last executing test programs: 23m29.69753241s ago: executing program 0 (id=930): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r4, @ANYRES64=r5, @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x26af, 0x3, 0x5}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000f7e800000000000000e6ffff9400000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME \'Mic C'], 0xc1) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) (fail_nth: 1) 23m28.17339926s ago: executing program 0 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20040800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, 0x0, 0x8080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000000c0)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9, 0x0, 0x0, 0x40}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 23m27.048243927s ago: executing program 0 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 23m26.842947618s ago: executing program 0 (id=938): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x2a3288, 0x6257a}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 23m25.455606797s ago: executing program 0 (id=944): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r1 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)='(', 0x1, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x3, 0x3000, 0x2000, &(0x7f0000ff0000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe0}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x76}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x70}}, 0x40000) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000580)={0x100, 0xcb, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, 0x0, 0x0) 23m23.490992121s ago: executing program 0 (id=950): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x49, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0x56, {0x56, 0x11, "adf34ce20ec223b5e7748485afb0221838b98e44aeb0ce951ba17376cd173b92d75e3e9eca0755bc47f80e6e600d5f0c94bd517cf232f0bac5f72fa5bcc813e851485ef98d3e920dcc572521e3bc5e4b50b6fbea"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380b}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x0, 0x4, "b70b297a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc8}, &(0x7f0000000280)={0x20, 0x0, 0xf3, {0xf1, "f2b983b17765f7c939ca437ef731e81ec23aa9396ed69a115afe889493ded06644ca07d8a7524cfaa0b7063c9e5b6d32117455976c45376ea016f27fd013549a31dae61d62fee85a87b88df1c8af16a7b4691429330a6933f39cdf6c603dc2ea35e1a737f06bf7cd23d6cbf3cb49be8193442d450881b3911e3a0b7e7a79e97e6cd94517657dec2815ec602e21137cf629256525dedbdb905470d3d648888d5206cf498728770b83320323df1ccb0d59d1c09076c83a7155d04b9d8a6d3550d92c7e8d8330d69eb0ca6e94212c065130d2af6c2657eef2a636de817919fc2333c1938160ef0f82844e32b1f28c21e92e80"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xfa}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "e672db30"}]}}, 0x0}, 0x0) 23m8.467401556s ago: executing program 32 (id=950): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x49, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0x56, {0x56, 0x11, "adf34ce20ec223b5e7748485afb0221838b98e44aeb0ce951ba17376cd173b92d75e3e9eca0755bc47f80e6e600d5f0c94bd517cf232f0bac5f72fa5bcc813e851485ef98d3e920dcc572521e3bc5e4b50b6fbea"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380b}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x0, 0x4, "b70b297a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc8}, &(0x7f0000000280)={0x20, 0x0, 0xf3, {0xf1, "f2b983b17765f7c939ca437ef731e81ec23aa9396ed69a115afe889493ded06644ca07d8a7524cfaa0b7063c9e5b6d32117455976c45376ea016f27fd013549a31dae61d62fee85a87b88df1c8af16a7b4691429330a6933f39cdf6c603dc2ea35e1a737f06bf7cd23d6cbf3cb49be8193442d450881b3911e3a0b7e7a79e97e6cd94517657dec2815ec602e21137cf629256525dedbdb905470d3d648888d5206cf498728770b83320323df1ccb0d59d1c09076c83a7155d04b9d8a6d3550d92c7e8d8330d69eb0ca6e94212c065130d2af6c2657eef2a636de817919fc2333c1938160ef0f82844e32b1f28c21e92e80"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xfa}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "e672db30"}]}}, 0x0}, 0x0) 3m42.573742232s ago: executing program 4 (id=4136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010001040000000000010000000900010073797a3000000000"], 0xac}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 3m41.582489571s ago: executing program 4 (id=4138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x3f, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4], 0x50}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3m40.4189454s ago: executing program 4 (id=4143): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') fchdir(r4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000280)=@ethtool_rxfh={0x1, 0x0, 0xfffffffe, 0x5}}) syz_open_dev$sg(0x0, 0x2, 0x4ce681) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KDGKBSENT(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x0, "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"}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) 3m38.87981116s ago: executing program 4 (id=4146): prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) landlock_restrict_self(0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_clone3(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup3(0xffffffffffffffff, r2, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) open(0x0, 0x191201, 0x6a) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0022090000000534a215aef5b6"], 0x0}, 0x0) 3m35.566909852s ago: executing program 4 (id=4155): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x10, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095", @ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r2) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r9, @ANYRES16=r1, @ANYRESOCT=r4], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>', 0x1}], 0x1}, 0x800) mq_getsetattr(r4, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000004c0)={@local, @loopback, r10}, 0xc) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper, 0x6}, 0x400, "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"}, 0x418}) exit(0x5) socket$kcm(0x10, 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 3m34.298057439s ago: executing program 4 (id=4158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xaf, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x1, 0x7, 0xb, 0x40, 0xf}, 0x7b, &(0x7f0000000240)={0x5, 0xf, 0x7b, 0x3, [@generic={0x4a, 0x10, 0x4, "f0a7b240b971ea5134a21347b73f8c772859e18d09bb20e2c20d7018e85657c90218ec29d1a873ef290cd062a76953c30968dabf5615585796cc9d15ae4428099f346c109291d9"}, @generic={0x18, 0x10, 0x2, "7806671a8d2cf5e2e0d5a21ec6768631cb6a5e2864"}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "272dac7027aa5563cdd09f3fe79d37cc"}]}, 0x8, [{0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "b8c9ff3786f2aedb82b3919e7b077f7544e2ed01a03295c14f4f00924f09ee90a290fbe24b84269b3069d96fb2e681728537dc7822f27f053cae945b7d4e89fbea28c305a42bba2d20df4734faaf85e44ecee8ba4b905520dcb3e9737d8fd23b0758b57d9190b74050c1d6087536d532f47b98b77a30782879fe41314a03046256b0632b7921147d9b4b46424b89fbc4ac783e3a16ceefa4a2ac8acd1b839c2419320a7310c972c21e460505193a95abc2458d438cee2f4a4648f1fbad700b54f5362aff9f30a5b6e95172018926aa8f8df455e333376c6e463beb111a4de6bf7acdf086030a1e5b13c25eff3841989e0936348f6559bf"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1001}}, {0x64, &(0x7f0000000440)=@string={0x64, 0x3, "e00721248bbbab6117db9ffefc044c29f3c65eb45b461b7ae2a09cc4a4792ab78a4ccad74098681e04602e680c4505ff693e41632f5697bc769257345431957e7be900a44b84f7d473c218359134121b136a9b219d13e3d5cad92647187d27a6f2d8"}}, {0x44, &(0x7f00000004c0)=@string={0x44, 0x3, "878dbf6e98617b34fe1616ea8a07addb3b07e35ea6ce696c6d45323b4a48bf2328f2e5d260b56a334c26262eed74f8e03a893c4d2a2dde5a99945569ebd682b58e1e"}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "5225ff8c69c8f56bb61e46e101385bf65b6a6cc6a07b5309536da47292d9f82441439895e0c197692aeb77f9e56e94cd9e230806a23cdb609eeb61762416da4a280ae90b8d324205f20cc312c1a40aa8d1b1b90c47aa7126fdad85c406d0d1802c2d14b9562a9362ac2d8da654a6661791781ed5a734567a0c9101146b0622ccded3f80194"}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "de90d05595b9b62caabea10e34cf957f59ae5fc60483d9e46833b2ffdcd276a5aff576aad40c3b9290584d89233d457997192926d96886153695688f7584daca23be2848071362b6709c4ec6022a9f5b404392f2014cb7f569305afe50edeade5513c51994af19b83174f517a7c088355a66f0369dab6d2cd59bad1e6867126dcf6faa5f1f764d2758f408027f6f9c2e47c0e0426aa6f960cdc27704a6cc2b68ea40bd"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x200000000000005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) epoll_create1(0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) close(0x3) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 3m19.258600829s ago: executing program 33 (id=4158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xaf, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x1, 0x7, 0xb, 0x40, 0xf}, 0x7b, &(0x7f0000000240)={0x5, 0xf, 0x7b, 0x3, [@generic={0x4a, 0x10, 0x4, "f0a7b240b971ea5134a21347b73f8c772859e18d09bb20e2c20d7018e85657c90218ec29d1a873ef290cd062a76953c30968dabf5615585796cc9d15ae4428099f346c109291d9"}, @generic={0x18, 0x10, 0x2, "7806671a8d2cf5e2e0d5a21ec6768631cb6a5e2864"}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "272dac7027aa5563cdd09f3fe79d37cc"}]}, 0x8, [{0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "b8c9ff3786f2aedb82b3919e7b077f7544e2ed01a03295c14f4f00924f09ee90a290fbe24b84269b3069d96fb2e681728537dc7822f27f053cae945b7d4e89fbea28c305a42bba2d20df4734faaf85e44ecee8ba4b905520dcb3e9737d8fd23b0758b57d9190b74050c1d6087536d532f47b98b77a30782879fe41314a03046256b0632b7921147d9b4b46424b89fbc4ac783e3a16ceefa4a2ac8acd1b839c2419320a7310c972c21e460505193a95abc2458d438cee2f4a4648f1fbad700b54f5362aff9f30a5b6e95172018926aa8f8df455e333376c6e463beb111a4de6bf7acdf086030a1e5b13c25eff3841989e0936348f6559bf"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1001}}, {0x64, &(0x7f0000000440)=@string={0x64, 0x3, "e00721248bbbab6117db9ffefc044c29f3c65eb45b461b7ae2a09cc4a4792ab78a4ccad74098681e04602e680c4505ff693e41632f5697bc769257345431957e7be900a44b84f7d473c218359134121b136a9b219d13e3d5cad92647187d27a6f2d8"}}, {0x44, &(0x7f00000004c0)=@string={0x44, 0x3, "878dbf6e98617b34fe1616ea8a07addb3b07e35ea6ce696c6d45323b4a48bf2328f2e5d260b56a334c26262eed74f8e03a893c4d2a2dde5a99945569ebd682b58e1e"}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "5225ff8c69c8f56bb61e46e101385bf65b6a6cc6a07b5309536da47292d9f82441439895e0c197692aeb77f9e56e94cd9e230806a23cdb609eeb61762416da4a280ae90b8d324205f20cc312c1a40aa8d1b1b90c47aa7126fdad85c406d0d1802c2d14b9562a9362ac2d8da654a6661791781ed5a734567a0c9101146b0622ccded3f80194"}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "de90d05595b9b62caabea10e34cf957f59ae5fc60483d9e46833b2ffdcd276a5aff576aad40c3b9290584d89233d457997192926d96886153695688f7584daca23be2848071362b6709c4ec6022a9f5b404392f2014cb7f569305afe50edeade5513c51994af19b83174f517a7c088355a66f0369dab6d2cd59bad1e6867126dcf6faa5f1f764d2758f408027f6f9c2e47c0e0426aa6f960cdc27704a6cc2b68ea40bd"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x200000000000005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) epoll_create1(0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) close(0x3) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18.007569797s ago: executing program 5 (id=4759): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x1, 0x6}) 17.894042749s ago: executing program 5 (id=4761): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 12.998672087s ago: executing program 3 (id=4772): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000012b00), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x90009427, &(0x7f0000012b80)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x80, 0xffeff034}, {0x6, 0x2, 0x4, 0x9}]}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x401, 0x4000000b, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) 12.429637291s ago: executing program 5 (id=4776): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b49, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x0, 0x0, 0x0, 0x1}, 0xc) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) 10.72060594s ago: executing program 5 (id=4780): r0 = io_uring_setup(0x7af6, &(0x7f0000000340)={0x0, 0xcf5a, 0x2000, 0x2, 0x338}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2, 0x0, 0x0, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x59) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 10.508540949s ago: executing program 2 (id=4782): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x44, 0x20000, 0x7, 0x2000000000044, 0x0, 0x8000000000003, 0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1], 0x8080000, 0x2c2a50}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee41"], 0x6e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x1d6}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xce, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 9.907531377s ago: executing program 1 (id=4783): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a84700810046000800450000280000000000069078ac1414000a01010100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000bee8d35372"], 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) socket$kcm(0x2d, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe6, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) 9.749403053s ago: executing program 5 (id=4784): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$swradio(0x0, 0x1, 0x2) r6 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x256) pread64(r6, &(0x7f0000000700)=""/115, 0x73, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) r10 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r11 = fanotify_init(0x4, 0x0) r12 = dup(r10) fanotify_mark(r11, 0x201, 0x48001003, r12, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r13, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r14, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x8, 0x8, 0xa, 0x4, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x83, &(0x7f0000000200)=""/131, 0x41100, 0x40, '\x00', r9, @cgroup_sockopt=0x16, r12, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x8, 0x3}, 0x10, r14, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x5, 0x1, 0x5}, {0x3, 0x1, 0x10, 0x9}], 0x10, 0x2b517117, @void, @value}, 0xfffffcd4) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, 0x0) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040), 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 9.482249161s ago: executing program 3 (id=4785): socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x1}, 0x18) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af, @void, @value}, 0x94) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = syz_io_uring_setup(0x88d, &(0x7f00000001c0)={0x0, 0xaee2, 0x80, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000008030000000000009ff2d2f0789f09adb40900010073797a30000000000600024088a800000500518806000000"], 0x34}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) userfaultfd(0x80001) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)=' ', 0x1}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) pselect6(0x40, &(0x7f0000000240)={0x4000000000000000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8, 0xc33}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x1, 0xc, 0x0, 0x9, 0x3, 0xffffffffffffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xff, 0x724a53f5c39475fa}, 0x2}, 0x18) 8.058822842s ago: executing program 1 (id=4786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) eventfd2(0x23c, 0x80000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) fcntl$getown(r3, 0x9) syz_init_net_socket$x25(0x9, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r3, 0x4, 0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1) 8.032866468s ago: executing program 6 (id=4787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x400fad9}, &(0x7f0000000240)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 7.878767722s ago: executing program 3 (id=4788): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000ebcc2046c487d2dd0000000014000004007744b489b61d4056ba8c2c5186de20636efc635b9fd40fa1da5050542cf010d9db12c92adcb2ec5fb4a79377fa4d137749b7f76328aa22fbd8095c6383369ae9de626a6c63f1ae5ded7fb0caae2d0da121b60c4e57a2be81ff1665566521cf5e40bf5f518f0b5b0d9296d3ebeb7e47d974399168c0a1acd538b44ee9be06a743450895138c465bf9ff455788dd77252f607b6d98549b36ca91fb809ed3c9eb155cd86f15d50e738cb30a2c02b5726b48ac72111e0dbbace16f5438a4a1975e51dfbf9e83"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={&(0x7f0000000080), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x5ac}}, 0x0) pread64(r0, &(0x7f0000000040)=""/52, 0xfffffd63, 0x5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000013c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000780)={0x0, 0x0, 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r7, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) read$alg(r5, &(0x7f0000000240)=""/4096, 0xfffffdef) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r10}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010050000010000007000000000000000"], 0x18}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3, r4}) 6.770961741s ago: executing program 2 (id=4789): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r1) (fail_nth: 3) 6.752328733s ago: executing program 2 (id=4790): creat(&(0x7f0000000200)='./file1\x00', 0x12e) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x2, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x81, 0x40, 0x6}}, {{0x9, 0x5, 0x87, 0x3, 0x8, 0xf, 0xff, 0x7}}]}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000480)=""/140, &(0x7f00000000c0)=0x8c) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.693796221s ago: executing program 6 (id=4791): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r5 = fcntl$getown(r2, 0x9) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) 5.39325185s ago: executing program 5 (id=4792): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) syz_usb_connect$uac1(0x6, 0xe7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x4, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x23}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x1c, 0x9a, "a7d8"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x3, 0x2, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x3, 0x4, 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x1, 0x400, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x7, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x39, 0x35, "03fa550200dbe5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x9, 0xd0, "59e2"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0xb4, 0x9, "a1", '0'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x78, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc5, 0x80, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0x3, "b90b", "b5"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0xb, '?', "cf90"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xc, 0x20, {0x7, 0x25, 0x1, 0x83, 0xff, 0xb}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0xfe, 0x9b, 0x20, 0xe6}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x81, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x3, 0xbb, 0x900, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0x0, 0x6, [0xff00, 0xffffc0, 0xffc000, 0xffc0c0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x4, 0x9, 0x8, 0x4}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x820}}]}) 5.376082233s ago: executing program 1 (id=4793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b49, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x64, r1, 0x23, 0x70bd28, 0x25d7dbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x64}}, 0x4000880) io_uring_enter(0xffffffffffffffff, 0xa32, 0x0, 0x47, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0xff, 0x0, 0x0, 0x0, @tick=0x6, {}, {0xfe}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @time={0x8001, 0x8}, {0x8, 0x12}, {}, @addr={0x2a, 0x2}}], 0x38) 5.119760647s ago: executing program 3 (id=4794): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r1, 0x402c542b, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x0, 0xf, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 4.825708281s ago: executing program 6 (id=4795): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000012b00), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x90009427, &(0x7f0000012b80)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x80, 0xffeff034}, {0x6, 0x2, 0x4, 0x9}]}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x401, 0x4000000b, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00', "5ff9dfc8791532b8"}, 0x28) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) 4.338957288s ago: executing program 1 (id=4796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x871, &(0x7f0000000380)={0x0, 0x3177, 0x10100, 0x3, 0x24e, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) munlockall() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000001c0)={0x6c, 0x2, 0xa, 0x8, 0x80}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa0000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004030000000800"/179], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000010a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f000001000000a1c0b69f9da9e26600fc01000000000000000000000000000000000000aa3c"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = open(0x0, 0x0, 0x0) read$msr(r10, &(0x7f0000000240)=""/11, 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x4, 0x6, 0x5}) 3.914584178s ago: executing program 6 (id=4797): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'nicvf0\x00', 0xa36d}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/85, 0x55, 0x10000000000ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf2505"], 0x14}}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x7, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034"], 0x68}, 0x4000000) 3.198154524s ago: executing program 2 (id=4798): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1fc, 0x2a8, 0x2a8, 0x1fc, 0x2a8, 0xac, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00'}, 0x10, 0x70, 0x90, 0x1c}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x250) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) syz_open_dev$vcsn(&(0x7f0000000400), 0x400, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.86872605s ago: executing program 6 (id=4799): futex(&(0x7f000000cffc)=0x4ff0f, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) 1.607105652s ago: executing program 6 (id=4800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x78, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000000000008}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x78}}, 0x44004) 1.574237732s ago: executing program 1 (id=4801): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) (fail_nth: 5) 1.496127145s ago: executing program 2 (id=4802): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x310) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000002c0)=""/72, 0x48}], 0x2, 0x5, 0xfff5) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380), 0x80) 1.079409835s ago: executing program 1 (id=4803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) eventfd2(0x23c, 0x80000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) fcntl$getown(r3, 0x9) syz_init_net_socket$x25(0x9, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r3, 0x4, 0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1) 1.078721733s ago: executing program 3 (id=4804): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'nicvf0\x00', 0xa36d}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/85, 0x55, 0x10000000000ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf2505"], 0x14}}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x7, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034"], 0x68}, 0x4000000) 1.077161565s ago: executing program 2 (id=4805): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r5 = fcntl$getown(r2, 0x9) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) 0s ago: executing program 3 (id=4806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8295aac7ea61552c}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8008010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x5b) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = getpgrp(r2) prlimit64(r8, 0x0, &(0x7f0000000100)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) kernel console output (not intermixed with test programs): [T23240] __kmalloc_noprof+0xd2/0x510 [ 1650.933068][T23240] tomoyo_encode2+0x100/0x3e0 [ 1650.933092][T23240] tomoyo_encode+0x29/0x50 [ 1650.933111][T23240] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1650.933138][T23240] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1650.933168][T23240] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1650.933224][T23240] ? do_raw_spin_lock+0x12c/0x2b0 [ 1650.933252][T23240] tomoyo_file_open+0x6b/0x90 [ 1650.933277][T23240] security_file_open+0x84/0x1e0 [ 1650.933299][T23240] do_dentry_open+0x596/0x1c10 [ 1650.933332][T23240] vfs_open+0x82/0x3f0 [ 1650.933353][T23240] path_openat+0x1de4/0x2cb0 [ 1650.933393][T23240] ? __pfx_path_openat+0x10/0x10 [ 1650.933421][T23240] ? __lock_acquire+0xb8a/0x1c90 [ 1650.933450][T23240] do_filp_open+0x20b/0x470 [ 1650.933482][T23240] ? __pfx_do_filp_open+0x10/0x10 [ 1650.933528][T23240] ? alloc_fd+0x471/0x7d0 [ 1650.933561][T23240] do_sys_openat2+0x11b/0x1d0 [ 1650.933579][T23240] ? __pfx_do_sys_openat2+0x10/0x10 [ 1650.933612][T23240] ? __fget_files+0x20e/0x3c0 [ 1650.933644][T23240] __x64_sys_openat+0x174/0x210 [ 1650.933669][T23240] ? __pfx___x64_sys_openat+0x10/0x10 [ 1650.933686][T23240] ? ksys_write+0x1ac/0x250 [ 1650.933721][T23240] do_syscall_64+0xcd/0x4c0 [ 1650.933742][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.933760][T23240] RIP: 0033:0x7fbbda18d2d0 [ 1650.933774][T23240] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1650.933791][T23240] RSP: 002b:00007fbbd7fd4f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1650.933809][T23240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbda18d2d0 [ 1650.933820][T23240] RDX: 0000000000000000 RSI: 00007fbbda210bc9 RDI: 00000000ffffff9c [ 1650.933831][T23240] RBP: 00007fbbda210bc9 R08: 0000000000000000 R09: 0000000000000000 [ 1650.933841][T23240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1650.933852][T23240] R13: 0000000000000000 R14: 00007fbbda3b6160 R15: 00007ffea893efa8 [ 1650.933878][T23240] [ 1650.933899][T23240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1651.611271][T18188] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1651.660898][ T30] audit: type=1326 audit(2000000153.220:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1651.865563][T18187] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1652.064746][ T30] audit: type=1326 audit(2000000153.220:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.088339][T18188] usb 6-1: Using ep0 maxpacket: 16 [ 1652.111870][ T30] audit: type=1326 audit(2000000153.220:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.343823][T18188] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1652.636977][T18188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1652.647985][ T30] audit: type=1326 audit(2000000153.220:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.671741][ T30] audit: type=1326 audit(2000000153.220:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.695156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.711306][T18188] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1652.720328][T18188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.728364][T18187] usb 4-1: Using ep0 maxpacket: 16 [ 1652.749896][T18188] usb 6-1: Product: syz [ 1652.759962][ T30] audit: type=1326 audit(2000000153.220:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.783570][T18188] usb 6-1: Manufacturer: syz [ 1652.788162][T18188] usb 6-1: SerialNumber: syz [ 1652.814845][T18188] usb 6-1: config 0 descriptor?? [ 1652.822425][T18188] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1652.844928][ T30] audit: type=1326 audit(2000000153.220:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025bf8e969 code=0x7fc00000 [ 1652.871269][T18188] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1652.901041][T18187] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1652.923698][T18187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.966392][T18187] usb 4-1: Product: syz [ 1652.976980][T18187] usb 4-1: Manufacturer: syz [ 1652.996515][T18187] usb 4-1: SerialNumber: syz [ 1653.091610][T18187] usb 4-1: config 0 descriptor?? [ 1653.107756][T18187] as10x_usb: device has been detected [ 1653.119354][T18187] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1653.196395][T18187] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1653.658191][T23244] random: crng reseeded on system resumption [ 1653.665177][ T30] audit: type=1400 audit(2000000155.220:2345): avc: denied { write } for pid=23243 comm="syz.3.4291" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1653.688560][ T30] audit: type=1400 audit(2000000155.220:2346): avc: denied { open } for pid=23243 comm="syz.3.4291" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1653.914303][ T30] audit: type=1400 audit(2000000155.470:2347): avc: denied { firmware_load } for pid=18187 comm="kworker/1:10" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1653.922203][T18187] as10x_usb: error during firmware upload part1 [ 1653.946768][T18187] Registered device Sky IT Digital Key (green led) [ 1654.211080][ T30] audit: type=1400 audit(2000000155.770:2348): avc: denied { listen } for pid=23243 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1654.284745][T18188] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1654.293248][T18188] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1654.305677][T18188] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1654.319636][T18188] em28xx 6-1:0.0: No AC97 audio processor [ 1654.338706][T18188] usb 6-1: USB disconnect, device number 115 [ 1654.827346][T18188] em28xx 6-1:0.0: Disconnecting em28xx [ 1654.851987][T18188] em28xx 6-1:0.0: Freeing device [ 1655.048703][T23300] fuse: Bad value for 'fd' [ 1655.887531][T18187] usb 4-1: USB disconnect, device number 106 [ 1655.957889][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4308'. [ 1656.432643][T18187] Unregistered device Sky IT Digital Key (green led) [ 1656.447712][T18187] as10x_usb: device has been disconnected [ 1656.651478][T18196] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1657.292829][T18196] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1657.321320][T18196] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 1657.351723][T18196] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 15441, setting to 64 [ 1657.391342][T18196] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1657.411258][ T30] audit: type=1326 audit(2000000158.970:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23326 comm="syz.5.4314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x0 [ 1657.498381][T18196] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1657.517527][T18196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.530607][T23332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1658.537726][ T30] audit: type=1326 audit(2000000160.100:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.2.4317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x0 [ 1658.813868][T18196] ath6kl: Failed to submit usb control message: -71 [ 1659.948282][T18196] ath6kl: unable to send the bmi data to the device: -71 [ 1659.959109][T18196] ath6kl: Unable to send get target info: -71 [ 1659.966364][T18196] ath6kl: Failed to init ath6kl core: -71 [ 1659.979489][T18196] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1659.992818][T18196] usb 7-1: USB disconnect, device number 4 [ 1660.221721][T23361] loop4: detected capacity change from 0 to 524255232 [ 1660.292289][T23362] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4318'. [ 1661.014510][T23384] sock: sock_set_timeout: `syz.6.4324' (pid 23384) tries to set negative timeout [ 1661.052799][ T30] audit: type=1400 audit(2000000162.620:2351): avc: denied { write } for pid=23383 comm="syz.6.4324" path="socket:[84369]" dev="sockfs" ino=84369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1661.931031][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4327'. [ 1662.041237][T18188] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1662.201268][T18187] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1662.209051][T18188] usb 3-1: Using ep0 maxpacket: 8 [ 1662.381720][T18187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1662.440834][T18187] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1662.470413][T18187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.518596][T18187] usb 6-1: Product: syz [ 1662.538659][T18187] usb 6-1: Manufacturer: syz [ 1662.556003][T18187] usb 6-1: SerialNumber: syz [ 1662.616583][T18187] usb 6-1: config 0 descriptor?? [ 1663.628893][ T30] audit: type=1400 audit(2000000165.190:2352): avc: denied { map } for pid=23389 comm="syz.2.4326" path="socket:[83911]" dev="sockfs" ino=83911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1663.689070][T18188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1663.751712][T18188] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1663.784341][T18188] usb 3-1: can't read configurations, error -71 [ 1665.292494][T18196] usb 6-1: USB disconnect, device number 116 [ 1665.831588][ T5872] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1665.931644][T18188] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1666.442708][ T30] audit: type=1400 audit(2000000168.010:2353): avc: denied { read } for pid=23453 comm="syz.5.4339" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1666.515738][ T30] audit: type=1400 audit(2000000168.010:2354): avc: denied { listen } for pid=23453 comm="syz.5.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1666.545660][ T30] audit: type=1400 audit(2000000168.040:2355): avc: denied { open } for pid=23453 comm="syz.5.4339" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1666.642033][T18188] usb 3-1: Using ep0 maxpacket: 16 [ 1666.647270][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 1666.660492][T18188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1666.675470][T18188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1666.690390][ T5872] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 1666.702178][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1666.721098][T18188] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1666.740368][ T5872] usb 2-1: Product: syz [ 1666.745183][ T5872] usb 2-1: Manufacturer: syz [ 1666.750953][ T5872] usb 2-1: SerialNumber: syz [ 1666.755710][T18188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.776142][ T5872] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1666.782479][ T5872] r8152-cfgselector 2-1: config 0 descriptor?? [ 1666.788912][T23464] tmpfs: Unknown parameter '_¬žo' [ 1666.791691][T18188] usb 3-1: Product: syz [ 1666.800918][T18188] usb 3-1: Manufacturer: syz [ 1666.816458][T18188] usb 3-1: SerialNumber: syz [ 1666.828497][T18188] usb 3-1: config 0 descriptor?? [ 1666.837815][T18188] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1666.855017][T18188] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1667.015229][ T30] audit: type=1400 audit(2000000168.570:2356): avc: denied { map } for pid=23471 comm="syz.3.4341" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1667.628633][ T5872] r8152-cfgselector 2-1: USB disconnect, device number 101 [ 1668.224623][T18188] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1668.237179][T18188] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1668.320010][T18188] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1668.389826][T18188] em28xx 3-1:0.0: No AC97 audio processor [ 1668.523536][T18188] usb 3-1: USB disconnect, device number 116 [ 1668.702197][T18188] em28xx 3-1:0.0: Disconnecting em28xx [ 1669.411000][T18188] em28xx 3-1:0.0: Freeing device [ 1669.534718][T23516] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1670.434196][T18195] usb 6-1: new low-speed USB device number 117 using dummy_hcd [ 1670.602032][T18195] usb 6-1: device descriptor read/64, error -71 [ 1670.841382][T18195] usb 6-1: new low-speed USB device number 118 using dummy_hcd [ 1670.950998][ T30] audit: type=1400 audit(2000000172.510:2357): avc: denied { ioctl } for pid=23528 comm="syz.6.4353" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1670.981368][T18195] usb 6-1: device descriptor read/64, error -71 [ 1671.141668][T18195] usb usb6-port1: attempt power cycle [ 1671.322982][ T30] audit: type=1400 audit(2000000172.640:2358): avc: denied { map } for pid=23528 comm="syz.6.4353" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1671.621273][T18195] usb 6-1: new low-speed USB device number 119 using dummy_hcd [ 1671.727431][T18195] usb 6-1: device descriptor read/8, error -71 [ 1672.181382][T18188] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1672.400615][T23553] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4357'. [ 1672.481462][T18195] usb 6-1: new low-speed USB device number 120 using dummy_hcd [ 1672.736157][T18195] usb 6-1: device descriptor read/8, error -71 [ 1672.942514][T18195] usb usb6-port1: unable to enumerate USB device [ 1673.112115][T18188] usb 3-1: Using ep0 maxpacket: 16 [ 1673.241583][T18188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1673.258040][T18188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1673.271761][T18188] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1673.280839][T18188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.289166][T18188] usb 3-1: Product: syz [ 1673.293583][T18188] usb 3-1: Manufacturer: syz [ 1673.298191][T18188] usb 3-1: SerialNumber: syz [ 1673.314912][T18188] usb 3-1: config 0 descriptor?? [ 1673.410963][T18188] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1673.426331][T18188] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1674.174987][ T30] audit: type=1400 audit(2000000175.730:2359): avc: denied { bind } for pid=23568 comm="syz.1.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1674.340874][T23581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4362'. [ 1674.912742][T18188] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1675.005025][T18188] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1675.046282][T18188] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1675.061530][T18188] em28xx 3-1:0.0: No AC97 audio processor [ 1675.097552][T18188] usb 3-1: USB disconnect, device number 117 [ 1675.107456][T18188] em28xx 3-1:0.0: Disconnecting em28xx [ 1675.116655][T18188] em28xx 3-1:0.0: Freeing device [ 1675.612949][T18188] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1675.637713][T23604] No control pipe specified [ 1675.826886][T18188] usb 3-1: not running at top speed; connect to a high speed hub [ 1675.847451][T18188] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1675.857271][T18188] usb 3-1: config 95 has no interface number 0 [ 1675.867419][T18188] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1675.925865][T18188] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1675.935624][T18188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.946173][T18188] usb 3-1: Product: syz [ 1675.954314][T18188] usb 3-1: Manufacturer: syz [ 1675.966952][T18188] usb 3-1: SerialNumber: syz [ 1676.412817][T23597] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1676.429295][T23597] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1676.443232][T23597] SELinux: failed to load policy [ 1676.836906][T18195] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1677.142454][T18188] usb 3-1: USB disconnect, device number 118 [ 1677.489900][T18195] usb 4-1: not running at top speed; connect to a high speed hub [ 1677.500827][T18195] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1677.519118][T18195] usb 4-1: config 95 has no interface number 0 [ 1677.526764][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1677.571324][T18195] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1677.612017][T18195] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1677.632858][T18195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.640857][T18195] usb 4-1: Product: syz [ 1677.646194][T18195] usb 4-1: Manufacturer: syz [ 1677.650798][T18195] usb 4-1: SerialNumber: syz [ 1678.409151][T23638] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4367'. [ 1678.422857][T23638] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1678.432769][T18188] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1678.440563][T23638] SELinux: failed to load policy [ 1678.657273][T18188] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1678.696800][T18188] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1678.727190][T18188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.821847][T18188] usb 3-1: Product: syz [ 1678.912239][T18188] usb 3-1: Manufacturer: syz [ 1678.968156][T18188] usb 3-1: SerialNumber: syz [ 1679.042305][T12143] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1679.603742][T12143] usb 2-1: Using ep0 maxpacket: 16 [ 1681.069118][T12143] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1681.111727][T12143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1681.125434][T12143] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1681.137903][T12143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.156639][T12143] usb 2-1: Product: syz [ 1681.166390][T12143] usb 2-1: Manufacturer: syz [ 1681.179251][T18188] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1681.192404][T12143] usb 2-1: SerialNumber: syz [ 1681.203186][T12143] usb 2-1: config 0 descriptor?? [ 1681.227321][T18188] usb 3-1: USB disconnect, device number 119 [ 1681.235311][T12143] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1681.249591][T18188] usblp0: removed [ 1681.253274][T12143] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1681.760393][T23658] No control pipe specified [ 1682.184605][T23665] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1682.531573][T12143] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1682.538917][T12143] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1682.546460][T12143] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1682.553956][T12143] em28xx 2-1:0.0: No AC97 audio processor [ 1682.727692][T12143] usb 2-1: USB disconnect, device number 102 [ 1682.737896][T12143] em28xx 2-1:0.0: Disconnecting em28xx [ 1682.750666][T12143] em28xx 2-1:0.0: Freeing device [ 1682.983019][T18195] usb 4-1: USB disconnect, device number 107 [ 1683.069002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.113514][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1683.693031][T23714] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4385'. [ 1683.902993][T12143] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1684.707496][T18188] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1684.754109][T12143] usb 7-1: not running at top speed; connect to a high speed hub [ 1684.787413][T12143] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 1684.808013][T12143] usb 7-1: config 95 has no interface number 0 [ 1684.837877][T12143] usb 7-1: config 95 interface 1 has no altsetting 0 [ 1684.893936][T18188] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1684.910701][T12143] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1684.987589][T12143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.042652][T18188] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1685.080382][T12143] usb 7-1: Product: syz [ 1685.100806][T18188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.126276][T12143] usb 7-1: Manufacturer: syz [ 1685.134607][T12143] usb 7-1: SerialNumber: syz [ 1685.140450][T18188] usb 6-1: Product: syz [ 1685.151810][T18188] usb 6-1: Manufacturer: syz [ 1685.156869][T18188] usb 6-1: SerialNumber: syz [ 1685.571806][T18195] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1685.594915][T18188] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1685.706602][T23704] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.4384'. [ 1685.723041][T18195] usb 3-1: Using ep0 maxpacket: 16 [ 1685.745040][T18195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1685.754020][T23704] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1685.769320][T23704] SELinux: failed to load policy [ 1685.775421][T18195] usb 3-1: config 218 has an invalid interface number: 135 but max is 0 [ 1685.785449][T18195] usb 3-1: config 218 has no interface number 0 [ 1685.796295][T18195] usb 3-1: config 218 interface 135 has no altsetting 0 [ 1685.809446][ T30] audit: type=1400 audit(2000000187.380:2360): avc: denied { read write } for pid=23712 comm="syz.5.4387" name="lp0" dev="devtmpfs" ino=4644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1685.812151][T18195] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 1685.846703][T18195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.980947][ T30] audit: type=1400 audit(2000000187.380:2361): avc: denied { open } for pid=23712 comm="syz.5.4387" path="/dev/usb/lp0" dev="devtmpfs" ino=4644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1686.005626][ T30] audit: type=1400 audit(2000000187.380:2362): avc: denied { ioctl } for pid=23712 comm="syz.5.4387" path="/dev/usb/lp0" dev="devtmpfs" ino=4644 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1686.031196][T18195] usb 3-1: Product: syz [ 1686.031217][T18195] usb 3-1: Manufacturer: syz [ 1686.031232][T18195] usb 3-1: SerialNumber: syz [ 1686.081098][ T30] audit: type=1326 audit(2000000187.630:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23738 comm="syz.3.4389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x0 [ 1686.421511][T18196] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1686.537326][T23730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.563433][T23730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.592047][T12143] usb 7-1: USB disconnect, device number 5 [ 1686.607827][T18195] usb 3-1: USB disconnect, device number 120 [ 1686.716578][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1686.728268][T18196] usb 2-1: Using ep0 maxpacket: 16 [ 1686.751663][T18196] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1686.788770][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1686.814217][T18196] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1686.826939][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.844241][T18196] usb 2-1: Product: syz [ 1686.848545][T18196] usb 2-1: Manufacturer: syz [ 1686.855228][T18196] usb 2-1: SerialNumber: syz [ 1686.863450][T18196] usb 2-1: config 0 descriptor?? [ 1686.872962][T18196] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1686.882763][T18196] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1686.889067][T23757] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 53758 - 0 [ 1686.903242][T23757] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 53758 - 0 [ 1686.913159][T23757] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 53758 - 0 [ 1686.918068][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'. [ 1686.926876][T23757] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 53758 - 0 [ 1686.951063][T23757] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 42829 - 0 [ 1686.961894][T23757] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 42829 - 0 [ 1686.970992][T23757] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 42829 - 0 [ 1686.980067][T23757] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 42829 - 0 [ 1686.993939][T23757] geneve2: entered promiscuous mode [ 1687.028371][T23757] geneve2: entered allmulticast mode [ 1688.773717][T18196] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1688.851295][T18196] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1688.858669][T18196] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1688.881213][T18196] em28xx 2-1:0.0: No AC97 audio processor [ 1688.901476][T18196] usb 2-1: USB disconnect, device number 103 [ 1688.909148][T18196] em28xx 2-1:0.0: Disconnecting em28xx [ 1688.989335][T18196] em28xx 2-1:0.0: Freeing device [ 1689.539072][T23757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4394'. [ 1689.821629][T23785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1690.767294][ T30] audit: type=1326 audit(2000000192.300:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1690.909051][T23715] usblp0:failed reading printer status (-110) [ 1690.929799][T18196] usb 6-1: USB disconnect, device number 121 [ 1690.936764][ T30] audit: type=1326 audit(2000000192.300:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1691.287848][T18196] usblp0: removed [ 1691.658927][ T30] audit: type=1326 audit(2000000192.370:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1691.740123][ T30] audit: type=1326 audit(2000000192.370:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1691.834844][ T30] audit: type=1326 audit(2000000192.370:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.192479][ T30] audit: type=1326 audit(2000000192.380:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.299407][ T30] audit: type=1326 audit(2000000192.380:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.344038][ T30] audit: type=1326 audit(2000000192.380:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.369349][ T30] audit: type=1326 audit(2000000192.380:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.456685][ T30] audit: type=1326 audit(2000000192.380:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.484087][ T30] audit: type=1326 audit(2000000192.380:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.2.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x7ffc0000 [ 1692.511443][T18187] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1692.664744][T23830] netlink: 'syz.3.4408': attribute type 1 has an invalid length. [ 1692.672601][T23830] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4408'. [ 1692.790179][T18187] usb 6-1: Using ep0 maxpacket: 16 [ 1692.802885][T18187] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 1692.821236][T18187] usb 6-1: config 0 has no interface number 0 [ 1692.829549][T18187] usb 6-1: New USB device found, idVendor=0499, idProduct=1005, bcdDevice=25.6d [ 1692.838729][T18187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.848731][T18187] usb 6-1: Product: syz [ 1692.853543][T18187] usb 6-1: Manufacturer: syz [ 1692.858360][T18187] usb 6-1: SerialNumber: syz [ 1692.866295][T18187] usb 6-1: config 0 descriptor?? [ 1692.875999][T18187] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1692.898275][T18187] snd-usb-audio 6-1:0.7: probe with driver snd-usb-audio failed with error -2 [ 1692.946225][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.7/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.115316][T18187] usb 6-1: USB disconnect, device number 122 [ 1695.218467][T23864] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4414'. [ 1695.601496][T18187] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1695.821563][T18187] usb 3-1: Using ep0 maxpacket: 8 [ 1695.846788][T18187] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1695.869307][T18187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.056853][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1696.056869][ T30] audit: type=1326 audit(2000000197.600:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.092947][ T30] audit: type=1326 audit(2000000197.600:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.362769][ T30] audit: type=1326 audit(2000000197.610:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.555279][ T30] audit: type=1326 audit(2000000197.610:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.584144][ T30] audit: type=1326 audit(2000000197.610:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.761247][T18187] usb 3-1: Product: syz [ 1696.765450][T18187] usb 3-1: Manufacturer: syz [ 1696.770042][T18187] usb 3-1: SerialNumber: syz [ 1696.801235][ T30] audit: type=1326 audit(2000000197.610:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.802045][T18187] usb 3-1: config 0 descriptor?? [ 1696.874222][ T30] audit: type=1326 audit(2000000197.610:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.900079][ T30] audit: type=1326 audit(2000000197.610:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.924388][ T30] audit: type=1326 audit(2000000197.610:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1696.948257][ T30] audit: type=1326 audit(2000000198.250:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23885 comm="syz.5.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x7ffc0000 [ 1697.001821][T18187] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1697.521419][T18187] gspca_sonixj: reg_w1 err -110 [ 1697.695847][T18187] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1697.770976][T23905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4424'. [ 1698.056196][T23913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4426'. [ 1698.148699][T23919] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4428'. [ 1698.519476][T23920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.542952][T23920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.403416][T23938] netlink: 'syz.5.4433': attribute type 10 has an invalid length. [ 1699.429474][T23938] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1699.440391][T23938] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1699.452851][T23938] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1699.533850][T18196] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1699.623657][T23944] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4434'. [ 1699.701278][T18196] usb 2-1: Using ep0 maxpacket: 16 [ 1699.722867][T18196] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1699.774026][T18196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1699.820596][T18196] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1699.852534][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.860565][T18196] usb 2-1: Product: syz [ 1700.223574][T18196] usb 2-1: Manufacturer: syz [ 1700.228219][T18196] usb 2-1: SerialNumber: syz [ 1700.236049][T18196] usb 2-1: config 0 descriptor?? [ 1700.244021][T18196] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1700.261263][T18196] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1700.304077][T18187] usb 3-1: USB disconnect, device number 121 [ 1700.844952][T18187] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1701.052343][T18187] usb 3-1: Using ep0 maxpacket: 32 [ 1701.087079][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1701.087093][ T30] audit: type=1400 audit(2000000202.650:2454): avc: denied { append } for pid=23957 comm="syz.5.4439" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1701.119036][T18187] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1701.130887][T18187] usb 3-1: config 0 has no interface number 0 [ 1701.137877][T18187] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1701.155967][T18187] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1701.169183][T18187] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1701.179387][T18187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.560185][T18187] usb 3-1: Product: syz [ 1701.589392][T18187] usb 3-1: Manufacturer: syz [ 1701.595500][T18187] usb 3-1: SerialNumber: syz [ 1701.601770][T18196] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1701.608767][T18187] usb 3-1: config 0 descriptor?? [ 1701.610991][T18196] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1701.699233][T18196] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1701.816655][T18187] appletouch 3-1:0.85: Failed to read mode from device. [ 1701.824810][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4442'. [ 1701.825139][T18187] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1701.843068][T18196] em28xx 2-1:0.0: No AC97 audio processor [ 1701.844875][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1701.862401][T18196] usb 2-1: USB disconnect, device number 104 [ 1701.875548][T18196] em28xx 2-1:0.0: Disconnecting em28xx [ 1701.889357][T18196] em28xx 2-1:0.0: Freeing device [ 1702.082526][T23982] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1702.247654][T23951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.259707][T23951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.317451][T18187] usb 3-1: USB disconnect, device number 122 [ 1702.527737][T23986] netlink: 'syz.6.4445': attribute type 1 has an invalid length. [ 1702.592897][T23986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1702.627267][T23991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1702.640315][T23991] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1702.654155][T23991] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1702.951382][T18196] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1703.108968][ T5904] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1703.159629][T18196] usb 2-1: not running at top speed; connect to a high speed hub [ 1703.299310][T18196] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 1703.319716][T18196] usb 2-1: config 95 has no interface number 0 [ 1703.326898][T18196] usb 2-1: config 95 interface 1 has no altsetting 0 [ 1703.346890][T18196] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1703.357118][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.366479][T18196] usb 2-1: Product: syz [ 1703.370724][T18196] usb 2-1: Manufacturer: syz [ 1703.375414][T18196] usb 2-1: SerialNumber: syz [ 1703.447307][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.479422][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1703.603011][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1703.648281][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1703.767198][ T5904] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1703.805911][ T5904] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1703.868904][ T5904] usb 7-1: Manufacturer: syz [ 1703.943970][ T5904] usb 7-1: config 0 descriptor?? [ 1704.004255][T23994] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1704.063255][T24010] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1704.129159][T24010] SELinux: failed to load policy [ 1704.270800][ T30] audit: type=1400 audit(2000000205.830:2455): avc: denied { bind } for pid=24011 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1704.291210][ T5904] rc_core: IR keymap rc-hauppauge not found [ 1704.297159][ T5904] Registered IR keymap rc-empty [ 1704.302759][ T30] audit: type=1400 audit(2000000205.880:2456): avc: denied { listen } for pid=24011 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1704.323231][ T30] audit: type=1400 audit(2000000205.890:2457): avc: denied { connect } for pid=24011 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1704.346037][ T30] audit: type=1400 audit(2000000205.910:2458): avc: denied { accept } for pid=24011 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1704.346681][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1704.429207][T24014] ubi31: attaching mtd0 [ 1704.492096][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1704.533482][T24018] FAULT_INJECTION: forcing a failure. [ 1704.533482][T24018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.546725][T24018] CPU: 0 UID: 0 PID: 24018 Comm: syz.2.4455 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1704.546748][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1704.546755][T24018] Call Trace: [ 1704.546759][T24018] [ 1704.546764][T24018] dump_stack_lvl+0x16c/0x1f0 [ 1704.546787][T24018] should_fail_ex+0x512/0x640 [ 1704.546801][T24018] __fpu_restore_sig+0xfe/0x13a0 [ 1704.546816][T24018] ? __pfx___schedule+0x10/0x10 [ 1704.546831][T24018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1704.546847][T24018] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1704.546876][T24018] fpu__restore_sig+0x151/0x190 [ 1704.546891][T24018] restore_sigcontext+0x4c9/0x6a0 [ 1704.546903][T24018] ? __pfx_restore_sigcontext+0x10/0x10 [ 1704.546925][T24018] ? __pfx_restore_altstack+0x10/0x10 [ 1704.546941][T24018] ? _raw_spin_unlock_irq+0x23/0x50 [ 1704.546956][T24018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1704.546973][T24018] __do_sys_rt_sigreturn+0x1bb/0x230 [ 1704.546985][T24018] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1704.546997][T24018] ? __rcu_read_unlock+0x2b4/0x580 [ 1704.547017][T24018] do_syscall_64+0xcd/0x4c0 [ 1704.547028][T24018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.547039][T24018] RIP: 0033:0x7f92b518e967 [ 1704.547048][T24018] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1704.547059][T24018] RSP: 002b:00007f92b6018038 EFLAGS: 00000246 [ 1704.547068][T24018] RAX: 0000000000000114 RBX: 00007f92b53b6080 RCX: 00007f92b518e969 [ 1704.547074][T24018] RDX: 0000060000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 1704.547080][T24018] RBP: 00007f92b6018090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.547086][T24018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.547092][T24018] R13: 0000000000000000 R14: 00007f92b53b6080 R15: 00007ffe691e02e8 [ 1704.547105][T24018] [ 1704.867140][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1704.899015][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input75 [ 1705.023991][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.082023][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.209000][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.231726][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.251352][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.272130][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.291260][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.315115][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.481408][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.560492][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1705.576486][ T5904] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1705.711828][T24029] 8021q: adding VLAN 0 to HW filter on device team1 [ 1705.799502][ T5904] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1705.931129][ T5904] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1705.947926][ T5904] usb 7-1: USB disconnect, device number 6 [ 1705.970885][T18196] usb 2-1: USB disconnect, device number 105 [ 1706.007635][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1706.586206][T24040] veth0_to_team: entered promiscuous mode [ 1706.592130][T24040] veth0_to_team: entered allmulticast mode [ 1707.920996][ T30] audit: type=1400 audit(2000000209.440:2459): avc: denied { write } for pid=24046 comm="syz.1.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1707.987215][T21676] udevd[21676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1708.566284][T24057] lo speed is unknown, defaulting to 1000 [ 1708.573335][T24057] lo speed is unknown, defaulting to 1000 [ 1709.492440][ T30] audit: type=1400 audit(2000000210.950:2460): avc: denied { read write } for pid=24059 comm="syz.6.4464" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1709.562594][T24060] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4464'. [ 1709.920140][ T30] audit: type=1400 audit(2000000210.950:2461): avc: denied { open } for pid=24059 comm="syz.6.4464" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1710.551452][T18196] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1710.593989][ T5904] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1710.725689][T18196] usb 2-1: not running at top speed; connect to a high speed hub [ 1710.740165][T18196] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 1710.759262][T18196] usb 2-1: config 95 has no interface number 0 [ 1710.771521][ T5904] usb 3-1: config 8 has an invalid interface number: 113 but max is 0 [ 1710.787042][ T5904] usb 3-1: config 8 has no interface number 0 [ 1710.810163][T18196] usb 2-1: config 95 interface 1 has no altsetting 0 [ 1710.834480][ T5904] usb 3-1: config 8 interface 113 has no altsetting 0 [ 1710.877729][T18196] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1710.893024][ T5904] usb 3-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=76.a7 [ 1710.919753][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.935510][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.948528][T18196] usb 2-1: Product: syz [ 1710.960523][T18196] usb 2-1: Manufacturer: syz [ 1710.965612][T18196] usb 2-1: SerialNumber: syz [ 1711.010567][ T30] audit: type=1400 audit(2000000212.570:2462): avc: denied { bind } for pid=24085 comm="syz.3.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1711.254494][T24081] block device autoloading is deprecated and will be removed. [ 1711.282467][T24081] syz.2.4468: attempt to access beyond end of device [ 1711.282467][T24081] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1711.298323][T24083] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1711.308294][T24083] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1711.419487][ T5904] usb 3-1: string descriptor 0 read error: -71 [ 1711.421250][T24083] SELinux: failed to load policy [ 1711.475154][ T5904] cdc_subset 3-1:8.113: probe with driver cdc_subset failed with error -22 [ 1711.522207][ T5904] usb 3-1: USB disconnect, device number 123 [ 1712.467601][T18196] usb 2-1: USB disconnect, device number 106 [ 1713.900584][ T30] audit: type=1400 audit(2000000215.460:2463): avc: denied { ioctl } for pid=24106 comm="syz.1.4477" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1713.932768][T24119] smc: net device bond0 applied user defined pnetid SYZ2 [ 1714.351075][ T30] audit: type=1400 audit(2000000215.900:2464): avc: denied { setopt } for pid=24129 comm="syz.5.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1714.786487][T24138] bond2: entered promiscuous mode [ 1714.791953][T24138] bond2: entered allmulticast mode [ 1714.798237][T24138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1714.862891][ T30] audit: type=1400 audit(2000000216.430:2465): avc: denied { ioctl } for pid=24137 comm="syz.6.4483" path="socket:[87492]" dev="sockfs" ino=87492 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1716.201196][T24158] netlink: 'syz.6.4491': attribute type 1 has an invalid length. [ 1717.980622][T24158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1718.085722][T24178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24178 comm=syz.6.4491 [ 1718.189478][T24170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1718.199524][T24170] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1718.211479][T24170] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1718.419905][T24190] xt_ecn: cannot match TCP bits for non-tcp packets [ 1718.444389][T18196] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1718.663124][T18196] usb 6-1: Using ep0 maxpacket: 8 [ 1718.678364][T18196] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1718.687912][T18196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.695963][T18196] usb 6-1: Product: syz [ 1718.700615][T18196] usb 6-1: Manufacturer: syz [ 1718.705329][T18196] usb 6-1: SerialNumber: syz [ 1718.713591][T18196] usb 6-1: config 0 descriptor?? [ 1719.105176][T18196] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1719.320428][T24185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.757318][T24185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.913238][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4502'. [ 1720.922406][T24215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1720.929813][T24215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.939277][T24215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.946877][T24215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.019784][T24217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1721.261102][ T30] audit: type=1326 audit(2000000222.820:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24221 comm="syz.1.4506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbda18e969 code=0x0 [ 1722.094520][T18196] usb write operation failed. (-71) [ 1722.152214][ T5904] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1722.203568][T18196] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1722.275602][T18196] dvbdev: DVB: registering new adapter (Terratec H7) [ 1722.332302][T18196] usb 6-1: media controller created [ 1722.355207][T18196] usb read operation failed. (-71) [ 1722.390778][T18196] usb write operation failed. (-71) [ 1722.472998][ T5904] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1722.499087][T18196] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1722.542108][ T5904] usb 3-1: config 0 has no interface number 0 [ 1722.602141][ T5904] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1722.636890][T18196] usb 6-1: USB disconnect, device number 123 [ 1722.707381][ T5904] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1722.788944][ T5904] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1722.902207][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.015797][ T5904] usb 3-1: config 0 descriptor?? [ 1723.082782][T24226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1723.103655][ T5904] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1723.203077][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1723.237810][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1723.256717][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4511'. [ 1723.265763][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1723.277230][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1723.286890][T24240] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4513'. [ 1723.471281][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1723.479126][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1724.046188][ T5904] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1724.090356][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1724.112432][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1724.121455][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1724.129216][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1724.137261][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1724.145348][ T5904] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1724.161277][ T5904] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1725.136793][T18187] usb 3-1: USB disconnect, device number 124 [ 1725.975917][T18187] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1726.047905][T18187] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1726.062376][ T30] audit: type=1400 audit(2000000227.630:2467): avc: denied { read write } for pid=24250 comm="syz.2.4515" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1726.086975][ T30] audit: type=1400 audit(2000000227.650:2468): avc: denied { open } for pid=24250 comm="syz.2.4515" path="/331/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1726.104104][T18187] keyspan 3-1:0.11: device disconnected [ 1726.242132][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1726.414355][T18195] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1726.681271][T18195] usb 7-1: Using ep0 maxpacket: 8 [ 1726.815742][T18187] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1727.314821][T18187] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1727.326914][T18187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1727.344615][T18187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1727.356612][T18195] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1728.328192][T18195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.356971][T18195] usb 7-1: Product: syz [ 1728.362579][T18195] usb 7-1: Manufacturer: syz [ 1728.367419][T18195] usb 7-1: SerialNumber: syz [ 1728.417109][T18195] usb 7-1: config 0 descriptor?? [ 1728.483926][ T5904] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1728.641765][T18195] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1728.643473][T18187] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1728.667804][ T30] audit: type=1400 audit(2000000230.230:2469): avc: denied { open } for pid=24285 comm="syz.1.4528" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1728.693743][T18187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.701877][T18187] usb 4-1: Product: syz [ 1728.706106][T18187] usb 4-1: Manufacturer: syz [ 1728.710675][T18187] usb 4-1: SerialNumber: syz [ 1728.716260][ T30] audit: type=1400 audit(2000000230.230:2470): avc: denied { ioctl } for pid=24285 comm="syz.1.4528" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1728.742369][T18187] usb 4-1: config 0 descriptor?? [ 1728.755107][T18187] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1728.792526][ T5904] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1728.827074][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1728.836229][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1728.854200][T24254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.870936][ T5904] usb 6-1: SerialNumber: syz [ 1728.881643][T24254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.893835][ T30] audit: type=1400 audit(2000000230.460:2471): avc: denied { accept } for pid=24287 comm="syz.2.4529" laddr=172.20.20.170 lport=58996 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1728.943904][ T30] audit: type=1400 audit(2000000230.460:2472): avc: denied { write } for pid=24289 comm="syz.1.4530" path="socket:[87933]" dev="sockfs" ino=87933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1728.977161][T24293] 9pnet_fd: Insufficient options for proto=fd [ 1729.066970][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.112067][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.128475][ T30] audit: type=1400 audit(2000000230.690:2473): avc: denied { getopt } for pid=24297 comm="syz.1.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1729.133772][T24299] vivid-002: disconnect [ 1729.162625][T18187] usb 4-1: USB disconnect, device number 108 [ 1729.573011][T18195] usb write operation failed. (-71) [ 1729.986190][T24297] vivid-002: reconnect [ 1729.991013][T18195] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1730.018139][T18195] dvbdev: DVB: registering new adapter (Terratec H7) [ 1730.033950][T18195] usb 7-1: media controller created [ 1730.053615][T18195] usb read operation failed. (-71) [ 1730.065401][T18195] usb write operation failed. (-71) [ 1730.081805][T18195] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1730.093616][T24313] FAULT_INJECTION: forcing a failure. [ 1730.093616][T24313] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.111812][T18195] usb 7-1: USB disconnect, device number 7 [ 1730.130487][T24313] CPU: 0 UID: 0 PID: 24313 Comm: syz.2.4536 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1730.130513][T24313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1730.130524][T24313] Call Trace: [ 1730.130530][T24313] [ 1730.130537][T24313] dump_stack_lvl+0x16c/0x1f0 [ 1730.130573][T24313] should_fail_ex+0x512/0x640 [ 1730.130592][T24313] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1730.130621][T24313] should_failslab+0xc2/0x120 [ 1730.130648][T24313] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1730.130675][T24313] ? selinux_netlbl_sock_genattr+0xe8/0x4f0 [ 1730.130698][T24313] selinux_netlbl_sock_genattr+0xe8/0x4f0 [ 1730.130719][T24313] selinux_netlbl_socket_post_create+0xb0/0x1b0 [ 1730.130742][T24313] selinux_socket_post_create+0x2f9/0x7d0 [ 1730.130772][T24313] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 1730.130799][T24313] ? udpv6_init_sock+0x216/0x290 [ 1730.130822][T24313] ? __pfx_udpv6_init_sock+0x10/0x10 [ 1730.130845][T24313] ? inet6_create+0xb64/0x1300 [ 1730.130867][T24313] security_socket_post_create+0x247/0x260 [ 1730.130896][T24313] __sock_create+0x738/0x8d0 [ 1730.130925][T24313] udp_sock_create6+0xc7/0x6a0 [ 1730.130952][T24313] ? __pfx_udp_sock_create6+0x10/0x10 [ 1730.130977][T24313] ? crng_make_state+0x46e/0x6d0 [ 1730.130999][T24313] ? lockdep_hardirqs_on+0x7c/0x110 [ 1730.131024][T24313] ? crng_make_state+0x48e/0x6d0 [ 1730.131049][T24313] rxrpc_open_socket+0x20c/0x6b0 [ 1730.131074][T24313] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1730.131107][T24313] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 1730.131132][T24313] ? rcu_is_watching+0x12/0xc0 [ 1730.131158][T24313] rxrpc_lookup_local+0xa01/0x1220 [ 1730.131184][T24313] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1730.131209][T24313] ? __local_bh_enable_ip+0xa4/0x120 [ 1730.131235][T24313] rxrpc_sendmsg+0x37e/0x680 [ 1730.131264][T24313] ____sys_sendmsg+0xa95/0xc70 [ 1730.131288][T24313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1730.131325][T24313] ___sys_sendmsg+0x134/0x1d0 [ 1730.131354][T24313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1730.131379][T24313] ? __lock_acquire+0x622/0x1c90 [ 1730.131446][T24313] __sys_sendmsg+0x16d/0x220 [ 1730.131474][T24313] ? __pfx___sys_sendmsg+0x10/0x10 [ 1730.131521][T24313] do_syscall_64+0xcd/0x4c0 [ 1730.131540][T24313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.131557][T24313] RIP: 0033:0x7f92b518e969 [ 1730.131572][T24313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1730.131588][T24313] RSP: 002b:00007f92b6039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1730.131614][T24313] RAX: ffffffffffffffda RBX: 00007f92b53b5fa0 RCX: 00007f92b518e969 [ 1730.131625][T24313] RDX: 0000000020008440 RSI: 0000200000000180 RDI: 0000000000000003 [ 1730.131637][T24313] RBP: 00007f92b6039090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.131646][T24313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.131656][T24313] R13: 0000000000000000 R14: 00007f92b53b5fa0 R15: 00007ffe691e02e8 [ 1730.131683][T24313] [ 1730.491243][T18187] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1731.140423][T18187] usb 2-1: Using ep0 maxpacket: 8 [ 1731.152082][ T5904] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1731.168603][T18187] usb 2-1: config 162 has an invalid interface number: 242 but max is 0 [ 1731.211785][T18187] usb 2-1: config 162 contains an unexpected descriptor of type 0x2, skipping [ 1731.250593][T18187] usb 2-1: config 162 has no interface number 0 [ 1731.315799][T18187] usb 2-1: config 162 interface 242 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1731.369083][T18187] usb 2-1: config 162 interface 242 has no altsetting 0 [ 1731.382307][ T5904] usb 6-1: USB disconnect, device number 124 [ 1732.744214][T18187] usb 2-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=22.93 [ 1732.766100][T18187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.774130][T18187] usb 2-1: Product: syz [ 1732.778260][T18187] usb 2-1: Manufacturer: syz [ 1732.782857][T18187] usb 2-1: SerialNumber: syz [ 1733.231482][ T30] audit: type=1400 audit(2000000234.590:2474): avc: denied { write } for pid=24325 comm="syz.6.4540" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1733.293459][T18187] usb 2-1: Found UVC 0.0a device syz (045e:00f8) [ 1733.317877][T18187] usb 2-1: No valid video chain found. [ 1733.325849][T18187] usb 2-1: USB disconnect, device number 107 [ 1733.548169][T12143] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1733.599566][T24345] FAULT_INJECTION: forcing a failure. [ 1733.599566][T24345] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.612409][T24345] CPU: 1 UID: 0 PID: 24345 Comm: syz.6.4546 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1733.612433][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1733.612443][T24345] Call Trace: [ 1733.612450][T24345] [ 1733.612456][T24345] dump_stack_lvl+0x16c/0x1f0 [ 1733.612486][T24345] should_fail_ex+0x512/0x640 [ 1733.612504][T24345] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1733.612531][T24345] should_failslab+0xc2/0x120 [ 1733.612557][T24345] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1733.612580][T24345] ? __alloc_skb+0x2b2/0x380 [ 1733.612608][T24345] __alloc_skb+0x2b2/0x380 [ 1733.612632][T24345] ? __pfx___alloc_skb+0x10/0x10 [ 1733.612655][T24345] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1733.612686][T24345] pfkey_sendmsg+0x16e/0x850 [ 1733.612707][T24345] ____sys_sendmsg+0xa95/0xc70 [ 1733.612728][T24345] ? copy_msghdr_from_user+0x10a/0x160 [ 1733.612754][T24345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1733.612786][T24345] ___sys_sendmsg+0x134/0x1d0 [ 1733.612814][T24345] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.612838][T24345] ? __lock_acquire+0x622/0x1c90 [ 1733.612894][T24345] __sys_sendmsg+0x16d/0x220 [ 1733.612921][T24345] ? __pfx___sys_sendmsg+0x10/0x10 [ 1733.612965][T24345] do_syscall_64+0xcd/0x4c0 [ 1733.612983][T24345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.613001][T24345] RIP: 0033:0x7f025bf8e969 [ 1733.613015][T24345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1733.613032][T24345] RSP: 002b:00007f025cd5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1733.613050][T24345] RAX: ffffffffffffffda RBX: 00007f025c1b5fa0 RCX: 00007f025bf8e969 [ 1733.613061][T24345] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1733.613072][T24345] RBP: 00007f025cd5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.613082][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.613093][T24345] R13: 0000000000000000 R14: 00007f025c1b5fa0 R15: 00007ffe65b3ada8 [ 1733.613123][T24345] [ 1733.916823][T12143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1733.947758][T12143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1733.957204][T12143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.965335][T12143] usb 4-1: Product: syz [ 1733.969727][T12143] usb 4-1: Manufacturer: syz [ 1733.995162][T12143] usb 4-1: SerialNumber: syz [ 1734.552118][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1735.701260][ T30] audit: type=1400 audit(2000000237.120:2475): avc: denied { map } for pid=24355 comm="syz.5.4550" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1736.037479][ T30] audit: type=1400 audit(2000000237.120:2476): avc: denied { execute } for pid=24355 comm="syz.5.4550" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1736.488067][ T5904] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1737.082342][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 1737.103866][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1737.136945][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1738.694616][ T5904] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1738.751311][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.759493][ T5904] usb 6-1: Product: syz [ 1738.763835][ T5904] usb 6-1: Manufacturer: syz [ 1738.768436][ T5904] usb 6-1: SerialNumber: syz [ 1738.784536][ T5904] usb 6-1: config 0 descriptor?? [ 1738.792798][ T5904] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1738.802147][ T5904] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1738.886923][T12143] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1738.934899][T12143] usb 4-1: USB disconnect, device number 109 [ 1738.949889][T12143] usblp0: removed [ 1738.988982][T18195] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1739.111301][ T5904] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1739.159762][T18195] usb 3-1: device descriptor read/64, error -71 [ 1739.401696][ T5904] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1739.411671][ T5904] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1739.428870][ T5904] em28xx 6-1:0.0: No AC97 audio processor [ 1739.456142][ T5904] usb 6-1: USB disconnect, device number 125 [ 1739.531208][T18195] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1739.585748][ T5904] em28xx 6-1:0.0: Disconnecting em28xx [ 1739.604733][ T5904] em28xx 6-1:0.0: Freeing device [ 1739.764169][T18195] usb 3-1: device descriptor read/64, error -71 [ 1740.905750][T18195] usb usb3-port1: attempt power cycle [ 1741.221875][T24416] netlink: 'syz.1.4563': attribute type 2 has an invalid length. [ 1741.236960][T24416] : entered promiscuous mode [ 1741.926867][T18196] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1742.461454][T18196] usb 2-1: device descriptor read/64, error -71 [ 1742.721284][T18196] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1743.920878][T18195] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1744.002311][T18196] usb 2-1: device descriptor read/64, error -71 [ 1744.091394][T18195] usb 6-1: Using ep0 maxpacket: 16 [ 1744.111547][T18196] usb usb2-port1: attempt power cycle [ 1745.394787][T18195] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1745.406321][T18195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1745.419111][T18195] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1745.428192][T18195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.468566][T18195] usb 6-1: Product: syz [ 1745.473107][T18195] usb 6-1: Manufacturer: syz [ 1745.477679][T18195] usb 6-1: SerialNumber: syz [ 1745.501803][T18195] usb 6-1: config 0 descriptor?? [ 1745.509338][T18195] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1745.528859][T18195] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1745.690858][ T30] audit: type=1326 audit(2000000247.240:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24456 comm="syz.2.4575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b518e969 code=0x0 [ 1745.734221][T24459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1745.861340][ T5904] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1746.366009][ T5904] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1746.399924][ T5904] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1746.418078][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1746.444047][ T5904] usb 7-1: SerialNumber: syz [ 1746.672411][T24472] FAULT_INJECTION: forcing a failure. [ 1746.672411][T24472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1746.687530][T24472] CPU: 0 UID: 0 PID: 24472 Comm: syz.2.4581 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1746.687551][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1746.687561][T24472] Call Trace: [ 1746.687567][T24472] [ 1746.687574][T24472] dump_stack_lvl+0x16c/0x1f0 [ 1746.687606][T24472] should_fail_ex+0x512/0x640 [ 1746.687633][T24472] _copy_to_user+0x32/0xd0 [ 1746.687657][T24472] simple_read_from_buffer+0xcb/0x170 [ 1746.687682][T24472] proc_fail_nth_read+0x197/0x270 [ 1746.687706][T24472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1746.687730][T24472] ? rw_verify_area+0xcf/0x680 [ 1746.687749][T24472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1746.687772][T24472] vfs_read+0x1e4/0xc60 [ 1746.687799][T24472] ? __pfx___mutex_lock+0x10/0x10 [ 1746.687816][T24472] ? __pfx_vfs_read+0x10/0x10 [ 1746.687847][T24472] ? __fget_files+0x20e/0x3c0 [ 1746.687868][T24472] ? warn_bogus_irq_restore+0x20/0x30 [ 1746.687903][T24472] ksys_read+0x12a/0x250 [ 1746.687925][T24472] ? __pfx_ksys_read+0x10/0x10 [ 1746.687947][T24472] ? __get_user_nocheck_8+0x20/0x20 [ 1746.687985][T24472] do_syscall_64+0xcd/0x4c0 [ 1746.688003][T24472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.688019][T24472] RIP: 0033:0x7f92b518d37c [ 1746.688032][T24472] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1746.688048][T24472] RSP: 002b:00007f92b6039030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1746.688063][T24472] RAX: ffffffffffffffda RBX: 00007f92b53b5fa0 RCX: 00007f92b518d37c [ 1746.688074][T24472] RDX: 000000000000000f RSI: 00007f92b60390a0 RDI: 0000000000000003 [ 1746.688084][T24472] RBP: 00007f92b6039090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.688094][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.688103][T24472] R13: 0000000000000000 R14: 00007f92b53b5fa0 R15: 00007ffe691e02e8 [ 1746.688126][T24472] [ 1746.941629][T18195] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1746.948838][T18195] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1746.956600][T18195] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1746.963649][T18195] em28xx 6-1:0.0: No AC97 audio processor [ 1747.076669][T18195] usb 6-1: USB disconnect, device number 126 [ 1747.084025][T18195] em28xx 6-1:0.0: Disconnecting em28xx [ 1747.090835][T18195] em28xx 6-1:0.0: Freeing device [ 1747.823237][ T30] audit: type=1400 audit(2000000249.380:2478): avc: denied { getopt } for pid=24485 comm="syz.5.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1749.210332][ T5904] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1749.239255][ T5904] usb 7-1: USB disconnect, device number 8 [ 1749.412528][ T30] audit: type=1326 audit(2000000250.980:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.448474][ T30] audit: type=1326 audit(2000000251.010:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.476376][ T30] audit: type=1326 audit(2000000251.040:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.504684][ T30] audit: type=1326 audit(2000000251.040:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.507841][T24514] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4594'. [ 1749.539500][ T30] audit: type=1326 audit(2000000251.040:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.563282][ T30] audit: type=1326 audit(2000000251.040:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.586985][ T30] audit: type=1326 audit(2000000251.040:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.611118][T18187] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1749.611324][T18196] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1749.633932][ T30] audit: type=1326 audit(2000000251.040:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24510 comm="syz.3.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeef8e969 code=0x7ffc0000 [ 1749.691333][ T5904] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1749.785171][T18196] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1749.808461][T18187] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1749.808476][T18196] usb 3-1: config 0 has no interface number 0 [ 1749.817346][T18187] usb 2-1: config 0 has no interface number 0 [ 1749.829370][T18187] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1749.840886][T18187] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1749.854732][T18187] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1749.873175][T18196] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1749.873582][T18187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.915377][T18196] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1749.917154][ T5904] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1749.922077][T18187] usb 2-1: config 0 descriptor?? [ 1749.951239][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.956145][T24508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1749.959678][T18196] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1749.973037][T18187] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1750.038736][T18196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.039902][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1750.047601][ T5904] usb 7-1: config 0 descriptor?? [ 1750.154096][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1750.154475][ T5904] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1750.165545][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1750.168757][T18196] usb 3-1: config 0 descriptor?? [ 1750.207321][T24507] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1750.261525][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1750.265228][T18196] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1750.269679][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1750.408359][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1750.416219][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1750.424045][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1750.432883][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1750.440561][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1750.448359][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1750.457736][T18196] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1750.515846][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1751.184750][T18187] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1751.193813][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1751.196496][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1751.209437][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1751.218560][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1751.226468][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1751.229285][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1751.234300][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1751.234365][T18187] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1751.268452][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1751.276832][T18187] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1751.280896][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1751.292769][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1751.302085][T18196] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1751.312852][T18196] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1751.378451][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1751.378466][ T30] audit: type=1326 audit(2000000252.940:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz.5.4595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb342d8e969 code=0x0 [ 1752.516034][T18191] usb 3-1: USB disconnect, device number 2 [ 1752.524990][T18196] usb 2-1: USB disconnect, device number 111 [ 1752.535069][T18191] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1752.672464][T18196] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1753.085573][T18191] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1753.248014][T18196] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1753.267577][T18191] keyspan 3-1:0.11: device disconnected [ 1753.283948][T18196] keyspan 2-1:0.11: device disconnected [ 1753.292602][ T5904] usb 7-1: USB disconnect, device number 9 [ 1753.351673][T24543] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1754.485334][T18187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1755.280343][T18187] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1755.298871][T18187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1755.301110][ T30] audit: type=1400 audit(2000000256.810:2498): avc: denied { setopt } for pid=24562 comm="syz.6.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1755.308822][T18187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1755.345977][T18187] usb 3-1: SerialNumber: syz [ 1755.399486][T24563] tmpfs: Bad value for 'mpol' [ 1756.069474][T24582] netlink: 'syz.5.4610': attribute type 1 has an invalid length. [ 1756.092405][T24582] netlink: 'syz.5.4610': attribute type 11 has an invalid length. [ 1756.107699][T24582] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1756.270808][T24585] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1756.881325][ T30] audit: type=1400 audit(2000000258.430:2499): avc: denied { accept } for pid=24588 comm="syz.1.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1757.527831][T18187] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1757.547191][T18187] usb 3-1: USB disconnect, device number 3 [ 1757.617171][T24608] loop6: detected capacity change from 0 to 524287999 [ 1758.009009][T24608] openvswitch: netlink: Tunnel attr 10875 out of range max 16 [ 1759.439440][T12143] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1759.651491][T12143] usb 3-1: Using ep0 maxpacket: 32 [ 1759.998389][T12143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.033268][T12143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.056088][T12143] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1760.080876][T12143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.096646][T12143] usb 3-1: config 0 descriptor?? [ 1760.372416][T24644] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1761.017064][T12143] hkems 0003:2006:0118.0017: unknown main item tag 0x0 [ 1761.027664][T12143] hkems 0003:2006:0118.0017: hidraw0: USB HID v0.03 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 1761.039016][T12143] hkems 0003:2006:0118.0017: no inputs found [ 1761.051662][T12143] hkems 0003:2006:0118.0017: force feedback init failed [ 1761.231576][ T5904] usb 3-1: USB disconnect, device number 4 [ 1761.241196][T18188] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1761.260864][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1761.301385][T18196] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1761.407730][T18188] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1761.426214][T18188] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1761.436770][T18188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1761.447965][T18188] usb 7-1: SerialNumber: syz [ 1761.501331][T18196] usb 6-1: Using ep0 maxpacket: 16 [ 1761.527807][T18196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.613921][T18196] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1761.641165][T18196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.673685][T18196] usb 6-1: config 0 descriptor?? [ 1762.216749][T24666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1762.438625][T18196] hid (null): invalid report_count -1549258442 [ 1762.598295][T18196] mcp2221 0003:04D8:00DD.0018: invalid report_count -1549258442 [ 1762.606466][T18196] mcp2221 0003:04D8:00DD.0018: item 0 4 1 9 parsing failed [ 1762.614869][T18196] mcp2221 0003:04D8:00DD.0018: can't parse reports [ 1762.623330][T18196] mcp2221 0003:04D8:00DD.0018: probe with driver mcp2221 failed with error -22 [ 1763.467870][T18188] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1763.506687][T18188] usb 7-1: USB disconnect, device number 10 [ 1763.903918][T18191] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1764.131254][T18191] usb 3-1: Using ep0 maxpacket: 8 [ 1764.149574][T18191] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1764.162020][T18191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.170278][T18191] usb 3-1: Product: syz [ 1764.179387][T18191] usb 3-1: Manufacturer: syz [ 1764.207130][T18191] usb 3-1: SerialNumber: syz [ 1764.585858][T18191] usb 3-1: config 0 descriptor?? [ 1764.821444][ T5904] usb 6-1: USB disconnect, device number 127 [ 1764.844211][T18191] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1765.262947][T24684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.310188][T24684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.550898][T18191] usb write operation failed. (-71) [ 1766.681824][T18191] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1766.993634][T18191] dvbdev: DVB: registering new adapter (Terratec H7) [ 1767.011635][T18191] usb 3-1: media controller created [ 1767.038628][T18191] usb read operation failed. (-71) [ 1767.065206][T18191] usb write operation failed. (-71) [ 1767.100665][T18191] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1767.137884][T24720] lo speed is unknown, defaulting to 1000 [ 1767.144327][T24720] lo speed is unknown, defaulting to 1000 [ 1767.224332][T18191] usb 3-1: USB disconnect, device number 5 [ 1769.636812][T24744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1769.646041][T24744] IPv6: Can't replace route, no match found [ 1770.261336][T18188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1770.521220][T18191] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1770.621238][T18188] usb 3-1: Using ep0 maxpacket: 8 [ 1770.829248][T18188] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1770.871363][T18188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.941273][T18188] usb 3-1: Product: syz [ 1770.951198][T18191] usb 7-1: Using ep0 maxpacket: 32 [ 1770.956430][T18188] usb 3-1: Manufacturer: syz [ 1770.964123][T18188] usb 3-1: SerialNumber: syz [ 1770.972240][T18191] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1770.973580][T18188] usb 3-1: config 0 descriptor?? [ 1770.989376][T18191] usb 7-1: config 0 has no interface number 0 [ 1771.012489][T18191] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1771.026356][T18191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.035193][T18191] usb 7-1: Product: syz [ 1771.039446][T18191] usb 7-1: Manufacturer: syz [ 1771.044372][T18191] usb 7-1: SerialNumber: syz [ 1771.052315][T18191] usb 7-1: config 0 descriptor?? [ 1771.189309][T24775] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1771.212373][T18188] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1771.474376][T24759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.580145][T24759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.701375][T18191] radio-si470x 7-1:0.35: this is not a si470x device. [ 1771.732138][T18191] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1772.313356][ T30] audit: type=1800 audit(2000000273.800:2500): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4662" name="file0" dev="tmpfs" ino=1611 res=0 errno=0 [ 1772.721541][T24801] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1773.311083][T18188] usb write operation failed. (-71) [ 1773.368302][T18188] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1773.381379][T18191] usb 7-1: USB disconnect, device number 11 [ 1773.384001][T18188] dvbdev: DVB: registering new adapter (Terratec H7) [ 1773.395997][T18188] usb 3-1: media controller created [ 1773.403715][T18188] usb read operation failed. (-71) [ 1773.409449][T18188] usb write operation failed. (-71) [ 1773.421291][T18188] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1773.445384][T18188] usb 3-1: USB disconnect, device number 6 [ 1773.703655][ T30] audit: type=1400 audit(2000000275.270:2501): avc: denied { read } for pid=24806 comm="syz.6.4666" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1773.801878][T24811] netlink: 'syz.6.4666': attribute type 1 has an invalid length. [ 1774.449185][T24811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1774.656634][T24831] FAULT_INJECTION: forcing a failure. [ 1774.656634][T24831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.671283][T24831] CPU: 1 UID: 0 PID: 24831 Comm: syz.6.4670 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1774.671306][T24831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.671314][T24831] Call Trace: [ 1774.671321][T24831] [ 1774.671327][T24831] dump_stack_lvl+0x16c/0x1f0 [ 1774.671359][T24831] should_fail_ex+0x512/0x640 [ 1774.671381][T24831] _copy_from_iter+0x29f/0x16f0 [ 1774.671408][T24831] ? __pfx__copy_from_iter+0x10/0x10 [ 1774.671428][T24831] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1774.671465][T24831] copy_page_from_iter+0xde/0x180 [ 1774.671489][T24831] tun_build_skb.constprop.0+0x2e8/0x14f0 [ 1774.671519][T24831] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1774.671565][T24831] ? __pfx__kstrtoull+0x10/0x10 [ 1774.671595][T24831] tun_get_user+0x165f/0x3b80 [ 1774.671626][T24831] ? __pfx_tun_get_user+0x10/0x10 [ 1774.671646][T24831] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1774.671674][T24831] ? find_held_lock+0x2b/0x80 [ 1774.671697][T24831] ? tun_get+0x191/0x370 [ 1774.671722][T24831] tun_chr_write_iter+0xdc/0x210 [ 1774.671745][T24831] vfs_write+0x6c7/0x1150 [ 1774.671770][T24831] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1774.671794][T24831] ? __pfx_vfs_write+0x10/0x10 [ 1774.671815][T24831] ? find_held_lock+0x2b/0x80 [ 1774.671852][T24831] ksys_write+0x12a/0x250 [ 1774.671874][T24831] ? __pfx_ksys_write+0x10/0x10 [ 1774.671904][T24831] do_syscall_64+0xcd/0x4c0 [ 1774.671923][T24831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.671941][T24831] RIP: 0033:0x7f025bf8d41f [ 1774.671956][T24831] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1774.671973][T24831] RSP: 002b:00007f025cd5e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1774.671991][T24831] RAX: ffffffffffffffda RBX: 00007f025c1b5fa0 RCX: 00007f025bf8d41f [ 1774.672002][T24831] RDX: 000000000000003e RSI: 0000200000000000 RDI: 00000000000000c8 [ 1774.672013][T24831] RBP: 00007f025cd5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.672023][T24831] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 1774.672034][T24831] R13: 0000000000000000 R14: 00007f025c1b5fa0 R15: 00007ffe65b3ada8 [ 1774.672057][T24831] [ 1775.073273][T24848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4673'. [ 1776.471293][T18188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1776.631983][T18188] usb 6-1: Using ep0 maxpacket: 32 [ 1776.944622][T18188] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1776.974612][T18188] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1777.035240][T18188] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1777.043126][T24881] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4680'. [ 1777.046793][T18188] usb 6-1: config 1 has no interface number 0 [ 1777.060446][T18188] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1777.072002][T18188] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1777.086363][T18188] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1777.248756][T18188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.271707][T24836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1777.311097][T18188] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1777.441309][T18187] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1777.544312][T18188] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1777.642687][T18187] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1777.661531][T18187] usb 3-1: config 0 has no interface number 0 [ 1777.675931][T18187] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1777.717462][T18187] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1777.751412][T18187] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1777.781203][T18187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.827820][T18187] usb 3-1: config 0 descriptor?? [ 1777.838897][T24885] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1777.858068][T18187] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1777.884342][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1777.893872][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1777.902675][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1777.911926][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1777.920053][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1777.928446][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1777.993575][T18187] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1778.022647][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1778.076999][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1778.105752][T24890] 9pnet_fd: Insufficient options for proto=fd [ 1778.275642][ T5904] usb 6-1: USB disconnect, device number 2 [ 1778.281824][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1778.292191][ T5904] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1778.310133][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1778.327239][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1778.385248][T18187] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1778.796647][T18187] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1780.251226][ T5904] usb 3-1: USB disconnect, device number 7 [ 1780.280666][ T5904] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1780.343753][ T5904] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1780.383627][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4689'. [ 1780.581884][ T5904] keyspan 3-1:0.11: device disconnected [ 1780.740324][T18195] IPVS: starting estimator thread 0... [ 1780.821766][T24926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4692'. [ 1780.842251][T24924] IPVS: using max 77 ests per chain, 184800 per kthread [ 1780.974927][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.984978][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.022166][T24918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.085788][T24931] 9pnet_fd: Insufficient options for proto=fd [ 1781.211246][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1781.245427][T24936] sg_write: data in/out 57620/14 bytes for SCSI command 0x0-- guessing data in; [ 1781.245427][T24936] program syz.6.4696 not setting count and/or reply_len properly [ 1781.321203][T18195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1781.390147][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.412770][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.423333][T24938] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4696'. [ 1781.435785][ T5904] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1781.450023][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.489023][ T5904] usb 3-1: config 0 descriptor?? [ 1781.561214][T18195] usb 6-1: Using ep0 maxpacket: 8 [ 1781.579420][T18195] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1781.596722][T18195] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1781.612767][T18195] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1781.642486][T18195] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1781.657846][T18195] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1781.670244][T18195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.861436][ T30] audit: type=1400 audit(2000000283.420:2502): avc: denied { execheap } for pid=24939 comm="syz.3.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1781.908903][T18195] usb 6-1: GET_CAPABILITIES returned 0 [ 1781.914633][T18195] usbtmc 6-1:16.0: can't read capabilities [ 1782.115760][ T5904] usbhid 3-1:0.0: can't add hid device: -71 [ 1782.122777][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1782.132924][ T5904] usb 3-1: USB disconnect, device number 8 [ 1782.145955][T24933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.155906][T24933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.357083][ T30] audit: type=1400 audit(2000000283.920:2503): avc: denied { execute } for pid=24932 comm="syz.5.4695" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=91391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1782.390710][T18187] usb 6-1: USB disconnect, device number 3 [ 1783.188454][ T30] audit: type=1400 audit(2000000284.750:2504): avc: denied { map } for pid=24951 comm="syz.2.4700" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1783.329014][ T30] audit: type=1400 audit(2000000284.840:2505): avc: denied { mount } for pid=24952 comm="syz.5.4701" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1783.470248][ T30] audit: type=1400 audit(2000000284.860:2506): avc: denied { search } for pid=24952 comm="syz.5.4701" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1783.544278][ T30] audit: type=1400 audit(2000000284.860:2507): avc: denied { read open } for pid=24952 comm="syz.5.4701" path="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1784.509131][T24981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4706'. [ 1787.194140][ T30] audit: type=1400 audit(2000000288.760:2508): avc: denied { append } for pid=25004 comm="syz.5.4713" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1787.346083][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4713'. [ 1788.635455][T25026] 9pnet_fd: Insufficient options for proto=fd [ 1788.769304][T25022] ptrace attach of "./syz-executor exec"[22040] was attempted by "./syz-executor exec"[25022] [ 1788.783439][T25022] dns_resolver: Unsupported server list version (0) [ 1788.799693][ T30] audit: type=1400 audit(2000000290.350:2509): avc: denied { create } for pid=25004 comm="syz.5.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1788.807622][T25036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4722'. [ 1788.851213][T25034] netlink: 'syz.2.4720': attribute type 33 has an invalid length. [ 1789.032198][T25040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1789.181478][ T5904] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1789.270571][T25047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1789.342814][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.391515][ T5904] usb 3-1: config 0 has no interfaces? [ 1789.418341][ T5904] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1789.459224][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.766650][ T5904] usb 3-1: config 0 descriptor?? [ 1790.051180][T18188] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1790.924617][T18188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1790.936770][T18188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.947674][T18188] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1790.958527][T18188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.993189][T18188] usb 2-1: config 0 descriptor?? [ 1791.712439][T18188] elan 0003:04F3:0755.0019: unknown main item tag 0x2 [ 1791.722874][T18188] elan 0003:04F3:0755.0019: failed to start in urb: -90 [ 1791.741778][T18188] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1791.800779][T25073] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4731'. [ 1791.866345][T18195] usb 2-1: USB disconnect, device number 112 [ 1792.076888][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1792.273392][T18188] usb 3-1: USB disconnect, device number 9 [ 1792.636780][T25082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4734'. [ 1793.228288][T25099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4736'. [ 1796.049075][T25116] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1796.811340][T18187] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1797.094991][T25129] siw: device registration error -23 [ 1797.269471][T18187] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1797.379203][T18195] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1797.674442][T18187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1797.683794][T18187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.692193][T18187] usb 3-1: Product: syz [ 1797.696392][T18187] usb 3-1: Manufacturer: syz [ 1797.701008][T18187] usb 3-1: SerialNumber: syz [ 1797.743924][T18195] usb 7-1: Using ep0 maxpacket: 16 [ 1797.750553][T18195] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 1797.769429][T18195] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1797.777922][T18195] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1797.797188][T18195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1797.823375][T18195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1797.845166][T18195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1797.874419][T18195] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1797.893682][T18195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.911335][T18195] usb 7-1: Product: syz [ 1797.921565][T18195] usb 7-1: Manufacturer: syz [ 1797.926246][T18195] usb 7-1: SerialNumber: syz [ 1798.022350][T18195] usb 7-1: config 0 descriptor?? [ 1798.197686][T18187] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1798.405366][T18195] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 1798.451643][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 1798.483924][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 1798.501378][T25121] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1798.523475][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 1798.594303][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 1798.611301][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 1798.618935][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 1798.652471][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 1798.738731][T18195] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1798.757827][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4749'. [ 1798.770971][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 1799.201233][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 1799.214447][T25150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25150 comm=syz.5.4749 [ 1799.221210][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 1799.244142][T18195] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 1799.265095][T18195] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1799.296456][T18195] usb 7-1: USB disconnect, device number 12 [ 1799.323165][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4750'. [ 1799.346100][T18195] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1799.388076][T18195] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1799.409642][T18195] keyspan 7-1:0.0: device disconnected [ 1801.379193][ T30] audit: type=1400 audit(2000000302.920:2510): avc: denied { accept } for pid=25160 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1802.138227][ T30] audit: type=1400 audit(2000000303.350:2511): avc: denied { connect } for pid=25164 comm="syz.6.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1802.691224][T18187] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1802.851274][T18187] usb 2-1: Using ep0 maxpacket: 8 [ 1802.869652][T18187] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1802.880431][T18187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.888740][T18187] usb 2-1: Product: syz [ 1802.893004][T18187] usb 2-1: Manufacturer: syz [ 1802.897711][T18187] usb 2-1: SerialNumber: syz [ 1802.905753][T18187] usb 2-1: config 0 descriptor?? [ 1803.189312][ T30] audit: type=1400 audit(2000000304.750:2512): avc: denied { mount } for pid=25178 comm="syz.3.4758" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1803.211883][T18187] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1803.422825][T25174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.473128][T25174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.564699][ T30] audit: type=1400 audit(2000000305.130:2513): avc: denied { write } for pid=25181 comm="syz.5.4759" path="socket:[91019]" dev="sockfs" ino=91019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1803.616700][ T30] audit: type=1400 audit(2000000305.180:2514): avc: denied { unmount } for pid=18166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1803.671723][T25123] usblp0:failed reading printer status (-110) [ 1803.690878][T18188] usb 3-1: USB disconnect, device number 10 [ 1803.701534][T18188] usblp0: removed [ 1803.901297][T18195] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1804.195524][T18187] usb write operation failed. (-71) [ 1804.270794][T18187] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1804.347938][T18187] dvbdev: DVB: registering new adapter (Terratec H7) [ 1804.388593][T18195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.391625][T18187] usb 2-1: media controller created [ 1804.412231][T18195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.414619][T18187] usb read operation failed. (-71) [ 1804.432213][T18195] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1804.456998][T18187] usb write operation failed. (-71) [ 1804.460161][T18195] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1804.465581][T18187] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1804.471926][T18195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.489003][T18187] usb 2-1: USB disconnect, device number 113 [ 1804.566912][T18195] usb 6-1: config 0 descriptor?? [ 1806.035530][ T30] audit: type=1400 audit(2000000307.600:2515): avc: denied { create } for pid=25200 comm="syz.3.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1806.431239][T18195] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 1806.444729][T18195] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1806.459751][T25206] 9pnet_fd: Insufficient options for proto=fd [ 1806.485706][T18195] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1806.671382][ T5904] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1808.621327][T18187] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 1808.831341][T18195] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1808.850587][ T30] audit: type=1400 audit(2000000310.340:2516): avc: denied { wake_alarm } for pid=25226 comm="syz.6.4773" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1809.043803][T18195] usb 3-1: Using ep0 maxpacket: 32 [ 1809.403575][T18188] usb 6-1: USB disconnect, device number 4 [ 1810.107520][T18195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1810.437299][T18195] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1810.451159][T18195] usb 3-1: can't read configurations, error -71 [ 1812.225213][T18195] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1812.447113][T18195] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1812.459883][T18195] usb 6-1: config 0 has no interface number 0 [ 1812.470775][T18195] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1812.483913][T18195] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1812.505383][T18195] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1812.517541][T18195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.527599][T18195] usb 6-1: Product: syz [ 1812.532751][T18195] usb 6-1: Manufacturer: syz [ 1812.537748][T18195] usb 6-1: SerialNumber: syz [ 1812.587857][T18195] usb 6-1: config 0 descriptor?? [ 1812.608846][T25274] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1812.633840][T18195] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1812.675840][T18195] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1813.518681][T25278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1813.595780][ T30] audit: type=1326 audit(2000000315.160:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25281 comm="syz.1.4786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbda18e969 code=0x0 [ 1814.684068][ T30] audit: type=1400 audit(2000000316.250:2518): avc: denied { watch } for pid=25273 comm="syz.5.4784" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1814.710339][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1814.770568][ T30] audit: type=1400 audit(2000000316.330:2519): avc: denied { write } for pid=25294 comm="syz.2.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1814.881578][T25291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4788'. [ 1815.101213][T18195] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1816.069684][T18195] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1816.081178][T18195] usb 3-1: config 0 has no interface number 0 [ 1816.087333][T18195] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1816.109920][T18195] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1816.116987][T18195] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1816.127433][T18195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.138195][ T5904] usb 6-1: USB disconnect, device number 5 [ 1816.192871][ T5904] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1816.204974][T18195] usb 3-1: config 0 descriptor?? [ 1816.210357][T25297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1816.239041][T18195] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1816.247279][ T5904] cyberjack 6-1:0.69: device disconnected [ 1816.262569][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1816.274533][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1816.282877][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1816.290611][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1816.299601][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1816.307657][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1816.368288][T18195] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1816.384238][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1816.404833][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1816.424043][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1816.486942][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1816.700913][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1816.709860][T18195] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1816.721245][T18195] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1816.837862][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1817.391246][ T5904] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1817.604515][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1817.655111][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.664328][ T5904] usb 6-1: Product: syz [ 1817.668572][ T5904] usb 6-1: Manufacturer: syz [ 1817.673373][ T5904] usb 6-1: SerialNumber: syz [ 1818.584339][T18195] usb 3-1: USB disconnect, device number 13 [ 1819.830298][T18195] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1819.873553][T18195] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1819.902579][T18195] keyspan 3-1:0.11: device disconnected [ 1819.997723][ T5904] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1820.028218][T25344] FAULT_INJECTION: forcing a failure. [ 1820.028218][T25344] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.043669][T25344] CPU: 1 UID: 0 PID: 25344 Comm: syz.1.4801 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1820.043694][T25344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1820.043703][T25344] Call Trace: [ 1820.043709][T25344] [ 1820.043715][T25344] dump_stack_lvl+0x16c/0x1f0 [ 1820.043747][T25344] should_fail_ex+0x512/0x640 [ 1820.043770][T25344] should_failslab+0xc2/0x120 [ 1820.043797][T25344] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1820.043824][T25344] ? sidtab_sid2str_get+0x17a/0x680 [ 1820.043849][T25344] kmemdup_noprof+0x29/0x60 [ 1820.043870][T25344] sidtab_sid2str_get+0x17a/0x680 [ 1820.043891][T25344] sidtab_entry_to_string+0x33/0x110 [ 1820.043909][T25344] security_sid_to_context_core+0x35c/0x640 [ 1820.043928][T25344] avc_audit_post_callback+0x109/0x8f0 [ 1820.043948][T25344] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 1820.043965][T25344] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1820.043983][T25344] ? skb_put+0x138/0x1b0 [ 1820.044004][T25344] ? audit_log_n_string+0x253/0x540 [ 1820.044028][T25344] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1820.044047][T25344] common_lsm_audit+0x24b/0x300 [ 1820.044066][T25344] ? __pfx_common_lsm_audit+0x10/0x10 [ 1820.044084][T25344] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1820.044108][T25344] ? avc_update_node.isra.0+0x4c0/0xb60 [ 1820.044129][T25344] slow_avc_audit+0x186/0x210 [ 1820.044149][T25344] ? __pfx_slow_avc_audit+0x10/0x10 [ 1820.044170][T25344] ? avc_denied+0x14a/0x190 [ 1820.044192][T25344] ? avc_has_perm_noaudit+0x306/0x3b0 [ 1820.044217][T25344] avc_has_perm+0x18b/0x1c0 [ 1820.044240][T25344] ? __pfx_avc_has_perm+0x10/0x10 [ 1820.044263][T25344] ? find_held_lock+0x2b/0x80 [ 1820.044284][T25344] sock_has_perm+0x252/0x2f0 [ 1820.044306][T25344] ? __pfx_sock_has_perm+0x10/0x10 [ 1820.044330][T25344] ? proc_fail_nth_write+0x9f/0x250 [ 1820.044360][T25344] ? find_held_lock+0x2b/0x80 [ 1820.044382][T25344] security_socket_getsockopt+0x211/0x240 [ 1820.044410][T25344] do_sock_getsockopt+0xf4/0x800 [ 1820.044428][T25344] ? __print_lock_name+0xd0/0xe0 [ 1820.044449][T25344] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1820.044464][T25344] ? __fget_files+0x204/0x3c0 [ 1820.044500][T25344] __sys_getsockopt+0x12f/0x260 [ 1820.044532][T25344] __x64_sys_getsockopt+0xbd/0x160 [ 1820.044555][T25344] ? do_syscall_64+0x91/0x4c0 [ 1820.044570][T25344] ? lockdep_hardirqs_on+0x7c/0x110 [ 1820.044593][T25344] do_syscall_64+0xcd/0x4c0 [ 1820.044609][T25344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.044627][T25344] RIP: 0033:0x7fbbda18e969 [ 1820.044651][T25344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.044667][T25344] RSP: 002b:00007fbbdaf2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1820.044684][T25344] RAX: ffffffffffffffda RBX: 00007fbbda3b5fa0 RCX: 00007fbbda18e969 [ 1820.044695][T25344] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 1820.044705][T25344] RBP: 00007fbbdaf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.044715][T25344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.044725][T25344] R13: 0000000000000000 R14: 00007fbbda3b5fa0 R15: 00007ffea893efa8 [ 1820.044749][T25344] [ 1820.044831][ T30] audit: type=1400 audit(2000000321.590:2520): avc: denied { getopt } for pid=25343 comm="syz.1.4801" lport=2 ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1820.408424][ T30] audit: type=1400 audit(2000000321.640:2521): avc: denied { ioctl } for pid=25345 comm="syz.2.4802" path="socket:[93257]" dev="sockfs" ino=93257 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1820.529193][ T30] audit: type=1326 audit(2000000322.090:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.4803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbda18e969 code=0x0 [ 1821.563071][T25342] [ 1821.565437][T25342] ====================================================== [ 1821.572448][T25342] WARNING: possible circular locking dependency detected [ 1821.579449][T25342] 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 Not tainted [ 1821.586207][T25342] ------------------------------------------------------ [ 1821.593203][T25342] syz.6.4800/25342 is trying to acquire lock: [ 1821.599252][T25342] ffffffff8e730c88 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 1821.608810][T25342] [ 1821.608810][T25342] but task is already holding lock: [ 1821.616151][T25342] ffff888026761e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1821.627272][T25342] [ 1821.627272][T25342] which lock already depends on the new lock. [ 1821.627272][T25342] [ 1821.637662][T25342] [ 1821.637662][T25342] the existing dependency chain (in reverse order) is: [ 1821.646654][T25342] [ 1821.646654][T25342] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1821.655240][T25342] blk_alloc_queue+0x619/0x760 [ 1821.660517][T25342] blk_mq_alloc_queue+0x175/0x290 [ 1821.666049][T25342] __blk_mq_alloc_disk+0x29/0x120 [ 1821.671575][T25342] nbd_dev_add+0x4a0/0xbc0 [ 1821.676493][T25342] nbd_init+0x181/0x320 [ 1821.681153][T25342] do_one_initcall+0x120/0x6e0 [ 1821.686419][T25342] kernel_init_freeable+0x5c2/0x900 [ 1821.692123][T25342] kernel_init+0x1c/0x2b0 [ 1821.696968][T25342] ret_from_fork+0x5d4/0x6f0 [ 1821.702069][T25342] ret_from_fork_asm+0x1a/0x30 [ 1821.707338][T25342] [ 1821.707338][T25342] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1821.714535][T25342] fs_reclaim_acquire+0x102/0x150 [ 1821.720065][T25342] prepare_alloc_pages+0x162/0x610 [ 1821.725700][T25342] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1821.732104][T25342] __alloc_pages_noprof+0xb/0x1b0 [ 1821.737655][T25342] pcpu_populate_chunk+0x110/0xb00 [ 1821.743273][T25342] pcpu_alloc_noprof+0x86a/0x1470 [ 1821.748821][T25342] xt_percpu_counter_alloc+0x13e/0x1b0 [ 1821.754790][T25342] find_check_entry.constprop.0+0xbc/0x9b0 [ 1821.761108][T25342] translate_table+0xc98/0x1720 [ 1821.766475][T25342] ipt_register_table+0x102/0x430 [ 1821.772018][T25342] iptable_nat_table_init+0x4b/0x250 [ 1821.777828][T25342] xt_find_table_lock+0x2e1/0x520 [ 1821.783374][T25342] xt_request_find_table_lock+0x28/0xf0 [ 1821.789434][T25342] get_info+0x19c/0x7c0 [ 1821.794106][T25342] do_ipt_get_ctl+0x169/0xaa0 [ 1821.799293][T25342] nf_getsockopt+0x79/0xe0 [ 1821.804219][T25342] ip_getsockopt+0x18c/0x1e0 [ 1821.809318][T25342] tcp_getsockopt+0x9e/0x100 [ 1821.814416][T25342] do_sock_getsockopt+0x3fc/0x800 [ 1821.819953][T25342] __sys_getsockopt+0x12f/0x260 [ 1821.825313][T25342] __x64_sys_getsockopt+0xbd/0x160 [ 1821.830932][T25342] do_syscall_64+0xcd/0x4c0 [ 1821.835937][T25342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.842334][T25342] [ 1821.842334][T25342] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1821.850050][T25342] __lock_acquire+0x126f/0x1c90 [ 1821.855412][T25342] lock_acquire+0x179/0x350 [ 1821.860432][T25342] __mutex_lock+0x199/0xb90 [ 1821.865435][T25342] pcpu_alloc_noprof+0xb4c/0x1470 [ 1821.870966][T25342] sbitmap_init_node+0x2fd/0x770 [ 1821.876408][T25342] sbitmap_queue_init_node+0x41/0x560 [ 1821.882288][T25342] blk_mq_init_tags+0x12d/0x2b0 [ 1821.887660][T25342] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1821.893705][T25342] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 1821.899926][T25342] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1821.906148][T25342] nbd_start_device+0x172/0xcd0 [ 1821.911515][T25342] nbd_genl_connect+0x120e/0x1c20 [ 1821.917047][T25342] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1821.923104][T25342] genl_rcv_msg+0x55c/0x800 [ 1821.928114][T25342] netlink_rcv_skb+0x158/0x420 [ 1821.933382][T25342] genl_rcv+0x28/0x40 [ 1821.937869][T25342] netlink_unicast+0x53a/0x7f0 [ 1821.943133][T25342] netlink_sendmsg+0x8d1/0xdd0 [ 1821.948400][T25342] ____sys_sendmsg+0xa95/0xc70 [ 1821.953667][T25342] ___sys_sendmsg+0x134/0x1d0 [ 1821.958851][T25342] __sys_sendmsg+0x16d/0x220 [ 1821.963976][T25342] do_syscall_64+0xcd/0x4c0 [ 1821.968990][T25342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.975387][T25342] [ 1821.975387][T25342] other info that might help us debug this: [ 1821.975387][T25342] [ 1821.985602][T25342] Chain exists of: [ 1821.985602][T25342] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 1821.985602][T25342] [ 1821.999243][T25342] Possible unsafe locking scenario: [ 1821.999243][T25342] [ 1822.006679][T25342] CPU0 CPU1 [ 1822.012029][T25342] ---- ---- [ 1822.017374][T25342] lock(&q->q_usage_counter(io)#49); [ 1822.022734][T25342] lock(fs_reclaim); [ 1822.029217][T25342] lock(&q->q_usage_counter(io)#49); [ 1822.037098][T25342] lock(pcpu_alloc_mutex); [ 1822.041585][T25342] [ 1822.041585][T25342] *** DEADLOCK *** [ 1822.041585][T25342] [ 1822.049721][T25342] 7 locks held by syz.6.4800/25342: [ 1822.054894][T25342] #0: ffffffff903ec510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1822.063074][T25342] #1: ffffffff903ec5c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1822.072026][T25342] #2: ffff88802674fa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xa1a/0x1c20 [ 1822.082013][T25342] #3: ffff88802674f988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x32/0xcb0 [ 1822.093314][T25342] #4: ffff88802674f8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x45/0xcb0 [ 1822.104179][T25342] #5: ffff888026761e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1822.115747][T25342] #6: ffff888026761e38 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1822.127389][T25342] [ 1822.127389][T25342] stack backtrace: [ 1822.133260][T25342] CPU: 0 UID: 0 PID: 25342 Comm: syz.6.4800 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1822.133278][T25342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1822.133287][T25342] Call Trace: [ 1822.133293][T25342] [ 1822.133298][T25342] dump_stack_lvl+0x116/0x1f0 [ 1822.133323][T25342] print_circular_bug+0x275/0x350 [ 1822.133345][T25342] check_noncircular+0x14c/0x170 [ 1822.133367][T25342] __lock_acquire+0x126f/0x1c90 [ 1822.133391][T25342] lock_acquire+0x179/0x350 [ 1822.133411][T25342] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1822.133430][T25342] ? __pfx___might_resched+0x10/0x10 [ 1822.133448][T25342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1822.133471][T25342] __mutex_lock+0x199/0xb90 [ 1822.133483][T25342] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1822.133500][T25342] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1822.133517][T25342] ? __pfx___mutex_lock+0x10/0x10 [ 1822.133529][T25342] ? kasan_save_track+0x14/0x30 [ 1822.133547][T25342] ? __kasan_kmalloc+0xaa/0xb0 [ 1822.133564][T25342] ? blk_mq_init_tags+0x87/0x2b0 [ 1822.133579][T25342] ? blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1822.133594][T25342] ? nbd_start_device+0x172/0xcd0 [ 1822.133611][T25342] ? netlink_unicast+0x53a/0x7f0 [ 1822.133626][T25342] ? netlink_sendmsg+0x8d1/0xdd0 [ 1822.133640][T25342] ? ____sys_sendmsg+0xa95/0xc70 [ 1822.133656][T25342] ? ___sys_sendmsg+0x134/0x1d0 [ 1822.133675][T25342] ? __sys_sendmsg+0x16d/0x220 [ 1822.133695][T25342] ? do_syscall_64+0xcd/0x4c0 [ 1822.133707][T25342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.133725][T25342] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1822.133741][T25342] pcpu_alloc_noprof+0xb4c/0x1470 [ 1822.133762][T25342] sbitmap_init_node+0x2fd/0x770 [ 1822.133782][T25342] sbitmap_queue_init_node+0x41/0x560 [ 1822.133802][T25342] blk_mq_init_tags+0x12d/0x2b0 [ 1822.133818][T25342] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1822.133833][T25342] ? lockdep_hardirqs_on+0x7c/0x110 [ 1822.133857][T25342] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 1822.133876][T25342] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1822.133892][T25342] ? nbd_add_socket+0x6d0/0xbe0 [ 1822.133906][T25342] nbd_start_device+0x172/0xcd0 [ 1822.133921][T25342] ? __nla_parse+0x40/0x60 [ 1822.133940][T25342] nbd_genl_connect+0x120e/0x1c20 [ 1822.133957][T25342] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1822.133974][T25342] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1822.133995][T25342] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1822.134017][T25342] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1822.134037][T25342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1822.134055][T25342] ? genl_get_cmd+0x194/0x580 [ 1822.134074][T25342] ? do_syscall_64+0xcd/0x4c0 [ 1822.134085][T25342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.134099][T25342] ? __radix_tree_lookup+0x21f/0x2c0 [ 1822.134121][T25342] genl_rcv_msg+0x55c/0x800 [ 1822.134140][T25342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1822.134158][T25342] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1822.134174][T25342] ? __lock_acquire+0x622/0x1c90 [ 1822.134195][T25342] netlink_rcv_skb+0x158/0x420 [ 1822.134210][T25342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1822.134228][T25342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1822.134247][T25342] ? netlink_deliver_tap+0x1ae/0xd30 [ 1822.134263][T25342] ? is_vmalloc_addr+0x86/0xa0 [ 1822.134283][T25342] genl_rcv+0x28/0x40 [ 1822.134298][T25342] netlink_unicast+0x53a/0x7f0 [ 1822.134315][T25342] ? __pfx_netlink_unicast+0x10/0x10 [ 1822.134332][T25342] netlink_sendmsg+0x8d1/0xdd0 [ 1822.134350][T25342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.134368][T25342] ____sys_sendmsg+0xa95/0xc70 [ 1822.134384][T25342] ? copy_msghdr_from_user+0x10a/0x160 [ 1822.134406][T25342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.134424][T25342] ? __pfx_futex_wake_mark+0x10/0x10 [ 1822.134439][T25342] ___sys_sendmsg+0x134/0x1d0 [ 1822.134460][T25342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.134479][T25342] ? __lock_acquire+0x622/0x1c90 [ 1822.134510][T25342] __sys_sendmsg+0x16d/0x220 [ 1822.134532][T25342] ? __pfx___sys_sendmsg+0x10/0x10 [ 1822.134552][T25342] ? __x64_sys_futex+0x1e0/0x4c0 [ 1822.134578][T25342] do_syscall_64+0xcd/0x4c0 [ 1822.134591][T25342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.134604][T25342] RIP: 0033:0x7f025bf8e969 [ 1822.134616][T25342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.134630][T25342] RSP: 002b:00007f025cd5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1822.134644][T25342] RAX: ffffffffffffffda RBX: 00007f025c1b5fa0 RCX: 00007f025bf8e969 [ 1822.134653][T25342] RDX: 0000000000044004 RSI: 0000200000000380 RDI: 0000000000000004 [ 1822.134663][T25342] RBP: 00007f025c010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1822.134672][T25342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1822.134680][T25342] R13: 0000000000000000 R14: 00007f025c1b5fa0 R15: 00007ffe65b3ada8 [ 1822.134693][T25342] [ 1822.780216][T11428] block nbd0: Receive control failed (result -32) [ 1822.786717][T11428] block nbd0: Receive control failed (result -32) [ 1822.790274][ T5832] block nbd0: Receive control failed (result -32) [ 1822.793265][T11428] block nbd0: Receive control failed (result -32) [ 1822.793296][T11428] block nbd0: Receive control failed (result -32) [ 1822.800595][ T5832] block nbd0: Receive control failed (result -32) [ 1822.842071][T25342] nbd0: detected capacity change from 0 to 549755813888 [ 1822.864639][T21676] block nbd0: Dead connection, failed to find a fallback [ 1822.892505][T21676] block nbd0: shutting down sockets [ 1822.897735][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.907313][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1822.915188][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.924240][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1822.932412][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.943057][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1822.950968][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.960147][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1822.968335][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.977421][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1822.985290][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1822.994531][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1823.002441][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1823.011564][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1823.019347][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1823.028535][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1823.036595][T21676] ldm_validate_partition_table(): Disk read failed. [ 1823.043459][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1823.053271][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1823.061075][T21676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1823.070141][T21676] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1823.078044][T21676] Dev nbd0: unable to read RDB block 0 [ 1823.083801][T21676] nbd0: unable to read partition table [ 1823.093332][T21676] ldm_validate_partition_table(): Disk read failed. [ 1823.100271][T21676] Dev nbd0: unable to read RDB block 0 [ 1823.107175][T21676] nbd0: unable to read partition table [ 1825.431363][T25310] usblp0:failed reading printer status (-110) [ 1825.449794][T18188] usb 6-1: USB disconnect, device number 6 [ 1825.456304][T18188] usblp0: removed