: type=1400 audit(2000000027.039:866): avc: denied { read write } for pid=9833 comm="syz.7.830" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 633.294339][ T29] audit: type=1400 audit(2000000027.039:867): avc: denied { open } for pid=9833 comm="syz.7.830" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 633.394202][ T5893] kernel write not supported for file /uinput (pid: 5893 comm: kworker/0:6) [ 633.404595][ T5819] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 634.138128][ T5819] ft260 0003:0403:6030.0009: chip code: 5e81 abf2 [ 634.267699][ T5819] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 634.462288][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 634.472531][ T5819] ft260 0003:0403:6030.0009: failed to retrieve status: -71, no wakeup [ 634.481210][ T5819] ft260 0003:0403:6030.0009: failed to retrieve status: -71 [ 634.503653][ T5819] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 634.541031][ T5819] usb 1-1: USB disconnect, device number 13 [ 634.622901][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 634.633565][ T5890] usb 7-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 634.657003][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.686605][ T5890] usb 7-1: config 0 descriptor?? [ 634.714325][ T5890] usb 7-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 634.740170][ T5890] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 634.741215][ T29] audit: type=1400 audit(2000000028.539:868): avc: denied { bind } for pid=9862 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 634.751577][ T5890] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 634.791450][ T5890] usb 7-1: media controller created [ 634.816852][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.837390][ T5890] usb 7-1: selecting invalid altsetting 1 [ 634.843343][ T5890] set interface failed [ 634.843736][ T5890] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 634.856351][ T5890] error writing reg: 0xff, val: 0x00 [ 634.866172][ T9861] warning: `syz.7.835' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 634.908694][ T5890] dvb_usb_mxl111sf 7-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 634.910246][ T9861] block nbd7: NBD_DISCONNECT [ 634.953924][ T5890] usb 7-1: USB disconnect, device number 13 [ 634.986976][ T9861] syz.7.835 (9861) used greatest stack depth: 18528 bytes left [ 635.032112][ T5819] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 635.282221][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 635.286327][ T29] audit: type=1400 audit(2000000029.089:869): avc: denied { mounton } for pid=9872 comm="syz.0.840" path="/207/file0" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 635.289032][ T5819] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 635.310298][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.315236][ T9874] syz.0.840: attempt to access beyond end of device [ 635.315236][ T9874] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 635.323246][ T5819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.347478][ T9874] efs: cannot read volume header [ 635.362182][ T5819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.371843][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.383951][ T5819] usb 4-1: Product: syz [ 635.388141][ T5819] usb 4-1: Manufacturer: syz [ 635.393315][ T5819] usb 4-1: SerialNumber: syz [ 635.400202][ T5819] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 635.403039][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 635.409820][ T5819] usb 4-1: no configuration chosen from 1 choice [ 635.468645][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.480118][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.504678][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.535852][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.309056][ T29] audit: type=1400 audit(2000000031.109:870): avc: denied { watch } for pid=9903 comm="syz.4.849" path="/158/net_prio.prioidx" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 637.453044][ T29] audit: type=1400 audit(2000000031.239:871): avc: denied { watch_sb watch_reads } for pid=9903 comm="syz.4.849" path="/158/net_prio.prioidx" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.147627][ T5890] usb 4-1: USB disconnect, device number 15 [ 638.202415][ T5843] Bluetooth: hci3: adv larger than maximum supported [ 638.202443][ T5843] Bluetooth: hci3: Malformed LE Event: 0x0d [ 639.741040][ T9935] sd 0:0:1:0: PR command failed: 1026 [ 639.748837][ T9935] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 639.756969][ T9935] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 639.774172][ T9935] netlink: 'syz.7.858': attribute type 4 has an invalid length. [ 639.792120][ T29] audit: type=1400 audit(2000000033.529:872): avc: denied { read } for pid=9934 comm="syz.7.858" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 639.883437][ T5935] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 640.166391][ T29] audit: type=1400 audit(2000000033.529:873): avc: denied { open } for pid=9934 comm="syz.7.858" path="/72/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 640.239597][ T9943] netlink: 'syz.7.858': attribute type 4 has an invalid length. [ 640.240192][ T29] audit: type=1400 audit(2000000033.529:874): avc: denied { ioctl } for pid=9934 comm="syz.7.858" path="/72/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 640.293852][ T29] audit: type=1400 audit(2000000034.099:875): avc: denied { create } for pid=9934 comm="syz.7.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 640.294636][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short [ 640.330160][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.343518][ T5935] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 640.363730][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.371758][ T5935] usb 1-1: Product: syz [ 640.377994][ T5935] usb 1-1: Manufacturer: syz [ 640.383007][ T5935] usb 1-1: SerialNumber: syz [ 640.449420][ T5935] usb 1-1: config 0 descriptor?? [ 640.460013][ T5935] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 640.672309][ T29] audit: type=1400 audit(2000000034.459:876): avc: denied { append } for pid=9945 comm="syz.6.860" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 640.695747][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 640.715577][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 640.728918][ T29] audit: type=1400 audit(2000000034.459:877): avc: denied { map } for pid=9945 comm="syz.6.860" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 640.773257][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 640.812133][ T29] audit: type=1400 audit(2000000034.459:878): avc: denied { write execute } for pid=9945 comm="syz.6.860" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 640.988753][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 641.015518][ T9955] net_ratelimit: 7 callbacks suppressed [ 641.015570][ T9955] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 641.059380][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 641.088623][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 641.125670][ T5893] IPVS: starting estimator thread 0... [ 641.137204][ T9955] fuse: Bad value for 'group_id' [ 641.153265][ T9955] fuse: Bad value for 'group_id' [ 641.222267][ T9960] IPVS: using max 27 ests per chain, 64800 per kthread [ 641.326657][ T6574] bond0: (slave bond_slave_0): interface is now down [ 641.348796][ T6574] bond0: (slave bond_slave_1): interface is now down [ 641.377527][ T6574] bond0: now running without any active interface! [ 642.752135][ T5934] usb 1-1: USB disconnect, device number 14 [ 643.682926][ T29] audit: type=1400 audit(2000000037.479:879): avc: denied { bind } for pid=9998 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 643.842110][ T5893] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 643.992505][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 643.999991][ T5893] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 644.016243][ T5893] usb 8-1: config 0 has no interface number 0 [ 644.031037][ T5893] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 644.042237][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.050340][ T5893] usb 8-1: Product: syz [ 644.055936][ T5893] usb 8-1: Manufacturer: syz [ 644.068056][ T5893] usb 8-1: SerialNumber: syz [ 644.077952][ T5893] usb 8-1: config 0 descriptor?? [ 644.092762][ T5893] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 644.390779][ T5893] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 645.118228][ T5893] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 646.121386][T10045] FAULT_INJECTION: forcing a failure. [ 646.121386][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 646.137776][T10045] CPU: 1 UID: 0 PID: 10045 Comm: syz.6.890 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 646.148486][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 646.158546][T10045] Call Trace: [ 646.161838][T10045] [ 646.164781][T10045] dump_stack_lvl+0x16c/0x1f0 [ 646.169465][T10045] should_fail_ex+0x497/0x5b0 [ 646.174165][T10045] ? fs_reclaim_acquire+0xae/0x150 [ 646.179278][T10045] should_failslab+0xc2/0x120 [ 646.183982][T10045] __kmalloc_cache_noprof+0x68/0x410 [ 646.189283][T10045] ? find_held_lock+0x2d/0x110 [ 646.194051][T10045] rtnl_newlink+0x109/0x1d60 [ 646.198642][T10045] ? hlock_class+0x4e/0x130 [ 646.203153][T10045] ? __lock_acquire+0xcc5/0x3c40 [ 646.208093][T10045] ? __pfx_rtnl_newlink+0x10/0x10 [ 646.213123][T10045] ? __pfx___lock_acquire+0x10/0x10 [ 646.218322][T10045] ? cred_has_capability.isra.0+0x192/0x2f0 [ 646.224207][T10045] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 646.230454][T10045] ? find_held_lock+0x2d/0x110 [ 646.235223][T10045] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 646.240356][T10045] ? __pfx_lock_release+0x10/0x10 [ 646.245386][T10045] ? trace_lock_acquire+0x14e/0x1f0 [ 646.250615][T10045] ? __pfx_rtnl_newlink+0x10/0x10 [ 646.255663][T10045] rtnetlink_rcv_msg+0x95b/0xea0 [ 646.260649][T10045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.266125][T10045] netlink_rcv_skb+0x16b/0x440 [ 646.270913][T10045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.276394][T10045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.281696][T10045] ? netlink_deliver_tap+0x1ae/0xd30 [ 646.287100][T10045] netlink_unicast+0x53c/0x7f0 [ 646.291884][T10045] ? __pfx_netlink_unicast+0x10/0x10 [ 646.297163][T10045] netlink_sendmsg+0x8b8/0xd70 [ 646.301934][T10045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.307240][T10045] ____sys_sendmsg+0xaaf/0xc90 [ 646.312008][T10045] ? copy_msghdr_from_user+0x10b/0x160 [ 646.317472][T10045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.322771][T10045] ___sys_sendmsg+0x135/0x1e0 [ 646.327442][T10045] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.332657][T10045] ? __pfx_lock_release+0x10/0x10 [ 646.337695][T10045] ? trace_lock_acquire+0x14e/0x1f0 [ 646.342916][T10045] ? __fget_files+0x206/0x3a0 [ 646.347595][T10045] __sys_sendmsg+0x16e/0x220 [ 646.352170][T10045] ? __pfx___sys_sendmsg+0x10/0x10 [ 646.357281][T10045] do_syscall_64+0xcd/0x250 [ 646.361790][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.367682][T10045] RIP: 0033:0x7f0062185d29 [ 646.372093][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.391711][T10045] RSP: 002b:00007f0063099038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.400142][T10045] RAX: ffffffffffffffda RBX: 00007f0062375fa0 RCX: 00007f0062185d29 [ 646.408133][T10045] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 646.416090][T10045] RBP: 00007f0063099090 R08: 0000000000000000 R09: 0000000000000000 [ 646.424068][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.432035][T10045] R13: 0000000000000000 R14: 00007f0062375fa0 R15: 00007fff24518818 [ 646.440125][T10045] [ 646.443234][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.526801][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 646.563325][ T5934] usb 8-1: USB disconnect, device number 11 [ 646.585060][ T5934] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 646.680857][ T5934] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 646.693097][ T5934] quatech2 8-1:0.51: device disconnected [ 647.789748][ T29] audit: type=1400 audit(2000000041.569:880): avc: denied { watch_reads } for pid=10062 comm="syz.6.898" path="/123" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 647.815072][ T29] audit: type=1400 audit(2000000041.579:881): avc: denied { read } for pid=10062 comm="syz.6.898" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 647.847298][T10069] binder: 10060:10069 ioctl 540a 3 returned -22 [ 647.875991][T10063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.882607][T10063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 648.931532][T10063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 649.021615][T10077] binder: 10060:10077 ioctl c04064a0 200002c0 returned -22 [ 649.047041][T10063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 649.059529][T10063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 649.062791][T10080] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 649.073806][ T5846] Bluetooth: Wrong link type (-22) [ 649.079196][ T5846] Bluetooth: hci2: link tx timeout [ 649.091844][T10063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 649.110340][T10080] netlink: 224 bytes leftover after parsing attributes in process `syz.3.901'. [ 649.121583][T10063] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 649.164142][T10063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 649.170350][T10063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 649.208644][T10085] fuse: Bad value for 'fd' [ 649.438115][T10092] xt_connbytes: Forcing CT accounting to be enabled [ 649.444981][T10092] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 649.456900][T10092] xt_bpf: check failed: parse error [ 649.792498][ T5935] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 649.908295][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 650.035341][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 650.048998][T10091] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 650.086879][ T5935] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 650.096860][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.105512][ T5935] usb 4-1: Product: syz [ 650.110066][ T5935] usb 4-1: Manufacturer: syz [ 650.115323][ T5935] usb 4-1: SerialNumber: syz [ 650.132190][ T5935] usb 4-1: config 0 descriptor?? [ 650.140633][ T5935] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 650.422837][ T5934] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 650.668999][ T5935] gspca_sonixj: reg_w1 err -110 [ 650.675307][ T5935] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 650.832234][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 650.845481][ T5934] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 650.887715][ T5934] usb 1-1: config 0 has no interface number 0 [ 650.894703][ T5934] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 9472, setting to 1024 [ 650.906101][ T5934] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 650.958155][ T5934] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 650.967418][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.978303][ T5934] usb 1-1: Product: syz [ 650.982850][ T5934] usb 1-1: Manufacturer: syz [ 650.987455][ T5934] usb 1-1: SerialNumber: syz [ 651.007012][ T5934] usb 1-1: config 0 descriptor?? [ 651.013524][T10100] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.020974][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 651.022271][ T5934] smsc95xx v2.0.0 [ 651.093813][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 651.172199][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 651.333240][T10100] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.767089][T10118] binder: 10117:10118 ioctl c028aa03 20000240 returned -22 [ 651.780793][ T29] audit: type=1400 audit(2000000045.579:882): avc: denied { nlmsg_write } for pid=10117 comm="syz.7.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 651.972540][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 652.032422][ T29] audit: type=1400 audit(2000000045.839:883): avc: denied { setopt } for pid=10122 comm="syz.7.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 652.126750][ T29] audit: type=1400 audit(2000000045.929:884): avc: denied { create } for pid=10099 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 652.169368][ T5893] usb 4-1: USB disconnect, device number 16 [ 652.431149][T10135] fuse: Bad value for 'group_id' [ 652.436226][T10135] fuse: Bad value for 'group_id' [ 652.504849][ T46] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 652.513226][ T5935] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 652.834575][ T46] usb 8-1: Using ep0 maxpacket: 8 [ 653.055250][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 653.073856][ T46] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 653.082466][ T46] usb 8-1: config 150 has no interface number 0 [ 653.088802][ T46] usb 8-1: config 150 interface 204 has no altsetting 0 [ 653.095966][ T46] usb 8-1: config 150 interface 1 has no altsetting 0 [ 653.100895][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 653.182061][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 653.270198][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 653.721646][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.786123][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.813647][ T46] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 653.827341][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.845386][ T46] usb 8-1: Product: syz [ 653.849630][ T46] usb 8-1: Manufacturer: syz [ 653.854377][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 653.865447][ T46] usb 8-1: SerialNumber: syz [ 653.870073][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.896022][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.905576][ T5935] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.913924][ T5935] usb 5-1: Manufacturer: syz [ 653.922037][ T5935] usb 5-1: config 0 descriptor?? [ 654.262854][ T29] audit: type=1400 audit(2000000048.039:885): avc: denied { getopt } for pid=10122 comm="syz.7.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 654.592284][ T5935] rc_core: IR keymap rc-hauppauge not found [ 654.610208][ T5935] Registered IR keymap rc-empty [ 654.630729][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 654.637580][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 654.668778][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 654.689912][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 654.700074][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 654.725858][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 654.746707][ T5934] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 654.767703][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 654.796454][ T5934] usb 1-1: USB disconnect, device number 15 [ 654.839831][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 654.862816][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 654.902807][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 654.933229][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 655.098694][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 655.269376][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 655.284169][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 655.712870][T10168] fuse: Bad value for 'group_id' [ 655.717933][T10168] fuse: Bad value for 'group_id' [ 655.931522][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 656.216759][ T46] xr_serial 8-1:150.204: xr_serial converter detected [ 656.244735][ T46] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 656.277843][ T46] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 656.313089][ T46] usb 8-1: USB disconnect, device number 12 [ 656.327659][ T46] xr_serial 8-1:150.204: device disconnected [ 656.338071][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 656.382435][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 656.419253][ T5935] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 656.458910][ T5935] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 656.474713][ T5935] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.488622][ T5935] usb 5-1: USB disconnect, device number 20 [ 656.939735][T10172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 656.946834][T10172] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 656.976932][T10172] vhci_hcd vhci_hcd.0: Device attached [ 657.000078][T10181] vhci_hcd: connection closed [ 657.008141][ T5881] vhci_hcd: stop threads [ 657.038154][ T5881] vhci_hcd: release socket [ 657.047146][ T5881] vhci_hcd: disconnect device [ 657.053967][ T29] audit: type=1400 audit(2000000050.859:886): avc: denied { write } for pid=10183 comm="syz.6.930" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 657.083144][ T29] audit: type=1400 audit(2000000050.879:887): avc: denied { ioctl } for pid=10183 comm="syz.6.930" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 657.114652][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.930'. [ 657.989904][ T29] audit: type=1400 audit(2000000051.789:888): avc: denied { bind } for pid=10204 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 658.010605][ T29] audit: type=1400 audit(2000000051.789:889): avc: denied { map } for pid=10204 comm="syz.3.937" path="socket:[24924]" dev="sockfs" ino=24924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 658.036106][ T29] audit: type=1400 audit(2000000051.789:890): avc: denied { accept } for pid=10204 comm="syz.3.937" path="socket:[24924]" dev="sockfs" ino=24924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 658.162140][ T5890] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 658.224326][T10213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.252221][ T5935] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 658.312080][ T5890] usb 7-1: Using ep0 maxpacket: 16 [ 658.323165][ T5890] usb 7-1: config 0 has an invalid interface number: 243 but max is 0 [ 658.331388][ T5890] usb 7-1: config 0 has no interface number 0 [ 658.339405][ T5890] usb 7-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 658.352846][ T5890] usb 7-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce [ 658.367360][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.384877][ T5890] usb 7-1: Product: syz [ 658.390561][ T5890] usb 7-1: Manufacturer: syz [ 658.398397][ T5890] usb 7-1: SerialNumber: syz [ 658.406646][ T5890] usb 7-1: config 0 descriptor?? [ 658.418521][T10209] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 658.431447][ T5890] keyspan 7-1:0.243: Keyspan 1 port adapter converter detected [ 658.439775][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 84 [ 658.440256][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 658.459303][ T5935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 658.461786][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 82 [ 658.469868][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 658.487451][ T5935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 658.490736][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 1 [ 658.500187][ T5935] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 658.517643][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.527293][ T5935] usb 4-1: Product: syz [ 658.531565][ T5935] usb 4-1: Manufacturer: syz [ 658.541423][ T5935] usb 4-1: SerialNumber: syz [ 658.548444][ T5935] usb 4-1: config 0 descriptor?? [ 658.557869][ T5935] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 658.569595][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 2 [ 658.578343][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 83 [ 658.590246][ T5890] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 3 [ 658.610635][ T5890] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 658.631085][ T5890] usb 7-1: USB disconnect, device number 14 [ 658.640845][ T5890] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 658.651459][ T5890] keyspan 7-1:0.243: device disconnected [ 659.486068][T10227] block device autoloading is deprecated and will be removed. [ 659.495170][T10227] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.502957][T10227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 659.511729][T10227] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.519496][T10227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 661.092401][ T5935] scsi host1: usb-storage 4-1:0.0 [ 661.102940][ T5935] usb 4-1: USB disconnect, device number 17 [ 661.313088][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 661.892591][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 664.214275][T10280] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 664.491342][T10282] FAULT_INJECTION: forcing a failure. [ 664.491342][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 664.542156][T10282] CPU: 0 UID: 0 PID: 10282 Comm: syz.4.961 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 664.552969][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 664.563032][T10282] Call Trace: [ 664.566297][T10282] [ 664.569217][T10282] dump_stack_lvl+0x16c/0x1f0 [ 664.573899][T10282] should_fail_ex+0x497/0x5b0 [ 664.578577][T10282] ? fs_reclaim_acquire+0xae/0x150 [ 664.583673][T10282] should_failslab+0xc2/0x120 [ 664.588337][T10282] __kmalloc_noprof+0xcb/0x510 [ 664.593094][T10282] ? kasan_save_track+0x14/0x30 [ 664.597953][T10282] fuse_direct_io+0x5b3/0x2580 [ 664.602742][T10282] ? __pfx_fuse_direct_io+0x10/0x10 [ 664.607968][T10282] ? lockdep_init_map_type+0x16d/0x7d0 [ 664.613441][T10282] fuse_direct_IO+0x620/0xf20 [ 664.618137][T10282] ? __pfx_aio_complete_rw+0x10/0x10 [ 664.623423][T10282] ? __pfx_fuse_direct_IO+0x10/0x10 [ 664.628630][T10282] generic_file_direct_write+0x197/0x410 [ 664.634256][T10282] ? kiocb_modified+0x134/0x2c0 [ 664.639099][T10282] fuse_file_write_iter+0x6d5/0x8c0 [ 664.644290][T10282] aio_write+0x3b2/0x8c0 [ 664.648526][T10282] ? __pfx_aio_write+0x10/0x10 [ 664.653291][T10282] ? find_held_lock+0x2d/0x110 [ 664.658057][T10282] ? lock_acquire+0x2f/0xb0 [ 664.662547][T10282] ? __might_fault+0xe3/0x190 [ 664.667221][T10282] ? io_submit_one+0x1248/0x1da0 [ 664.672150][T10282] io_submit_one+0x1248/0x1da0 [ 664.676913][T10282] ? __pfx_io_submit_one+0x10/0x10 [ 664.682021][T10282] ? __might_fault+0x13b/0x190 [ 664.686782][T10282] ? lock_acquire+0x2f/0xb0 [ 664.691358][T10282] ? __might_fault+0xe3/0x190 [ 664.696030][T10282] ? __x64_sys_io_submit+0x1b2/0x340 [ 664.701319][T10282] __x64_sys_io_submit+0x1b2/0x340 [ 664.706434][T10282] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 664.712071][T10282] do_syscall_64+0xcd/0x250 [ 664.716569][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.722454][T10282] RIP: 0033:0x7f6f42185d29 [ 664.726855][T10282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.746537][T10282] RSP: 002b:00007f6f42fea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 664.754968][T10282] RAX: ffffffffffffffda RBX: 00007f6f42375fa0 RCX: 00007f6f42185d29 [ 664.763015][T10282] RDX: 0000000020000300 RSI: 0000000000000001 RDI: 00007f6f42fa0000 [ 664.770974][T10282] RBP: 00007f6f42fea090 R08: 0000000000000000 R09: 0000000000000000 [ 664.778954][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.786912][T10282] R13: 0000000000000000 R14: 00007f6f42375fa0 R15: 00007ffd780ea8f8 [ 664.794885][T10282] [ 664.802708][T10282] ------------[ cut here ]------------ [ 664.808260][T10282] kernel BUG at lib/iov_iter.c:626! [ 664.813941][T10282] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 664.821075][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.4.961 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 664.833061][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 664.843179][T10282] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 664.848728][T10282] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 cf da 5e fd eb 95 e8 f8 da 5e fd e9 46 fb ff ff e8 ee 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 e2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 664.868320][T10282] RSP: 0018:ffffc9000c3b7648 EFLAGS: 00010293 [ 664.874368][T10282] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff849de320 [ 664.882334][T10282] RDX: ffff8880272f4880 RSI: ffffffff849de732 RDI: 0000000000000001 [ 664.890287][T10282] RBP: ffffc9000c3b7b20 R08: 0000000000000001 R09: 0000000000000000 [ 664.898246][T10282] R10: 0000000000000000 R11: ffffffff81fc9044 R12: 0000000000000000 [ 664.906204][T10282] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807cd6d600 [ 664.914165][T10282] FS: 00007f6f42fea6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 664.923084][T10282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.929669][T10282] CR2: 00007f77a9c3eeec CR3: 0000000065114000 CR4: 00000000003526f0 [ 664.937638][T10282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 664.945622][T10282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 664.953577][T10282] Call Trace: [ 664.956837][T10282] [ 664.959764][T10282] ? die+0x31/0x80 [ 664.963484][T10282] ? do_trap+0x232/0x430 [ 664.967721][T10282] ? iov_iter_revert+0x533/0x5a0 [ 664.972661][T10282] ? iov_iter_revert+0x533/0x5a0 [ 664.977648][T10282] ? do_error_trap+0xf4/0x230 [ 664.982319][T10282] ? iov_iter_revert+0x533/0x5a0 [ 664.987272][T10282] ? handle_invalid_op+0x34/0x40 [ 664.992196][T10282] ? iov_iter_revert+0x533/0x5a0 [ 664.997131][T10282] ? exc_invalid_op+0x2e/0x50 [ 665.001803][T10282] ? asm_exc_invalid_op+0x1a/0x20 [ 665.006830][T10282] ? kasan_save_track+0x14/0x30 [ 665.011670][T10282] ? iov_iter_revert+0x120/0x5a0 [ 665.016693][T10282] ? iov_iter_revert+0x532/0x5a0 [ 665.021614][T10282] ? iov_iter_revert+0x533/0x5a0 [ 665.026543][T10282] ? iov_iter_revert+0x532/0x5a0 [ 665.031469][T10282] fuse_direct_io+0xf0e/0x2580 [ 665.036224][T10282] ? __pfx_fuse_direct_io+0x10/0x10 [ 665.041427][T10282] ? lockdep_init_map_type+0x16d/0x7d0 [ 665.046881][T10282] fuse_direct_IO+0x620/0xf20 [ 665.051546][T10282] ? __pfx_aio_complete_rw+0x10/0x10 [ 665.056817][T10282] ? __pfx_fuse_direct_IO+0x10/0x10 [ 665.062009][T10282] generic_file_direct_write+0x197/0x410 [ 665.067625][T10282] ? kiocb_modified+0x134/0x2c0 [ 665.072478][T10282] fuse_file_write_iter+0x6d5/0x8c0 [ 665.077674][T10282] aio_write+0x3b2/0x8c0 [ 665.081902][T10282] ? __pfx_aio_write+0x10/0x10 [ 665.086663][T10282] ? find_held_lock+0x2d/0x110 [ 665.091465][T10282] ? lock_acquire+0x2f/0xb0 [ 665.095955][T10282] ? __might_fault+0xe3/0x190 [ 665.100644][T10282] ? io_submit_one+0x1248/0x1da0 [ 665.105582][T10282] io_submit_one+0x1248/0x1da0 [ 665.110356][T10282] ? __pfx_io_submit_one+0x10/0x10 [ 665.115454][T10282] ? __might_fault+0x13b/0x190 [ 665.120204][T10282] ? lock_acquire+0x2f/0xb0 [ 665.124702][T10282] ? __might_fault+0xe3/0x190 [ 665.129360][T10282] ? __x64_sys_io_submit+0x1b2/0x340 [ 665.134625][T10282] __x64_sys_io_submit+0x1b2/0x340 [ 665.139740][T10282] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 665.145363][T10282] do_syscall_64+0xcd/0x250 [ 665.149867][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.155744][T10282] RIP: 0033:0x7f6f42185d29 [ 665.160146][T10282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.179822][T10282] RSP: 002b:00007f6f42fea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 665.188215][T10282] RAX: ffffffffffffffda RBX: 00007f6f42375fa0 RCX: 00007f6f42185d29 [ 665.196164][T10282] RDX: 0000000020000300 RSI: 0000000000000001 RDI: 00007f6f42fa0000 [ 665.204121][T10282] RBP: 00007f6f42fea090 R08: 0000000000000000 R09: 0000000000000000 [ 665.212086][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.220036][T10282] R13: 0000000000000000 R14: 00007f6f42375fa0 R15: 00007ffd780ea8f8 [ 665.227999][T10282] [ 665.230995][T10282] Modules linked in: [ 665.235144][T10282] ---[ end trace 0000000000000000 ]--- [ 665.353220][ T29] audit: type=1400 audit(2000000059.119:891): avc: denied { read } for pid=10273 comm="syz.6.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 665.414889][T10282] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 665.420508][T10282] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 cf da 5e fd eb 95 e8 f8 da 5e fd e9 46 fb ff ff e8 ee 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 e2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 665.562220][T10282] RSP: 0018:ffffc9000c3b7648 EFLAGS: 00010293 [ 665.570491][T10282] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff849de320 [ 665.596311][T10282] RDX: ffff8880272f4880 RSI: ffffffff849de732 RDI: 0000000000000001 [ 665.627680][T10282] RBP: ffffc9000c3b7b20 R08: 0000000000000001 R09: 0000000000000000 [ 665.657026][T10282] R10: 0000000000000000 R11: ffffffff81fc9044 R12: 0000000000000000 [ 665.669589][T10282] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807cd6d600 [ 665.677977][T10282] FS: 00007f6f42fea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 665.708397][T10282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.717900][T10282] CR2: 00007f76a4348178 CR3: 0000000065114000 CR4: 00000000003526f0 [ 665.728503][T10282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.737629][T10282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.746047][T10282] Kernel panic - not syncing: Fatal exception [ 665.752326][T10282] Kernel Offset: disabled [ 665.756627][T10282] Rebooting in 86400 seconds..