last executing test programs: 13.413504397s ago: executing program 1 (id=1009): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket(0x840000000002, 0x3, 0xff) setresgid(0x0, 0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x5, &(0x7f0000000040)=[0xee01, 0x0, 0x0, 0xee01, 0xffffffffffffffff]) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000180)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x14) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000002480)=[r2, r3, r4, r5, r8, r10, r11, 0xee01]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex_waitv(&(0x7f00000036c0)=[{0x0, &(0x7f00000024c0)=0x401, 0x2}, {0xfe7, &(0x7f0000002500)=0x1, 0x2}, {0x0, &(0x7f0000002540)=0x2, 0x82}, {0x4, &(0x7f0000002580)=0x2, 0x2}, {0x5, &(0x7f00000025c0)=0x6000000000000, 0x2}, {0x6, &(0x7f0000002600)=0x800, 0x82}, {0x8, &(0x7f0000002640)=0xffffffffffffffff, 0x2}, {0x200, &(0x7f0000002680)=0x3, 0x82}, {0x5, &(0x7f00000026c0)=0x1ff, 0x82}, {0x8, &(0x7f0000002700)=0x100000000, 0x2}, {0x8000000000000000, &(0x7f0000002740)=0xde, 0x82}, {0x8000, &(0x7f0000002780)=0x800, 0x82}, {0x1, &(0x7f00000027c0)=0x6, 0x2}, {0xfffffffffffffff8, &(0x7f0000002800)=0x173, 0x2}, {0x19, &(0x7f0000002840)=0x7, 0x2}, {0x1, &(0x7f0000002880)=0xe352, 0x2}, {0xa, &(0x7f00000028c0), 0x82}, {0x5, &(0x7f0000002900)=0x6, 0x82}, {0x2, &(0x7f0000002940)=0xff, 0x81}, {0x8, &(0x7f0000002980)=0x1, 0x2}, {0x0, &(0x7f00000029c0)=0xffffffffffffffff, 0x2}, {0x3, &(0x7f0000002a00)=0xc, 0x2}, {0x6, &(0x7f0000002a40)=0xfffffffffffffffa, 0x2}, {0x2, &(0x7f0000002a80)=0x100, 0x2}, {0x2, &(0x7f0000002ac0), 0x2}, {0x6, &(0x7f0000002b00)=0x8, 0x2}, {0x9, &(0x7f0000002b40)=0xfffffffffffff000, 0x2}, {0x1f, &(0x7f0000002b80)=0x6, 0x2}, {0x4, &(0x7f0000002bc0)=0x7ff, 0x82}, {0x4380000, &(0x7f0000002c00)=0x6, 0x2}, {0x10001, &(0x7f0000002c40)=0xffffffffffff0001, 0x82}, {0xf, &(0x7f0000002c80)=0xe, 0x2}, {0x4d, &(0x7f0000002cc0)=0x5, 0x2}, {0x2, &(0x7f0000002d00)=0x6, 0x82}, {0xffffffff, &(0x7f0000002d40)=0x7, 0x2}, {0x7, &(0x7f0000002d80)=0x8001}, {0x600000000, &(0x7f0000002dc0)=0x2, 0x2}, {0x5, &(0x7f0000002e00)=0x3, 0x2}, {0x3, &(0x7f0000002e40)=0x9, 0x2}, {0x3, &(0x7f0000002e80)=0x282f, 0x2}, {0x7, &(0x7f0000002ec0)=0x5, 0x82}, {0x17b, &(0x7f0000002f00)=0x42, 0x82}, {0x4, &(0x7f0000002f40)=0x9, 0x82}, {0x62, &(0x7f0000002f80)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000002fc0)=0x1}, {0xa3e, &(0x7f0000003000)=0x5, 0x82}, {0xa93, &(0x7f0000003040)=0x10, 0x82}, {0x2, &(0x7f0000003080)=0x4, 0x82}, {0x7fffffffffffffff, &(0x7f00000030c0)=0x2, 0x2}, {0x7, &(0x7f0000003100)=0xdd6, 0x2}, {0x2a, &(0x7f0000003140)=0x2fa4000000000, 0x2}, {0x6, &(0x7f0000003180)=0x5c3, 0x82}, {0x3ff, &(0x7f00000031c0)=0x43c, 0x82}, {0x8, &(0x7f0000003200)=0xfffffffffffffffa, 0x82}, {0x8, &(0x7f0000003240), 0x82}, {0x8000000000000001, &(0x7f0000003280)=0xc, 0x82}, {0xff, &(0x7f00000032c0)=0xff, 0x2}, {0x10, &(0x7f0000003300)=0xf2, 0x82}, {0x9, &(0x7f0000003340)=0x1, 0x2}, {0x6, &(0x7f0000003380)=0x9, 0x82}, {0x8, &(0x7f00000033c0)=0x9, 0x2}, {0x200, &(0x7f0000003400)=0x1, 0x6068aef710eaa91e}, {0x7, &(0x7f0000003440)=0x8}, {0x1, &(0x7f0000003480)=0xf5b, 0x82}, {0xfffffffffffffffc, &(0x7f00000034c0), 0x82}, {0x2, &(0x7f0000003500)=0xfffffffffffffff8, 0x82}, {0x4, &(0x7f0000003540)=0x5, 0x2}, {0x9, &(0x7f0000003580)=0x8, 0x82}, {0x6, &(0x7f00000035c0)=0x4, 0x2}, {0x6, &(0x7f0000003600)=0xe, 0x82}, {0x0, &(0x7f0000003640)=0x1, 0x83}, {0x844, 0xfffffffffffffffd, 0x82}, {0x83, &(0x7f0000003680)=0x2, 0x82}], 0x49, 0x0, &(0x7f0000003dc0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x4) 9.037703482s ago: executing program 1 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3ff, @mcast1, 0xfffffff7}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="93a3e03ad0b425d6bf27ba15d65d199c685a462097d18ea3ac0aa314efaca88680f08e1440f8dd0ee165b6ea34b04daf4124ed9ac4518685b0c5f179681c26b834e94dc3b7ee575f", 0x48}, {&(0x7f0000000040)="52f699617167193837d9c491d377309e6daf63cb6d28dc2da6eb7d3a5d087dcf8b95b67b8736", 0x26}], 0x2, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x101, 0x204, 0x5, 0x8, 0x2, 0x200, 0x9, r6}}], 0x48, 0x80}, 0x20008000) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0x8007fff, 0x0) 8.283360676s ago: executing program 4 (id=1022): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240002) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x8, @void}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x26f}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 7.463884359s ago: executing program 1 (id=1025): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$snapshot(r0, 0x0, 0xffffffbf) read$FUSE(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x26, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000003640)=[{&(0x7f00000001c0)=""/42, 0x2a}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mincore(&(0x7f000064d000/0x3000)=nil, 0x3000, &(0x7f0000002280)=""/11) 7.268661465s ago: executing program 0 (id=1026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x6214, r0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a6e65742c706f72742c6e657400000005000400000000000000030068617326b8fe24742c706f72742c6e657400000005000500020000000500010006000000"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) memfd_create(0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 6.581293328s ago: executing program 0 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000de18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) 6.372747887s ago: executing program 3 (id=1028): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000380), 0x40000e0, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.185205564s ago: executing program 2 (id=1029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket(0x15, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000800)=""/33, 0x21}, {&(0x7f0000000480)=""/50, 0x32}], 0x5}, 0x10}], 0x2, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000080), 0x2000011a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 6.127825789s ago: executing program 3 (id=1030): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r2, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000b00010000008066e5caff962b6ccb078c7ce8a696864ef5a01a043f4cb07effcf", @ANYRES32=0x0, @ANYBLOB="040000000000000010000600000000002000000000000000"], 0x2c, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r5, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 5.621501453s ago: executing program 3 (id=1031): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0xe9, 0x8, 0x0, 0x401, 0xf, 0x9, 0xc, 0x9, 0x8, 0xc, 0x3, 0x0, 0xb28a, 0x200, 0xf9, 0xf, 0x40, 0x67, '\x00', 0xb, 0x7}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000070000040"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000006ba200000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3200000d0087006c325f64b02ea327dc8b4f320500830000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x90, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffff2}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x24088801) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x857305fc5432a946}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 5.447243962s ago: executing program 1 (id=1032): socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x60, 0x9f, [{{0x9, 0x4, 0x0, 0x65, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x0, 0xb2, 0x1, {0x22, 0x907}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x80}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x80, 0xa3, 0x8, 0x8, 0xb}, 0x7d, &(0x7f0000000780)={0x5, 0xf, 0x7d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x0, 0x5}, @generic={0x49, 0x10, 0xd, "d3500faed7f3fbff3c63da126f9ad361679c0cbce87f3a0f6496c4fbd6b03d3b23bd0efad7a790468635bda76e275397ea8837401cb0330717847a228ca53e31ff8932f0e09c"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x1, 0xf00, 0x7, [0xc000, 0xff000f, 0xff3f00, 0x30, 0xff000f]}, @generic={0x5, 0x10, 0x2, "4a81"}]}}) 5.319998885s ago: executing program 0 (id=1033): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x1, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 5.238586236s ago: executing program 3 (id=1034): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24040080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xfbff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x5) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603e00000000000500000014000500200100000000000000000100000000001c00090008000000dfd4fa9403c3cf2e4a6dedd51c31d42518508f2f8186e81a5e9f8413659aa0189f86ebf469707b0ba908dbca7163b91a0136d31f856d49f21c40a7f01443e42fbacccc7573380e42d3a81a5591b0", @ANYRES32=r5, @ANYRES8=r3], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.77828307s ago: executing program 0 (id=1035): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24040080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xfbff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x5) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603e00000000000500000014000500200100000000000000000100000000001c00090008000000dfd4fa9403c3cf2e4a6dedd51c31d42518508f2f8186e81a5e9f8413659aa0189f86ebf469707b0ba908dbca7163b91a0136d31f856d49f21c40a7f01443e42fbacccc7573380e42d3a81a5591b0", @ANYRES32=r5, @ANYRES8=r3], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.718947765s ago: executing program 4 (id=1036): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x22, &(0x7f00000003c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x8, r4, 0x0}]) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.532764351s ago: executing program 3 (id=1037): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x32f0, @private2, 0x6, 0x2}, 0x20) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0xa08) socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000}) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904eb00007916fd000905010800040704970904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfada, 0x800, 0x0, 0x116}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2f1}, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_usb_control_io$printer(r4, 0x0, 0x0) 3.984324586s ago: executing program 4 (id=1038): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00'}, 0xfffffc53) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x0) pipe2$9p(0x0, 0x80000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400200bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) epoll_create1(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) sendfile(r2, r3, 0x0, 0x23894) 3.966892544s ago: executing program 0 (id=1039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x7a2, 0x0, 0x4, r3, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socket(0x15, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000800)=""/33, 0x21}, {&(0x7f0000000480)=""/50, 0x32}], 0x5}, 0x10}], 0x2, 0x10002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000080), 0x2000011a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.854956422s ago: executing program 4 (id=1040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x35ba, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendto$inet6(r0, &(0x7f0000000140)="437b1f0f0b931bbda0d9c675b101b60421fe21ed5b637a750c7726bb8aa816eb755becf59874e3dd1274dfe7a5bd051140a207efd4d8a2286321676a1a585daff04eba45216d351dded6ddf2781e8fb32af4ae0ddd0f82290d9f8c64f3f9930901ab9b6abdcaae8a05ebe518e2ca0665fb5db4aecab347ed8d82cd7034bb4e3bf189dcc988b33162cb007f03eab63119320dcf5d7d357001c1419d8861f77fab968b090edce5032b767d876f53b7ba465078f77c0e2a127ca47e2c3f26807ea75454c335556e", 0xc6, 0x14, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000280)=0x5, 0x0, 0x4) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0x4}, 0x1c) 3.020848262s ago: executing program 2 (id=1041): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0684113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) fcntl$setpipe(r1, 0x407, 0x6) 2.880157681s ago: executing program 2 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$msr(r3, 0x0, 0x0) 2.672055362s ago: executing program 4 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, &(0x7f0000001000)=""/108, 0x6c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x14, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) r8 = dup(0xffffffffffffffff) write$vhost_msg_v2(r8, &(0x7f0000000500)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4030, r2}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r10, 0x0, 0xfffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x23, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x11e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x327d}}, @jmp={0x5, 0x1, 0x0, 0x7, 0x1, 0x2}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a80)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xf, 0x4, 0xe0000}, 0x10, r5, r6, 0x8, &(0x7f0000000400)=[r7, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x1, 0x7, 0x3}, {0x3, 0x4, 0xf, 0x5}, {0x3, 0x3, 0x1, 0xa}, {0x4, 0x1, 0x3, 0x4}, {0x2, 0x2, 0x9, 0xb}, {0x4, 0x3, 0x8, 0x2}, {0x5, 0x1, 0x10, 0x1}, {0x0, 0x2}], 0x10, 0x6, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r4}) 2.542172422s ago: executing program 2 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000de18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) 2.178935897s ago: executing program 2 (id=1045): bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = eventfd(0x5) fcntl$setlease(r0, 0x400, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000240)={&(0x7f0000000540)=[0xffff8001, 0x8, 0x5, 0x60c, 0x29d, 0x8, 0x5, 0x1, 0x0, 0x9, 0xfffff650, 0x101, 0xfa3e, 0x7, 0x81, 0x1, 0xffffffff, 0xff, 0x5c3, 0xc, 0x6, 0x0, 0xffff, 0xd, 0x5, 0x1, 0x101, 0x2, 0x2, 0x10000, 0x8000, 0x0, 0x6, 0x7, 0x2e6, 0x7, 0x0, 0x5, 0x10000, 0x5, 0xa, 0x6, 0xc6, 0x9, 0x5, 0x6, 0x5, 0x4, 0x5e, 0x81, 0xffff, 0x1ba36483, 0x3, 0x7, 0xfffffffa, 0x101, 0x0, 0x8000, 0x7, 0xdf6b, 0x9, 0x81, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x1ff, 0x1, 0x5, 0x7, 0x8, 0x8, 0xfb5, 0x4, 0x0, 0x9, 0x9a, 0x9, 0xffffffff, 0x401, 0xc485, 0x0, 0x0, 0x9, 0xfffffffc, 0x1ff, 0xdd, 0x6, 0xd, 0x8000, 0x200, 0x813, 0x2, 0xfffff45f, 0x7fffffff, 0x4, 0x6a732dd2, 0x8, 0xbb6, 0x9, 0xfffffff8, 0xf7cb, 0xc4, 0x8, 0x6, 0x5, 0x7, 0x18, 0x2, 0x3, 0x3, 0x5, 0x8, 0x0, 0x1000, 0x8000, 0xffff, 0x10, 0x9, 0x8, 0x6, 0x6, 0x0, 0x9af, 0x9f1, 0x60, 0x5, 0x79a, 0x1, 0x0, 0x4000000, 0x6, 0x4, 0x3, 0x9, 0x81, 0x10001, 0x7, 0x200, 0x9, 0x0, 0x99, 0xffffff14, 0x2, 0x23a, 0xfffffffd, 0x93, 0xfff, 0x10001, 0x5, 0xe15, 0x3, 0x9, 0x7ff, 0x7715, 0x8000, 0x7, 0x1, 0x5, 0x1ff, 0x40, 0x0, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x8, 0x0, 0x8, 0x1, 0x7, 0x0, 0x4, 0x0, 0x10000, 0x8, 0x8000, 0x1, 0x4, 0xd4cd, 0x4, 0xffffffc0, 0x10001, 0x5000, 0x10001, 0x0, 0x8, 0x8, 0x71, 0x910, 0xfffffffb, 0x0, 0x7ff, 0x1, 0xed, 0x8, 0xa, 0xe6f, 0x8, 0x8, 0xfffffffc, 0x0, 0x40, 0x1116a68d, 0x9, 0x811, 0x2ed73ff, 0x4, 0x0, 0x8001, 0x0, 0x992, 0xf, 0x5, 0x9, 0x7, 0x518, 0x0, 0x1, 0xfffffff7, 0x5, 0x4, 0x3, 0x1, 0xd, 0x8, 0x10001, 0x4, 0x7f, 0x9, 0x8, 0x4, 0x58, 0x800, 0x400800, 0x7fffffff, 0x6, 0x28bbf450, 0x2, 0x4, 0x1b67, 0x601, 0x777, 0x6, 0x401, 0x9, 0x9, 0x100, 0xfffffffb, 0x9, 0x2, 0x800, 0x3, 0xfffffffa, 0x4, 0x0, 0x6, 0x4, 0x1, 0x3, 0x400, 0x9, 0x0, 0x5, 0x2, 0x5, 0xcc, 0xb, 0x6, 0x92b, 0x9, 0x5, 0x4, 0x3, 0x7, 0x8, 0xffffffff, 0x1, 0x10000, 0x7fff, 0x20000b, 0x42200, 0x6, 0x1, 0xfff, 0x7, 0x10, 0x5, 0x5, 0x5, 0x5, 0x6, 0xb, 0xffff, 0x5c0, 0x7, 0x2, 0x4, 0x6, 0x101, 0x5, 0x101, 0x7aa, 0x1, 0x2, 0x1, 0x4, 0x1ee3, 0x80000001, 0x9, 0xb1c8, 0x3, 0x7fffffff, 0x9, 0x9, 0x3, 0x8, 0x6, 0x7, 0x3, 0x7fffffff, 0x9, 0xb4, 0x4, 0x2, 0x7, 0x10001, 0x1, 0x2, 0xfffffffa, 0x1, 0x160d6, 0x3, 0x2383, 0x2, 0x1, 0x5, 0x54fb6b32, 0x4, 0x5, 0x7f, 0x4, 0x9, 0xeb6, 0x200, 0x6, 0x2, 0x2, 0xa19, 0x9, 0xfffff9fd, 0x5, 0x8001, 0x10001, 0xbb, 0x8, 0x4, 0x1, 0x7fffffff, 0x64b, 0x52, 0x6, 0xbab, 0x5, 0x8001, 0x40, 0x4, 0x0, 0x9, 0x401, 0x0, 0x4, 0x7, 0x6762, 0x0, 0x8, 0x7, 0x800, 0x2, 0x0, 0x7fff, 0xe, 0x6, 0x5, 0x7fff, 0x5, 0x8, 0x6, 0x5, 0x200, 0x8, 0x3de, 0x2, 0x2, 0x4, 0x0, 0xffff7fff, 0x3, 0x8, 0xdfb, 0x7, 0x6c63, 0x0, 0x1, 0xfff, 0x0, 0x3, 0x5, 0x7, 0x158f3952, 0x7, 0x0, 0x2, 0x93c, 0xfffffff8, 0x80000001, 0x2, 0x3ff, 0x0, 0x40, 0x4cc, 0x81, 0x7, 0x9, 0x2, 0xf, 0x4, 0xa, 0x2, 0x80000001, 0xa457, 0x0, 0xffffffff, 0x800, 0x9, 0x2, 0x1, 0x2, 0x8000, 0x6, 0xfffffff7, 0x6f8e, 0x1, 0x5, 0x0, 0x10, 0x5, 0x2, 0x6, 0x0, 0xcb9, 0x4c8725b2, 0x1ff, 0x4, 0xd08, 0x1, 0xffffffee, 0x5, 0x7, 0x5, 0x80, 0x10, 0x425, 0xffffffa5, 0x101, 0x6, 0x4, 0x9, 0x2, 0x9, 0x4, 0x60000, 0x4, 0x7, 0x8, 0x8, 0x4, 0xffa6, 0x6c, 0x10, 0x9, 0x9f76, 0xf, 0x0, 0x6, 0x3, 0xef, 0xb9, 0x7fff, 0x764a4011, 0x19b4, 0x7, 0x0, 0x9, 0xfffffff8, 0x7ff, 0x87da, 0x1, 0x2, 0x401, 0x7fffffff, 0x4, 0x5, 0x2, 0x5, 0x4, 0x5, 0x5, 0x0, 0x8, 0xe, 0x4, 0x9, 0x3e8, 0x10001, 0x401, 0x1d95, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x4, 0x6, 0x8655, 0x1, 0x80000000, 0x3, 0x60, 0x56, 0xfffffffa, 0x401, 0x80, 0xffffffff, 0x7a85, 0xcd, 0x2, 0x28, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x2, 0x7f, 0xc4, 0x17, 0x1ff, 0x8, 0x80, 0x7fff, 0x7, 0x6, 0x9, 0x4, 0x0, 0x200020, 0x1, 0x5, 0x6, 0x3dd, 0x7f, 0x599, 0x4e, 0x81, 0x4, 0x344a, 0x6, 0x2, 0xc, 0x292, 0x1, 0x3, 0x682, 0x4, 0x9, 0xfff, 0x5a4f, 0x40, 0x80000000, 0x287, 0x0, 0x2, 0x150, 0xfffffffc, 0x2, 0x101, 0x1, 0x3, 0x3, 0x1ff, 0x1000, 0x3ff, 0x2, 0x1ff, 0x93, 0x1, 0x7, 0x4, 0x7, 0x1, 0x0, 0xffffffff, 0x8, 0x9, 0x3, 0x492, 0x5a4, 0x5ff0, 0x1000, 0xfffffffd, 0x7f, 0x2, 0x7, 0x400, 0xd, 0x0, 0x1, 0x7, 0x0, 0x1, 0x10000, 0x5, 0x8, 0x3, 0xd, 0xc09, 0x8, 0x4, 0x200, 0x0, 0xb04, 0xb, 0x9, 0x7b, 0xcf5, 0x7, 0x2, 0x602, 0x9, 0x3, 0xa, 0x9, 0x3, 0x2, 0x10000, 0x8c, 0x80000000, 0x9, 0x4, 0x1, 0x401, 0x7, 0x3, 0x2, 0x0, 0xffff, 0xed, 0x1fd0e722, 0x3, 0x3, 0x3, 0x4, 0x1, 0x7, 0x4, 0x495, 0x8, 0xffff, 0x10, 0x5, 0x1, 0x9, 0x5, 0x2, 0x1, 0x1ff, 0x8, 0x86, 0x15de, 0x8, 0x1, 0x1, 0x9, 0xffff7fff, 0x2, 0x880, 0x1e3179d9, 0x38, 0xfffffffe, 0x0, 0x9, 0x8, 0x6, 0x23d, 0x9, 0x400, 0x4, 0x8, 0x8, 0x163, 0xa, 0x0, 0xc60000, 0x18, 0xffffffff, 0x6, 0x0, 0x0, 0x49, 0x0, 0x2, 0x7, 0x3, 0x0, 0x79b2, 0x6, 0x3, 0x64f77cfe, 0x7, 0x1ff, 0x0, 0x8, 0x672e, 0x2, 0x10, 0x3, 0xffff6071, 0x0, 0x2, 0x7552, 0x4, 0x56e2, 0x9, 0x5, 0x4, 0xca, 0x0, 0xb, 0xff, 0x2, 0x9ce, 0x7, 0xfffffffd, 0x2, 0x6, 0x0, 0x2, 0x289d, 0x1, 0x4, 0xffff, 0x4, 0x1, 0x7fff, 0x9, 0x200, 0x0, 0x4, 0x8, 0x2, 0xb7c0, 0xdcd, 0x1, 0x9, 0x1, 0x4, 0xb0, 0x1, 0x6, 0x1, 0x1000, 0xdbd5, 0x9, 0x8, 0xffffffff, 0x400, 0x9, 0x6d5, 0x7, 0x48, 0x1, 0x4, 0x9ee, 0x9, 0x7f, 0x5, 0x5, 0x9, 0x4, 0x2, 0x2, 0x284, 0x9, 0x4, 0x1, 0xfffffff8, 0x5, 0x7, 0x6, 0x7, 0x8000, 0x1, 0x6, 0x7ff, 0x5, 0xfffffff9, 0xffffffd6, 0xffffffff, 0x6, 0x9, 0x400080, 0x9, 0x0, 0xfffffff9, 0x1000, 0x8, 0x0, 0x95, 0xfffffffe, 0x48, 0x2, 0x0, 0x0, 0x5, 0x1, 0x4, 0xd, 0x0, 0x2, 0x28c, 0x8, 0xd, 0xe, 0x3, 0x1ff, 0x9, 0x3, 0x9, 0x1, 0xfff, 0x5, 0x5, 0x1, 0x1000, 0x5, 0x0, 0x8, 0x0, 0xff, 0xcfe4, 0x4c114f8c, 0x9, 0x3, 0x10, 0x5, 0x7fff, 0x100, 0x4, 0x401, 0x8, 0x0, 0x5fab, 0x1ff, 0x8, 0x401, 0x3, 0x7, 0x7, 0x5, 0x2, 0xffff, 0xfaa, 0x5, 0xfffffff9, 0x81, 0xe1b8, 0x4, 0x8d4, 0x8001, 0x40, 0xea, 0xffff, 0x7, 0xffff7df2, 0xffffffff, 0x6, 0x1, 0x7, 0x10001, 0x3, 0x6, 0xfffffe55, 0x3, 0x3800000, 0x4, 0x400, 0x9, 0x94, 0x7ff, 0x9aa, 0xff, 0x4, 0xffff8000, 0x9, 0x3, 0x0, 0x6, 0x400, 0x9, 0x5, 0x6, 0x9, 0xc, 0x1cf, 0x5, 0x2, 0x7, 0x8, 0x9, 0x0, 0xe91, 0x7, 0x3, 0x1, 0x0, 0x6, 0x4, 0x7, 0x10000, 0x7fffffff, 0x1000, 0x8e, 0x4, 0x0, 0x6, 0x5, 0x200, 0x9, 0xfffff79e, 0x4, 0x0, 0x1000, 0x1, 0xfff0, 0x4, 0x8, 0x6, 0x2, 0x8, 0x1, 0x6, 0xffff, 0xa, 0x7, 0x3, 0x7ffffffe, 0x2, 0xffff, 0xadae, 0x7, 0x7, 0xc6df, 0x4, 0x8, 0xde29, 0x2, 0x9, 0x9, 0xffffffd6, 0x6, 0x3, 0x5, 0x4, 0x2, 0x2, 0x0, 0x6c, 0x2, 0xe, 0x5, 0x18, 0x20000000, 0x4, 0x0, 0x8, 0x0, 0xff, 0x6fcc, 0x800, 0x3, 0x8, 0xb3, 0x40, 0x8, 0x3, 0x1ff, 0x4, 0x400, 0xf7, 0x0, 0x5, 0x308d52ba, 0x7, 0x5, 0x0, 0x3a, 0xfff7fff7, 0xfffffffb, 0x9, 0x9, 0x8, 0x804fae, 0x2, 0x3, 0x9, 0x3, 0xbb0, 0xfffffff8, 0x2, 0x5, 0x80], 0x1, 0x400, 0x1}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000200)=[0x0, 0x8, 0x400, 0x5, 0x0, 0x7fa, 0x6, 0x8]) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x71, 0x40000009, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) 1.478609885s ago: executing program 4 (id=1046): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240002) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x8, @void}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x26f}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 1.343074592s ago: executing program 1 (id=1047): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/49, 0x37, 0x31, 0x0, 0x8, 0x10000, @value=r1}, 0x28) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000c840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000400)={0x9, 0x1100, 0xe0000, 0x3, '\x00', '\x00', '\x00', 0x2, 0x2, 0x7, 0x7, "7c52b839a7ebc6bd7791a490e5b6e80b"}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0xffffffffffffffda, r3}, 0x10) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0x2) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x58a40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) ioctl$TIOCSTI(r4, 0x5423, &(0x7f0000000080)=0x7) map_shadow_stack(&(0x7f0000262000/0x800000)=nil, 0x800000, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xb, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20403, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000080)={0x0, 0x1, 0x86d, 0x4, 0x7ff, 0x3, "7e8fb0304e54f39d1998c61658fc5924", 0x0, 0x1, 0x5, 0x0, 0xd, 0x9, 0x1}) 1.173684949s ago: executing program 0 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x1b, 0x0, &(0x7f00000003c0)="2b793145cb3727cd01a53ec6c54afae6b7206d074843b397737ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xb, 0x5, 0x40) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x113, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="064ce7f6c9e247de2a005e9ca754db000000000000000000aaaaaaaaaa178100100008004512002c0007000008069078ac14141dac1414aa0000000000000000000000000000000400004e2100004e24"], 0x42) 1.146745064s ago: executing program 2 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x40000}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000080)={0x0, 0x198a, 0x13100, 0x5, 0x800002ec}, &(0x7f0000000100), &(0x7f0000000000)) 856.343063ms ago: executing program 3 (id=1050): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x100000) accept4$llc(r1, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045003, &(0x7f0000000300)) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000026c0), 0x0, 0xe5, 0x40000) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) fanotify_init(0x200, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x90}], 0x1, 0x2100, 0x0) 0s ago: executing program 1 (id=1051): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setreuid(0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee2, 0x12, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x67) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, 0x0) r3 = fsopen(&(0x7f0000000080)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) kernel console output (not intermixed with test programs): alue: 2 [ 274.724590][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 274.739782][ T46] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 274.753566][ T46] usb 2-1: Product: syz [ 274.758420][ T46] usb 2-1: Manufacturer: syz [ 274.766732][ T46] usb 2-1: SerialNumber: syz [ 275.164059][ T46] appletouch 2-1:1.0: Could not find int-in endpoint [ 275.180283][ T46] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 275.275571][ T46] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 275.348988][ T29] audit: type=1400 audit(1735546282.625:403): avc: denied { create } for pid=7968 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 275.400849][ T7971] netlink: 'syz.1.567': attribute type 33 has an invalid length. [ 275.421460][ T7992] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 275.429691][ T29] audit: type=1400 audit(1735546282.695:404): avc: denied { read write } for pid=7997 comm="syz.0.576" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 275.520278][ T29] audit: type=1400 audit(1735546282.695:405): avc: denied { open } for pid=7997 comm="syz.0.576" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 275.549833][ T29] audit: type=1400 audit(1735546282.745:406): avc: denied { read } for pid=7997 comm="syz.0.576" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.579795][ T29] audit: type=1400 audit(1735546282.745:407): avc: denied { open } for pid=7997 comm="syz.0.576" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.603050][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.618716][ T29] audit: type=1400 audit(1735546282.745:408): avc: denied { ioctl } for pid=7997 comm="syz.0.576" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.563070][ T968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 276.571516][ T5820] usb 2-1: USB disconnect, device number 14 [ 277.015382][ T8018] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 277.070175][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 277.834683][ T968] usb 4-1: config 9 has an invalid interface number: 230 but max is 0 [ 277.849301][ T968] usb 4-1: config 9 has no interface number 0 [ 277.858410][ T968] usb 4-1: config 9 interface 230 has no altsetting 0 [ 277.874728][ T968] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=85.16 [ 277.882484][ T8027] bpf: Bad value for 'uid' [ 277.928696][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.938354][ T968] usb 4-1: Product: syz [ 277.943063][ T968] usb 4-1: Manufacturer: syz [ 277.948312][ T968] usb 4-1: SerialNumber: syz [ 278.175817][ T968] usb 4-1: bad CDC descriptors [ 278.184233][ T8030] FAULT_INJECTION: forcing a failure. [ 278.184233][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 278.190463][ T968] cdc_acm 4-1:9.230: Zero length descriptor references [ 278.203512][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.0.586 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 278.214326][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.224390][ T8030] Call Trace: [ 278.227670][ T8030] [ 278.230604][ T8030] dump_stack_lvl+0x16c/0x1f0 [ 278.234282][ T968] cdc_acm 4-1:9.230: probe with driver cdc_acm failed with error -22 [ 278.235282][ T8030] should_fail_ex+0x497/0x5b0 [ 278.248004][ T8030] ? fs_reclaim_acquire+0xae/0x150 [ 278.253126][ T8030] should_failslab+0xc2/0x120 [ 278.257819][ T8030] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 278.263641][ T8030] ? __alloc_skb+0x2b1/0x380 [ 278.264726][ T968] usb 4-1: USB disconnect, device number 17 [ 278.268235][ T8030] __alloc_skb+0x2b1/0x380 [ 278.278522][ T8030] ? __pfx___alloc_skb+0x10/0x10 [ 278.283477][ T8030] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 278.288612][ T8030] netlink_ack+0x15f/0xb80 [ 278.293054][ T8030] netlink_rcv_skb+0x348/0x440 [ 278.297829][ T8030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.303299][ T8030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.308617][ T8030] ? netlink_deliver_tap+0x1ae/0xd30 [ 278.313925][ T8030] netlink_unicast+0x53c/0x7f0 [ 278.318715][ T8030] ? __pfx_netlink_unicast+0x10/0x10 [ 278.324040][ T8030] netlink_sendmsg+0x8b8/0xd70 [ 278.328831][ T8030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.334147][ T8030] ____sys_sendmsg+0xaaf/0xc90 [ 278.338924][ T8030] ? copy_msghdr_from_user+0x10b/0x160 [ 278.344395][ T8030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.349714][ T8030] ___sys_sendmsg+0x135/0x1e0 [ 278.354403][ T8030] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.359623][ T8030] ? __pfx_lock_release+0x10/0x10 [ 278.364657][ T8030] ? trace_lock_acquire+0x14e/0x1f0 [ 278.369885][ T8030] ? __fget_files+0x206/0x3a0 [ 278.374576][ T8030] __sys_sendmsg+0x16e/0x220 [ 278.379173][ T8030] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.384307][ T8030] do_syscall_64+0xcd/0x250 [ 278.388847][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.394748][ T8030] RIP: 0033:0x7f72c8185d29 [ 278.399162][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.418788][ T8030] RSP: 002b:00007f72c8fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.427207][ T8030] RAX: ffffffffffffffda RBX: 00007f72c8375fa0 RCX: 00007f72c8185d29 [ 278.435184][ T8030] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 278.443162][ T8030] RBP: 00007f72c8fa0090 R08: 0000000000000000 R09: 0000000000000000 [ 278.451139][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.459110][ T8030] R13: 0000000000000000 R14: 00007f72c8375fa0 R15: 00007fffed819c08 [ 278.467098][ T8030] [ 278.470209][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.487479][ T29] audit: type=1400 audit(1735546285.765:409): avc: denied { read } for pid=8031 comm="syz.4.587" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 278.525085][ T29] audit: type=1400 audit(1735546285.765:410): avc: denied { open } for pid=8031 comm="syz.4.587" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 278.621814][ T29] audit: type=1400 audit(1735546285.905:411): avc: denied { append } for pid=8035 comm="syz.0.588" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.790223][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 279.020178][ T5868] usb 5-1: device descriptor read/64, error -71 [ 279.088458][ T8044] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 279.088458][ T8044] program syz.0.589 not setting count and/or reply_len properly [ 279.270271][ T5868] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.460374][ T5868] usb 5-1: device descriptor read/64, error -71 [ 279.694651][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 279.694665][ T29] audit: type=1400 audit(1735546286.975:414): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 279.831635][ T5868] usb usb5-port1: attempt power cycle [ 280.170174][ T5867] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 280.210282][ T5868] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 280.257705][ T5868] usb 5-1: device descriptor read/8, error -71 [ 281.279370][ T8064] ebt_among: dst integrity fail: 100 [ 281.361899][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.374938][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.450545][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.472248][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.497945][ T5867] usb 2-1: Product: syz [ 281.517152][ T5867] usb 2-1: Manufacturer: syz [ 281.776839][ T5867] usb 2-1: SerialNumber: syz [ 281.830229][ T968] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.847664][ T8070] netlink: 'syz.4.600': attribute type 10 has an invalid length. [ 281.890676][ T8070] team0: Port device wlan1 added [ 281.916970][ T29] audit: type=1400 audit(1735546289.195:415): avc: denied { write } for pid=8071 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.985427][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 281.993370][ T968] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 282.006320][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.025572][ T968] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 282.034119][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.036838][ T968] usb 1-1: config 0 has no interface number 1 [ 282.049375][ T968] usb 1-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.055871][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.080875][ T968] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 282.093408][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.111775][ T968] usb 1-1: Product: syz [ 282.116234][ T968] usb 1-1: Manufacturer: syz [ 282.142226][ T968] usb 1-1: SerialNumber: syz [ 282.157457][ T968] usb 1-1: config 0 descriptor?? [ 282.198619][ T5867] usb 2-1: 0:2 : does not exist [ 282.214439][ T5867] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 282.221864][ T5868] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 282.248228][ T5868] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 282.257760][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.271089][ T5867] usb 2-1: USB disconnect, device number 15 [ 282.283948][ T5868] usb 5-1: config 0 descriptor?? [ 282.339102][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 282.518501][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 282.530758][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.170768][ T968] kaweth 1-1:0.235: Firmware present in device. [ 283.250333][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 283.256944][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 283.268639][ T8] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 283.282376][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.291485][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 283.302697][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.319956][ T8] usb 3-1: config 0 descriptor?? [ 283.733957][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 283.743270][ T8081] netlink: 348 bytes leftover after parsing attributes in process `syz.1.603'. [ 283.841254][ T29] audit: type=1400 audit(1735546290.935:416): avc: denied { read write } for pid=8078 comm="syz.1.603" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 284.219439][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 284.219672][ T8] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 284.252984][ T29] audit: type=1400 audit(1735546290.935:417): avc: denied { open } for pid=8078 comm="syz.1.603" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 284.261763][ T5867] usb 3-1: USB disconnect, device number 18 [ 284.353681][ T968] kaweth 1-1:0.235: Error reading configuration (-71), no net device created [ 284.362780][ T968] kaweth 1-1:0.235: probe with driver kaweth failed with error -5 [ 284.372794][ T29] audit: type=1400 audit(1735546291.005:418): avc: denied { write } for pid=8078 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 284.784860][ T5868] usb 5-1: USB disconnect, device number 25 [ 284.817982][ T29] audit: type=1400 audit(1735546292.095:419): avc: denied { ioctl } for pid=8082 comm="syz.1.604" path="socket:[16371]" dev="sockfs" ino=16371 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 284.842643][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.934885][ T968] kaweth 1-1:0.0: Firmware present in device. [ 285.021173][ T968] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 285.073985][ T968] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 285.167467][ T968] usb 1-1: USB disconnect, device number 23 [ 286.563487][ T8108] Process accounting resumed [ 286.701684][ T29] audit: type=1400 audit(1735546293.985:420): avc: denied { create } for pid=8101 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.725477][ T29] audit: type=1400 audit(1735546294.005:421): avc: denied { accept } for pid=8101 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.773302][ T29] audit: type=1400 audit(1735546294.035:422): avc: denied { module_request } for pid=8101 comm="syz.0.610" kmod="ebt_comment" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 286.820558][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.899135][ T8107] ebtables: ebtables: counters copy to user failed while replacing table [ 286.984762][ T5867] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 286.995400][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.011466][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.021501][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.030346][ T5867] usb 4-1: Product: syz [ 287.036825][ T5867] usb 4-1: Manufacturer: ఌ [ 287.047272][ T5867] usb 4-1: SerialNumber: syz [ 287.083300][ T29] audit: type=1400 audit(1735546294.365:423): avc: denied { watch_sb watch_reads } for pid=8114 comm="syz.1.613" path="/119/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 287.129018][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.197306][ T8105] Process accounting resumed [ 287.314443][ T8119] ebt_among: dst integrity fail: 100 [ 287.320020][ T5867] usb 4-1: 0:2 : does not exist [ 287.473616][ T5867] usb 4-1: USB disconnect, device number 18 [ 288.263535][ T5189] udevd[5189]: worker [5823] terminated by signal 33 (Unknown signal 33) [ 288.274016][ T5189] udevd[5189]: worker [5823] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3' [ 288.297348][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 288.306175][ T5820] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 288.480229][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 288.833454][ T5820] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 288.841975][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.852498][ T5820] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 288.868381][ T5820] usb 3-1: config 0 has no interface number 1 [ 288.883152][ T5820] usb 3-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 288.909732][ T5820] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 288.919121][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.950788][ T5820] usb 3-1: Product: syz [ 288.956622][ T5820] usb 3-1: Manufacturer: syz [ 288.961391][ T5820] usb 3-1: SerialNumber: syz [ 288.971180][ T5820] usb 3-1: config 0 descriptor?? [ 289.708644][ T5820] kaweth 3-1:0.235: Firmware present in device. [ 291.047815][ T8157] vivid-002: disconnect [ 291.190634][ T5820] kaweth 3-1:0.235: Error reading configuration (-71), no net device created [ 291.206469][ T5820] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 291.520437][ T5820] kaweth 3-1:0.0: Firmware present in device. [ 291.534776][ T5820] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 291.569096][ T5820] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 291.581532][ T8153] vivid-002: reconnect [ 291.645081][ T5820] usb 3-1: USB disconnect, device number 19 [ 295.090437][ T29] audit: type=1400 audit(1735546302.355:424): avc: denied { append } for pid=8182 comm="syz.0.632" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.323169][ T29] audit: type=1400 audit(1735546303.605:425): avc: denied { ioctl } for pid=8194 comm="syz.1.634" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 297.422030][ T29] audit: type=1400 audit(1735546304.675:426): avc: denied { read } for pid=8207 comm="syz.1.637" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.446642][ T29] audit: type=1400 audit(1735546304.675:427): avc: denied { open } for pid=8207 comm="syz.1.637" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.510683][ T29] audit: type=1400 audit(1735546304.685:428): avc: denied { ioctl } for pid=8207 comm="syz.1.637" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.572375][ T29] audit: type=1400 audit(1735546304.725:429): avc: denied { mount } for pid=8207 comm="syz.1.637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 299.637369][ T29] audit: type=1400 audit(1735546306.895:430): avc: denied { bind } for pid=8224 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.702468][ T29] audit: type=1400 audit(1735546306.895:431): avc: denied { listen } for pid=8224 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.755814][ T29] audit: type=1400 audit(1735546306.895:432): avc: denied { connect } for pid=8224 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.826551][ T29] audit: type=1400 audit(1735546307.005:433): avc: denied { write } for pid=8224 comm="syz.3.641" path="socket:[17273]" dev="sockfs" ino=17273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.287192][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 300.287209][ T29] audit: type=1400 audit(1735546307.565:435): avc: denied { relabelfrom } for pid=8235 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 300.313852][ T29] audit: type=1400 audit(1735546307.565:436): avc: denied { relabelto } for pid=8235 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 301.258930][ T5820] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 301.450641][ T5820] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.741061][ T5820] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.780562][ T5820] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.794784][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.883967][ T8246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.906712][ T5820] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.200697][ T968] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 303.052506][ T968] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 303.063158][ T968] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.093472][ T968] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.102978][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.129171][ T968] usb 2-1: Product: syz [ 303.143737][ T968] usb 2-1: Manufacturer: ఌ [ 303.161328][ T968] usb 2-1: SerialNumber: syz [ 303.225395][ T8262] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 303.296100][ T8] usb 1-1: USB disconnect, device number 24 [ 303.548917][ T968] usb 2-1: 0:2 : does not exist [ 303.592764][ T968] usb 2-1: USB disconnect, device number 16 [ 303.936328][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.852740][ T29] audit: type=1400 audit(1735546312.135:437): avc: denied { listen } for pid=8295 comm="syz.2.653" lport=60651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.150498][ T8349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.158083][ T8349] IPv6: NLM_F_CREATE should be set when creating new route [ 310.440438][ T29] audit: type=1400 audit(1735546317.705:438): avc: denied { read write } for pid=8356 comm="syz.4.674" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.463528][ T29] audit: type=1400 audit(1735546317.705:439): avc: denied { open } for pid=8356 comm="syz.4.674" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.470128][ T968] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 310.486509][ T29] audit: type=1400 audit(1735546317.705:440): avc: denied { map } for pid=8356 comm="syz.4.674" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.516813][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.702011][ T968] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.723409][ T968] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.760173][ T968] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.785264][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.797542][ T8351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.825433][ T968] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.494995][ T29] audit: type=1400 audit(1735546319.775:441): avc: denied { execute } for pid=8369 comm="syz.3.678" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.729510][ T968] usb 1-1: USB disconnect, device number 25 [ 313.961528][ T8400] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 313.968306][ T29] audit: type=1400 audit(1735546320.875:442): avc: denied { mount } for pid=8389 comm="syz.1.680" name="/" dev="autofs" ino=17763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 313.992705][ T29] audit: type=1400 audit(1735546321.165:443): avc: denied { getopt } for pid=8389 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 314.012110][ T29] audit: type=1400 audit(1735546321.205:444): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 314.126749][ T29] audit: type=1400 audit(1735546321.395:445): avc: denied { sqpoll } for pid=8394 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 316.580445][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.740187][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 316.770443][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 316.819603][ T8] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 316.833802][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.862204][ T8] usb 4-1: Product: syz [ 316.885082][ T8] usb 4-1: Manufacturer: syz [ 316.909575][ T8] usb 4-1: SerialNumber: syz [ 316.933863][ T8] usb 4-1: config 0 descriptor?? [ 316.957929][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 316.986091][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 317.016923][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.072750][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082019][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.346120][ T5820] usb 4-1: USB disconnect, device number 19 [ 318.031458][ T8450] vivid-004: disconnect [ 318.036247][ T8449] vivid-004: reconnect [ 319.277166][ T8467] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 319.349887][ T8467] team0: Port device wlan1 added [ 319.415227][ T8472] FAULT_INJECTION: forcing a failure. [ 319.415227][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 319.428538][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: syz.3.697 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 319.439149][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.449220][ T8472] Call Trace: [ 319.452489][ T8472] [ 319.455409][ T8472] dump_stack_lvl+0x16c/0x1f0 [ 319.460086][ T8472] should_fail_ex+0x497/0x5b0 [ 319.464759][ T8472] should_failslab+0xc2/0x120 [ 319.469426][ T8472] __kmalloc_noprof+0xcb/0x510 [ 319.474186][ T8472] ? lockdep_init_map_type+0x16d/0x7d0 [ 319.479639][ T8472] vmci_handle_arr_create+0x67/0x140 [ 319.484916][ T8472] vmci_ctx_create+0x26e/0x740 [ 319.489670][ T8472] vmci_host_unlocked_ioctl+0x1a9a/0x1fb0 [ 319.495382][ T8472] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 319.501447][ T8472] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 319.507940][ T8472] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 319.514429][ T8472] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 319.521270][ T8472] ? __pfx_lock_release+0x10/0x10 [ 319.526289][ T8472] ? selinux_file_ioctl+0x180/0x270 [ 319.531473][ T8472] ? selinux_file_ioctl+0xb4/0x270 [ 319.536573][ T8472] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 319.542639][ T8472] __x64_sys_ioctl+0x190/0x200 [ 319.547415][ T8472] do_syscall_64+0xcd/0x250 [ 319.551912][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.557797][ T8472] RIP: 0033:0x7feefb985d29 [ 319.562200][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.582053][ T8472] RSP: 002b:00007feefc71c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.590451][ T8472] RAX: ffffffffffffffda RBX: 00007feefbb75fa0 RCX: 00007feefb985d29 [ 319.598409][ T8472] RDX: 0000000020000240 RSI: 00000000000007a0 RDI: 0000000000000003 [ 319.606363][ T8472] RBP: 00007feefc71c090 R08: 0000000000000000 R09: 0000000000000000 [ 319.614318][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.622273][ T8472] R13: 0000000000000000 R14: 00007feefbb75fa0 R15: 00007ffeb59cf608 [ 319.630241][ T8472] [ 319.633331][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.832786][ T8476] @: renamed from vlan0 (while UP) [ 319.887858][ T5864] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 320.550849][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 320.773456][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.813609][ T5864] usb 2-1: config 0 descriptor?? [ 320.856633][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 320.934654][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 322.137171][ T8509] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 322.288809][ T5868] usb 2-1: USB disconnect, device number 17 [ 323.144336][ T8509] team0: Port device wlan1 removed [ 323.232997][ T5820] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.422233][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 323.441989][ T5820] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 323.477981][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.523854][ T5820] usb 1-1: config 0 has no interface number 0 [ 323.545213][ T5820] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.603334][ T5820] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.640256][ T5820] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.676997][ T5820] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.730703][ T5820] usb 1-1: config 0 interface 52 has no altsetting 0 [ 323.732975][ T8516] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 323.737433][ T5820] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 323.790353][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.862427][ T5820] usb 1-1: config 0 descriptor?? [ 324.246618][ T5820] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input15 [ 324.259926][ T8516] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 324.271845][ T29] audit: type=1400 audit(1735546331.555:446): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3119 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.317410][ T8516] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 324.362479][ T8516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.710'. [ 324.509156][ T5864] usb 1-1: USB disconnect, device number 26 [ 324.785403][ T8529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.792665][ T8529] IPv6: NLM_F_CREATE should be set when creating new route [ 325.156157][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 325.660635][ T29] audit: type=1804 audit(1735546332.935:447): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.716" name="/" dev="pidfs" ino=8838 res=1 errno=0 [ 325.700333][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.860169][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 325.866697][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.000855][ T46] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 326.012732][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.035218][ T46] usb 5-1: Product: syz [ 326.039479][ T46] usb 5-1: Manufacturer: syz [ 326.045734][ T46] usb 5-1: SerialNumber: syz [ 326.856668][ T46] usb 5-1: config 0 descriptor?? [ 326.871450][ T46] usb 5-1: bad CDC descriptors [ 326.876530][ T46] usb 5-1: unsupported MDLM descriptors [ 327.880201][ T5864] usb 5-1: USB disconnect, device number 26 [ 328.086539][ T29] audit: type=1400 audit(1735546334.585:448): avc: denied { listen } for pid=8553 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.164871][ T29] audit: type=1400 audit(1735546336.015:449): avc: denied { setopt } for pid=8574 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.264280][ T29] audit: type=1400 audit(1735546336.435:450): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 330.060214][ T5864] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 330.234228][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 330.290194][ T5864] usb 5-1: config 0 has no interface number 0 [ 330.365807][ T5864] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.401708][ T5864] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 330.426764][ T5864] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.449999][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.475237][ T5864] usb 5-1: config 0 descriptor?? [ 330.896027][ T5864] usbhid 5-1:0.1: can't add hid device: -71 [ 330.913011][ T5864] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 330.951579][ T5864] usb 5-1: USB disconnect, device number 27 [ 333.579576][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 334.080389][ T5864] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.116908][ T8620] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 334.301248][ T5864] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.312315][ T5864] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.322162][ T5864] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.340120][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.988215][ T8608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 335.064445][ T5864] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.108136][ T29] audit: type=1400 audit(1735546341.665:451): avc: denied { create } for pid=8621 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.152298][ T29] audit: type=1400 audit(1735546341.665:452): avc: denied { write } for pid=8621 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.198520][ T29] audit: type=1400 audit(1735546341.665:453): avc: denied { nlmsg_read } for pid=8621 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 335.424590][ T29] audit: type=1400 audit(1735546341.665:454): avc: denied { append } for pid=8621 comm="syz.1.738" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.448393][ T8633] Invalid source name [ 335.452443][ T8633] UBIFS error (pid: 8633): cannot open "/dev/sg0", error -22 [ 335.592768][ T29] audit: type=1400 audit(1735546342.535:455): avc: denied { create } for pid=8631 comm="syz.1.740" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 335.780249][ T29] audit: type=1400 audit(1735546342.725:456): avc: denied { mounton } for pid=8631 comm="syz.1.740" path="/150/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 335.872508][ T46] usb 5-1: USB disconnect, device number 28 [ 336.414798][ T29] audit: type=1400 audit(1735546343.685:457): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 336.731590][ T8657] sctp: [Deprecated]: syz.3.742 (pid 8657) Use of int in max_burst socket option deprecated. [ 336.731590][ T8657] Use struct sctp_assoc_value instead [ 337.017580][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 337.323273][ T29] audit: type=1400 audit(1735546344.605:458): avc: denied { call } for pid=8669 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 337.380538][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 337.392408][ T46] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 337.400358][ T5864] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 337.419730][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.454068][ T46] usb 2-1: Product: syz [ 337.467885][ T46] usb 2-1: Manufacturer: syz [ 337.484205][ T46] usb 2-1: SerialNumber: syz [ 337.502718][ T46] usb 2-1: config 0 descriptor?? [ 337.521592][ T46] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 337.585741][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 337.608112][ T5864] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 337.623426][ T5864] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 337.636830][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.278134][ T5864] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 338.700183][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.723057][ T5864] usb 3-1: config 0 descriptor?? [ 338.742932][ T46] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 338.750538][ T46] visor 2-1:0.0: probe with driver visor failed with error -71 [ 338.775894][ T29] audit: type=1400 audit(1735546346.035:459): avc: denied { mount } for pid=8673 comm="syz.4.748" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 338.807818][ T46] usb 2-1: USB disconnect, device number 18 [ 338.930112][ T29] audit: type=1400 audit(1735546346.205:460): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 339.075691][ T8689] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 339.187257][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 339.214621][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.255544][ T5864] usb 3-1: USB disconnect, device number 20 [ 339.675246][ T8701] FAULT_INJECTION: forcing a failure. [ 339.675246][ T8701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.688555][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.0.752 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 339.699148][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.709189][ T8701] Call Trace: [ 339.712449][ T8701] [ 339.715370][ T8701] dump_stack_lvl+0x16c/0x1f0 [ 339.720054][ T8701] should_fail_ex+0x497/0x5b0 [ 339.724728][ T8701] _copy_from_user+0x2e/0xd0 [ 339.729303][ T8701] tls_setsockopt+0x979/0x1440 [ 339.734049][ T8701] ? __pfx_tls_setsockopt+0x10/0x10 [ 339.739225][ T8701] ? selinux_socket_setsockopt+0x6a/0x80 [ 339.744851][ T8701] ? sock_common_setsockopt+0x2e/0xf0 [ 339.750224][ T8701] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.756106][ T8701] do_sock_setsockopt+0x222/0x480 [ 339.761121][ T8701] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 339.766657][ T8701] ? lock_acquire+0x2f/0xb0 [ 339.771161][ T8701] __sys_setsockopt+0x1a0/0x230 [ 339.776015][ T8701] __x64_sys_setsockopt+0xbd/0x160 [ 339.781119][ T8701] ? do_syscall_64+0x91/0x250 [ 339.785785][ T8701] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.790973][ T8701] do_syscall_64+0xcd/0x250 [ 339.795471][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.801356][ T8701] RIP: 0033:0x7f72c8185d29 [ 339.805763][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.825362][ T8701] RSP: 002b:00007f72c8f7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.833768][ T8701] RAX: ffffffffffffffda RBX: 00007f72c8376080 RCX: 00007f72c8185d29 [ 339.841727][ T8701] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000008 [ 339.849691][ T8701] RBP: 00007f72c8f7f090 R08: 0000000000000028 R09: 0000000000000000 [ 339.857646][ T8701] R10: 0000000020000b80 R11: 0000000000000246 R12: 0000000000000001 [ 339.865602][ T8701] R13: 0000000000000000 R14: 00007f72c8376080 R15: 00007fffed819c08 [ 339.873571][ T8701] [ 340.394895][ T5864] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 340.550778][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 340.557208][ T5864] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 340.577531][ T29] audit: type=1400 audit(1735546347.855:461): avc: denied { connect } for pid=8696 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.577994][ T5864] usb 4-1: config 0 has no interface number 0 [ 340.615800][ T5864] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 340.627739][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.644405][ T29] audit: type=1400 audit(1735546347.855:462): avc: denied { read } for pid=8696 comm="syz.1.750" path="socket:[19243]" dev="sockfs" ino=19243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.683853][ T5864] usb 4-1: Product: syz [ 340.695446][ T5864] usb 4-1: Manufacturer: syz [ 340.718977][ T5864] usb 4-1: SerialNumber: syz [ 340.731812][ T5864] usb 4-1: config 0 descriptor?? [ 340.744646][ T29] audit: type=1400 audit(1735546347.975:463): avc: denied { write } for pid=8696 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.774590][ T5864] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 340.798677][ T5864] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 340.867880][ T8708] could not allocate digest TFM handle sha3-224-ce [ 340.986467][ T5864] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 340.994061][ T5864] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 341.600254][ T5868] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 341.610363][ T29] audit: type=1400 audit(1735546348.885:464): avc: denied { connect } for pid=8726 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.802753][ T8736] input: syz1 as /devices/virtual/input/input16 [ 341.900249][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 342.182771][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 342.194860][ T5868] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 342.234609][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.241931][ T5868] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 342.251024][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.272028][ T5868] usb 1-1: config 0 descriptor?? [ 343.475219][ T46] usb 4-1: USB disconnect, device number 20 [ 343.483703][ T5868] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 343.816758][ T5868] usb 1-1: USB disconnect, device number 27 [ 344.280664][ T8759] vivid-003: disconnect [ 344.470148][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 344.540345][ T5864] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.577106][ T8766] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 344.586828][ T8766] team0: Port device wlan1 added [ 344.630126][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 344.637122][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 344.648212][ T46] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 344.673379][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 344.680552][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 344.699943][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.729789][ T5864] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.741844][ T5864] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.743110][ T46] usb 4-1: config 0 descriptor?? [ 344.751907][ T5864] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.766702][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.783409][ T8763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.798568][ T5864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.860956][ T5820] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 345.048453][ T5820] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 345.059975][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.072737][ T5820] usb 1-1: config 0 descriptor?? [ 345.106641][ T968] usb 3-1: USB disconnect, device number 21 [ 345.123131][ T5820] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 345.182196][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 345.206276][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 345.245808][ T46] usb 4-1: USB disconnect, device number 21 [ 345.414714][ T29] audit: type=1400 audit(1735546352.695:465): avc: denied { getopt } for pid=8767 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 345.439665][ T29] audit: type=1400 audit(1735546352.715:466): avc: denied { write } for pid=8767 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 345.750687][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 345.774134][ T29] audit: type=1400 audit(1735546353.055:467): avc: denied { setopt } for pid=8775 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.776395][ T8776] overlayfs: failed to resolve './bus': -2 [ 345.906131][ T8782] libceph: resolve '400' (ret=-3): failed [ 345.923041][ T29] audit: type=1400 audit(1735546353.205:468): avc: denied { ioctl } for pid=8781 comm="syz.3.772" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 345.930675][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 345.969711][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.982844][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.993578][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.002985][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.029466][ T46] usb 5-1: config 0 descriptor?? [ 346.038895][ T46] hub 5-1:0.0: USB hub found [ 346.298835][ T46] hub 5-1:0.0: 1 port detected [ 346.514360][ T29] audit: type=1400 audit(1735546353.795:469): avc: denied { getopt } for pid=8769 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.812715][ T46] hub 5-1:0.0: activate --> -90 [ 346.856873][ T8757] vivid-003: reconnect [ 347.026856][ T46] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 347.320374][ T8812] FAULT_INJECTION: forcing a failure. [ 347.320374][ T8812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.333830][ T8812] CPU: 0 UID: 0 PID: 8812 Comm: syz.2.780 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 347.344431][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.354497][ T8812] Call Trace: [ 347.357777][ T8812] [ 347.360714][ T8812] dump_stack_lvl+0x16c/0x1f0 [ 347.365411][ T8812] should_fail_ex+0x497/0x5b0 [ 347.370107][ T8812] _copy_from_user+0x2e/0xd0 [ 347.374712][ T8812] move_addr_to_kernel+0x68/0x160 [ 347.379752][ T8812] __sys_connect+0xb0/0x170 [ 347.384265][ T8812] ? __pfx___sys_connect+0x10/0x10 [ 347.389415][ T8812] __x64_sys_connect+0x72/0xb0 [ 347.394194][ T8812] do_syscall_64+0xcd/0x250 [ 347.398719][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.404633][ T8812] RIP: 0033:0x7f763fd85d29 [ 347.409056][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.428678][ T8812] RSP: 002b:00007f7640c28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 347.437107][ T8812] RAX: ffffffffffffffda RBX: 00007f763ff76080 RCX: 00007f763fd85d29 [ 347.445085][ T8812] RDX: 0000000000000008 RSI: 0000000020006240 RDI: 0000000000000005 [ 347.453061][ T8812] RBP: 00007f7640c28090 R08: 0000000000000000 R09: 0000000000000000 [ 347.461035][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.469012][ T8812] R13: 0000000000000000 R14: 00007f763ff76080 R15: 00007fff36f7e268 [ 347.477005][ T8812] [ 347.484709][ T5864] usb 5-1: USB disconnect, device number 29 [ 347.834211][ T46] usb 1-1: USB disconnect, device number 28 [ 348.278021][ T8823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.285279][ T8823] IPv6: NLM_F_CREATE should be set when creating new route [ 348.672438][ T29] audit: type=1400 audit(1735546355.885:470): avc: denied { listen } for pid=8819 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 348.804740][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'. [ 348.855681][ T5864] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 349.010141][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 349.022252][ T5864] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 349.044338][ T5864] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 349.072400][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.079334][ T5864] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 349.088970][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.106766][ T5864] usb 5-1: config 0 descriptor?? [ 349.538233][ T5864] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 349.702103][ T8855] FAULT_INJECTION: forcing a failure. [ 349.702103][ T8855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.715600][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: syz.1.789 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 349.726188][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.736236][ T8855] Call Trace: [ 349.739493][ T8855] [ 349.742407][ T8855] dump_stack_lvl+0x16c/0x1f0 [ 349.747072][ T8855] should_fail_ex+0x497/0x5b0 [ 349.751735][ T8855] _copy_from_user+0x2e/0xd0 [ 349.756316][ T8855] copy_msghdr_from_user+0x99/0x160 [ 349.761492][ T8855] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.767274][ T8855] ? __pfx___lock_acquire+0x10/0x10 [ 349.772457][ T8855] ___sys_recvmsg+0xdc/0x1a0 [ 349.777025][ T8855] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.782200][ T8855] ? __pfx_lock_release+0x10/0x10 [ 349.787200][ T8855] ? trace_lock_acquire+0x14e/0x1f0 [ 349.792391][ T8855] do_recvmmsg+0x2f8/0x740 [ 349.796785][ T8855] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.801698][ T8855] ? vfs_write+0x306/0x1150 [ 349.806182][ T8855] ? __mutex_unlock_slowpath+0x164/0x690 [ 349.811801][ T8855] ? __fget_files+0x206/0x3a0 [ 349.816460][ T8855] __x64_sys_recvmmsg+0x239/0x290 [ 349.821465][ T8855] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 349.827012][ T8855] do_syscall_64+0xcd/0x250 [ 349.831498][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.837395][ T8855] RIP: 0033:0x7f783ed85d29 [ 349.841802][ T8855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.861387][ T8855] RSP: 002b:00007f783faee038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 349.869777][ T8855] RAX: ffffffffffffffda RBX: 00007f783ef76080 RCX: 00007f783ed85d29 [ 349.877728][ T8855] RDX: 0000000000000001 RSI: 0000000020001780 RDI: 0000000000000007 [ 349.885676][ T8855] RBP: 00007f783faee090 R08: 0000000000000000 R09: 0000000000000000 [ 349.893641][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.901588][ T8855] R13: 0000000000000000 R14: 00007f783ef76080 R15: 00007ffe62bfd828 [ 349.909558][ T8855] [ 349.912594][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.200230][ T5864] usb 5-1: USB disconnect, device number 30 [ 350.544792][ T8863] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 350.571110][ T8863] CIFS mount error: No usable UNC path provided in device string! [ 350.571110][ T8863] [ 350.581366][ T8863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.783700][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 351.109042][ T8872] mkiss: ax0: crc mode is auto. [ 351.875050][ T8883] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 351.906001][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 351.920132][ T29] audit: type=1400 audit(1735546359.175:471): avc: denied { search } for pid=5483 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=20594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 352.077842][ T46] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 352.087168][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.095782][ T46] usb 2-1: Product: syz [ 352.102777][ T46] usb 2-1: Manufacturer: syz [ 352.107857][ T8883] team0: Port device wlan1 added [ 352.113015][ T46] usb 2-1: SerialNumber: syz [ 352.119488][ T46] usb 2-1: config 0 descriptor?? [ 352.207536][ T8895] Process accounting resumed [ 352.270289][ T5864] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 352.349032][ T46] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 352.431530][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 352.447028][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.471568][ T5864] usb 3-1: config 0 descriptor?? [ 352.492367][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 352.695390][ T968] usb 3-1: USB disconnect, device number 22 [ 353.195329][ T29] audit: type=1400 audit(1735546360.475:472): avc: denied { sys_chroot } for pid=8912 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 353.249821][ T29] audit: type=1400 audit(1735546360.475:473): avc: denied { setgid } for pid=8912 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 353.270553][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.320973][ T29] audit: type=1400 audit(1735546360.475:474): avc: denied { setrlimit } for pid=8912 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 353.326289][ T8891] Process accounting resumed [ 353.605216][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 353.710526][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 353.817762][ T29] audit: type=1400 audit(1735546361.075:475): avc: denied { mounton } for pid=8866 comm="syz.1.792" path="/159/file0/bus" dev="ramfs" ino=19791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 354.015494][ T8867] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 354.023461][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.068452][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.086424][ T8867] overlayfs: failed to set xattr on upper [ 354.120235][ T8867] overlayfs: ...falling back to redirect_dir=nofollow. [ 354.124037][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.159689][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.168463][ T8867] overlayfs: ...falling back to metacopy=off. [ 354.178944][ T8867] overlayfs: ...falling back to index=off. [ 354.187203][ T25] usb 3-1: Product: syz [ 354.233812][ T25] usb 3-1: Manufacturer: ఌ [ 354.238558][ T8867] overlayfs: ...falling back to uuid=null. [ 354.247950][ T25] usb 3-1: SerialNumber: syz [ 354.268709][ T46] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 354.296400][ T46] usb 2-1: USB disconnect, device number 19 [ 354.827741][ T8937] FAULT_INJECTION: forcing a failure. [ 354.827741][ T8937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.847364][ T25] usb 3-1: 0:2 : does not exist [ 354.874951][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.4.800 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 354.885578][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.895651][ T8937] Call Trace: [ 354.898944][ T8937] [ 354.901886][ T8937] dump_stack_lvl+0x16c/0x1f0 [ 354.905027][ T25] usb 3-1: USB disconnect, device number 23 [ 354.906566][ T8937] should_fail_ex+0x497/0x5b0 [ 354.917120][ T8937] _copy_from_user+0x2e/0xd0 [ 354.921721][ T8937] move_addr_to_kernel+0x68/0x160 [ 354.926734][ T8937] __sys_bind+0x11c/0x260 [ 354.931062][ T8937] ? __pfx___sys_bind+0x10/0x10 [ 354.935929][ T8937] ? __fget_files+0x206/0x3a0 [ 354.940705][ T8937] ? __pfx_ksys_write+0x10/0x10 [ 354.945577][ T8937] __x64_sys_bind+0x72/0xb0 [ 354.950094][ T8937] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.955301][ T8937] do_syscall_64+0xcd/0x250 [ 354.959817][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.965721][ T8937] RIP: 0033:0x7f6059785d29 [ 354.970144][ T8937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.989761][ T8937] RSP: 002b:00007f605a690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 354.998182][ T8937] RAX: ffffffffffffffda RBX: 00007f6059975fa0 RCX: 00007f6059785d29 [ 355.006147][ T8937] RDX: 0000000000000058 RSI: 0000000020000000 RDI: 0000000000000003 [ 355.014125][ T8937] RBP: 00007f605a690090 R08: 0000000000000000 R09: 0000000000000000 [ 355.022111][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.030087][ T8937] R13: 0000000000000000 R14: 00007f6059975fa0 R15: 00007ffedeecbfc8 [ 355.038072][ T8937] [ 355.041170][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.097087][ T29] audit: type=1400 audit(1735546362.325:476): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 355.148847][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.320380][ T968] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 356.325544][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 356.342558][ T968] usb 4-1: config 127 has an invalid interface number: 178 but max is 0 [ 356.364937][ T968] usb 4-1: config 127 has no interface number 0 [ 356.389573][ T968] usb 4-1: config 127 interface 178 has no altsetting 0 [ 356.418456][ T968] usb 4-1: New USB device found, idVendor=0403, idProduct=e40b, bcdDevice=14.f5 [ 356.437330][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.468330][ T968] usb 4-1: Product: syz [ 356.507342][ T968] usb 4-1: Manufacturer: syz [ 356.544821][ T968] usb 4-1: SerialNumber: syz [ 356.652599][ T29] audit: type=1400 audit(1735546363.935:477): avc: denied { map } for pid=8978 comm="syz.4.809" path="socket:[20880]" dev="sockfs" ino=20880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.728194][ T29] audit: type=1400 audit(1735546363.975:478): avc: denied { ioctl } for pid=8978 comm="syz.4.809" path="socket:[20888]" dev="sockfs" ino=20888 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.752670][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.787100][ T29] audit: type=1400 audit(1735546364.065:479): avc: denied { create } for pid=8975 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 356.826541][ T968] ftdi_sio 4-1:127.178: FTDI USB Serial Device converter detected [ 356.838140][ T968] ftdi_sio ttyUSB0: unknown device type: 0x14f5 [ 356.885721][ T968] usb 4-1: USB disconnect, device number 22 [ 356.920382][ T968] ftdi_sio 4-1:127.178: device disconnected [ 356.936498][ T29] audit: type=1400 audit(1735546364.205:480): avc: denied { setattr } for pid=8983 comm="syz.4.811" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.984601][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 357.108284][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 357.133589][ T29] audit: type=1400 audit(1735546364.215:481): avc: denied { read write } for pid=8983 comm="syz.4.811" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.154530][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.757756][ T29] audit: type=1400 audit(1735546364.215:482): avc: denied { open } for pid=8983 comm="syz.4.811" path="/160/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.834855][ T29] audit: type=1400 audit(1735546364.275:483): avc: denied { accept } for pid=8975 comm="syz.2.808" lport=52269 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.860143][ T25] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 357.922150][ T29] audit: type=1400 audit(1735546364.275:484): avc: denied { write } for pid=8975 comm="syz.2.808" lport=52269 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 358.209350][ T29] audit: type=1400 audit(1735546364.515:485): avc: denied { ioctl } for pid=8975 comm="syz.2.808" path="socket:[20894]" dev="sockfs" ino=20894 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.959174][ T29] audit: type=1400 audit(1735546366.235:486): avc: denied { map } for pid=9004 comm="syz.2.816" path="pipe:[20937]" dev="pipefs" ino=20937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 359.191336][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 360.761690][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 360.769355][ T25] usb 5-1: can't read configurations, error -71 [ 360.774416][ T29] audit: type=1400 audit(1735546368.055:487): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.597184][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 361.820436][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 362.900397][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 362.908388][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 362.919789][ T46] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 362.933232][ T9033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.940510][ T9033] IPv6: NLM_F_CREATE should be set when creating new route [ 363.054822][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 363.061741][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 363.071260][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.099719][ T46] usb 1-1: config 0 descriptor?? [ 363.393025][ T9051] pim6reg: entered allmulticast mode [ 363.702175][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 363.712601][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 363.853744][ T46] usb 1-1: USB disconnect, device number 29 [ 364.330549][ T29] audit: type=1400 audit(1735546371.265:488): avc: denied { create } for pid=9052 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 364.920225][ T29] audit: type=1400 audit(1735546372.185:489): avc: denied { getopt } for pid=9062 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.372599][ T9092] lo speed is unknown, defaulting to 1000 [ 369.349612][ T29] audit: type=1400 audit(1735546376.625:490): avc: denied { getopt } for pid=9119 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 369.760398][ T5864] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 370.000114][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 370.006941][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.019728][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.037634][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 370.095457][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.118269][ T5864] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.143429][ T5864] usb 3-1: Manufacturer: syz [ 370.254539][ T5864] usb 3-1: config 0 descriptor?? [ 370.262854][ T9132] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 370.640383][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 370.723644][ T8] usb 3-1: USB disconnect, device number 24 [ 370.773807][ T5864] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 370.859914][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.885840][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.938825][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.953197][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.961519][ T5864] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 370.980097][ T25] usb 1-1: Product: syz [ 370.981328][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.984417][ T25] usb 1-1: Manufacturer: ఌ [ 370.999761][ T5864] usb 5-1: config 0 descriptor?? [ 371.031090][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 371.037763][ T25] usb 1-1: SerialNumber: syz [ 371.354702][ T25] usb 1-1: 0:2 : does not exist [ 372.020541][ T25] usb 1-1: USB disconnect, device number 30 [ 372.233809][ T29] audit: type=1800 audit(1735546379.505:491): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.853" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 372.610163][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 372.772363][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 372.785165][ T25] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.795749][ T25] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 372.807793][ T25] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 372.826697][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 372.834150][ T25] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 372.843423][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.854425][ T25] usb 1-1: config 0 descriptor?? [ 373.662283][ T46] usb 5-1: USB disconnect, device number 33 [ 373.798610][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.830383][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.885027][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 373.923741][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 373.944759][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 373.970169][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 373.988215][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 374.008386][ T25] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 374.890166][ T9198] afs: Unknown parameter 'dyN' [ 376.060379][ T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 376.087330][ T25] hid-thrustmaster 0003:044F:B65D.0006: setup data couldn't be sent [ 376.141783][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 376.157480][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.186620][ T25] usb 1-1: USB disconnect, device number 31 [ 376.270325][ T46] usb 2-1: device descriptor read/64, error -71 [ 376.280578][ T5864] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 376.432187][ T5864] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 376.445459][ T5864] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 376.456298][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.467382][ T5864] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.556980][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.565320][ T5864] usb 5-1: Product: syz [ 376.575375][ T5864] usb 5-1: Manufacturer: ఌ [ 376.580469][ T5864] usb 5-1: SerialNumber: syz [ 376.690439][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 376.860241][ T46] usb 2-1: device descriptor read/64, error -71 [ 377.004530][ T46] usb usb2-port1: attempt power cycle [ 377.080481][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 377.318987][ T5864] usb 5-1: 0:2 : does not exist [ 377.330532][ T5864] usb 5-1: USB disconnect, device number 34 [ 377.376635][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.387880][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.398100][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.407329][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.429188][ T9216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.436779][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 377.478274][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.510999][ T46] usb 2-1: device descriptor read/8, error -71 [ 377.561113][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.780120][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 377.843205][ T46] usb 2-1: device descriptor read/8, error -71 [ 377.975485][ T46] usb usb2-port1: unable to enumerate USB device [ 378.309851][ T5868] usb 4-1: USB disconnect, device number 23 [ 378.542703][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.000876][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 381.070432][ T9252] Process accounting resumed [ 381.979646][ T9242] Process accounting resumed [ 382.059035][ T9273] FAULT_INJECTION: forcing a failure. [ 382.059035][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 382.080206][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 382.088478][ T5868] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 382.095656][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.2.878 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 382.098333][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.108068][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.108084][ T9273] Call Trace: [ 382.108091][ T9273] [ 382.108099][ T9273] dump_stack_lvl+0x16c/0x1f0 [ 382.108129][ T9273] should_fail_ex+0x497/0x5b0 [ 382.108162][ T9273] ? fs_reclaim_acquire+0xae/0x150 [ 382.108186][ T9273] should_failslab+0xc2/0x120 [ 382.108211][ T9273] __kmalloc_cache_noprof+0x68/0x410 [ 382.108240][ T9273] rfkill_fop_open+0x1ad/0x750 [ 382.108271][ T9273] ? __pfx_rfkill_fop_open+0x10/0x10 [ 382.116717][ T5868] usb 4-1: Product: syz [ 382.126259][ T9273] misc_open+0x35a/0x420 [ 382.126291][ T9273] ? __pfx_misc_open+0x10/0x10 [ 382.126315][ T9273] chrdev_open+0x237/0x6a0 [ 382.129716][ T5868] usb 4-1: Manufacturer: syz [ 382.132482][ T9273] ? __pfx_chrdev_open+0x10/0x10 [ 382.132517][ T9273] do_dentry_open+0xf59/0x1ea0 [ 382.137208][ T5868] usb 4-1: SerialNumber: syz [ 382.141812][ T9273] ? __pfx_chrdev_open+0x10/0x10 [ 382.141842][ T9273] vfs_open+0x82/0x3f0 [ 382.141863][ T9273] ? may_open+0x1f2/0x400 [ 382.141890][ T9273] path_openat+0x1e6a/0x2d60 [ 382.141920][ T9273] ? __pfx_path_openat+0x10/0x10 [ 382.141941][ T9273] ? __pfx___lock_acquire+0x10/0x10 [ 382.141960][ T9273] ? lock_acquire.part.0+0x11b/0x380 [ 382.141980][ T9273] ? find_held_lock+0x2d/0x110 [ 382.142010][ T9273] do_filp_open+0x20c/0x470 [ 382.142030][ T9273] ? __pfx_do_filp_open+0x10/0x10 [ 382.147173][ T46] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 382.151750][ T9273] ? find_held_lock+0x2d/0x110 [ 382.151801][ T9273] ? alloc_fd+0x41f/0x760 [ 382.165353][ T5868] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 382.167068][ T9273] do_sys_openat2+0x17a/0x1e0 [ 382.278233][ T9273] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.283465][ T9273] ? __fget_files+0x206/0x3a0 [ 382.288155][ T9273] __x64_sys_openat+0x175/0x210 [ 382.293028][ T9273] ? __pfx___x64_sys_openat+0x10/0x10 [ 382.298416][ T9273] ? ksys_write+0x1ba/0x250 [ 382.302941][ T9273] do_syscall_64+0xcd/0x250 [ 382.307467][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.313378][ T9273] RIP: 0033:0x7f763fd85d29 [ 382.317802][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.337420][ T9273] RSP: 002b:00007f7640c49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 382.345843][ T9273] RAX: ffffffffffffffda RBX: 00007f763ff75fa0 RCX: 00007f763fd85d29 [ 382.353827][ T9273] RDX: 000000000004e000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 382.361812][ T9273] RBP: 00007f7640c49090 R08: 0000000000000000 R09: 0000000000000000 [ 382.369796][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.377776][ T9273] R13: 0000000000000000 R14: 00007f763ff75fa0 R15: 00007fff36f7e268 [ 382.385779][ T9273] [ 382.396279][ T46] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 382.406092][ T46] usb 2-1: config 0 has no interface number 0 [ 382.429542][ T46] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 382.438966][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.451757][ T5864] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 382.454322][ T46] usb 2-1: Product: syz [ 382.500259][ T46] usb 2-1: Manufacturer: syz [ 382.511071][ T46] usb 2-1: SerialNumber: syz [ 382.527375][ T46] usb 2-1: config 0 descriptor?? [ 382.612013][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 382.619452][ T5864] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 382.631099][ T5864] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 382.644128][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 382.650960][ T5864] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 382.660113][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.669874][ T5864] usb 5-1: config 0 descriptor?? [ 382.771266][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 382.960136][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 382.974528][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 382.986081][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.997929][ T8] usb 3-1: Product: syz [ 383.004882][ T8] usb 3-1: Manufacturer: syz [ 383.009725][ T8] usb 3-1: SerialNumber: syz [ 383.034117][ T8] usb 3-1: config 0 descriptor?? [ 383.094532][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 383.109787][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 383.128595][ T5864] usb 5-1: USB disconnect, device number 35 [ 383.410738][ T9288] ======================================================= [ 383.410738][ T9288] WARNING: The mand mount option has been deprecated and [ 383.410738][ T9288] and is ignored by this kernel. Remove the mand [ 383.410738][ T9288] option from the mount to silence this warning. [ 383.410738][ T9288] ======================================================= [ 383.446382][ T9288] new mount options do not match the existing superblock, will be ignored [ 383.668686][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 383.977550][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.032365][ T5868] gspca_stk1135: reg_w 0xd err -110 [ 384.038629][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.055322][ T9290] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 384.077906][ T5868] gspca_stk1135: Sensor write failed [ 384.083465][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.089796][ T5868] gspca_stk1135: Sensor write failed [ 384.095161][ T9290] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.881'. [ 384.104412][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.110880][ T5868] gspca_stk1135: Sensor read failed [ 384.116096][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.122747][ T5868] gspca_stk1135: Sensor read failed [ 384.127946][ T5868] gspca_stk1135: Detected sensor type unknown (0x0) [ 384.134587][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.140965][ T5868] gspca_stk1135: Sensor read failed [ 384.146172][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.160544][ T5868] gspca_stk1135: Sensor read failed [ 384.165992][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.172401][ T5868] gspca_stk1135: Sensor write failed [ 384.177889][ T5868] gspca_stk1135: serial bus timeout: status=0x00 [ 384.184383][ T5868] gspca_stk1135: Sensor write failed [ 384.190083][ T5868] stk1135 4-1:64.0: probe with driver stk1135 failed with error -110 [ 384.247771][ T46] usb 2-1: USB disconnect, device number 24 [ 384.263031][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.411988][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.623115][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.879'. [ 384.646561][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.881'. [ 384.829699][ T5868] usb 4-1: USB disconnect, device number 24 [ 384.847778][ T7197] udevd[7197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.873328][ T46] kernel write not supported for file /624/projid_map (pid: 46 comm: kworker/1:1) [ 385.457427][ T9311] syz.1.884: attempt to access beyond end of device [ 385.457427][ T9311] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 385.478783][ T9311] syz.1.884: attempt to access beyond end of device [ 385.478783][ T9311] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 385.527850][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 385.561364][ T9311] syz.1.884: attempt to access beyond end of device [ 385.561364][ T9311] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 385.566351][ T9304] sp0: Synchronizing with TNC [ 385.756585][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 385.773714][ T9311] syz.1.884: attempt to access beyond end of device [ 385.773714][ T9311] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 386.575547][ T9303] [U] [ 386.661235][ T9311] syz.1.884: attempt to access beyond end of device [ 386.661235][ T9311] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 386.697391][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 386.750386][ T9311] syz.1.884: attempt to access beyond end of device [ 386.750386][ T9311] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 386.772043][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 386.811283][ T9311] syz.1.884: attempt to access beyond end of device [ 386.811283][ T9311] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 386.862155][ T9311] syz.1.884: attempt to access beyond end of device [ 386.862155][ T9311] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 386.878954][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 386.885399][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 386.908356][ T9311] syz.1.884: attempt to access beyond end of device [ 386.908356][ T9311] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 386.927553][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 386.931211][ T8] usb 3-1: USB disconnect, device number 25 [ 386.950785][ T9311] syz.1.884: attempt to access beyond end of device [ 386.950785][ T9311] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 387.030502][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 387.071985][ T9311] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 387.099170][ T9311] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 388.625118][ T9360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.369363][ T9374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.895'. [ 390.526039][ T9378] 9pnet_fd: Insufficient options for proto=fd [ 391.896656][ T9380] vivid-003: disconnect [ 392.219155][ T5868] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.320410][ T46] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 392.399290][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.421618][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.437184][ T5868] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 392.449915][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.603868][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.628083][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.641120][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.681082][ T5868] usb 4-1: config 0 descriptor?? [ 392.709899][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.722867][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.750483][ T46] usb 5-1: Product: syz [ 392.754703][ T46] usb 5-1: Manufacturer: syz [ 392.766351][ T46] usb 5-1: SerialNumber: syz [ 392.938254][ T9407] FAULT_INJECTION: forcing a failure. [ 392.938254][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 392.951180][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.0.904 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 392.961777][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.971825][ T9407] Call Trace: [ 392.975093][ T9407] [ 392.978017][ T9407] dump_stack_lvl+0x16c/0x1f0 [ 392.982691][ T9407] should_fail_ex+0x497/0x5b0 [ 392.987362][ T9407] ? fs_reclaim_acquire+0xae/0x150 [ 392.992463][ T9407] should_failslab+0xc2/0x120 [ 392.997133][ T9407] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 393.002928][ T9407] ? __alloc_skb+0x2b1/0x380 [ 393.007520][ T9407] __alloc_skb+0x2b1/0x380 [ 393.011940][ T9407] ? __pfx___alloc_skb+0x10/0x10 [ 393.016881][ T9407] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 393.022855][ T9407] netlink_alloc_large_skb+0x69/0x130 [ 393.028225][ T9407] netlink_sendmsg+0x689/0xd70 [ 393.032986][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.038269][ T9407] sock_write_iter+0x4fe/0x5b0 [ 393.043036][ T9407] ? __pfx_sock_write_iter+0x10/0x10 [ 393.048318][ T9407] ? bpf_lsm_file_permission+0x9/0x10 [ 393.053681][ T9407] ? security_file_permission+0x71/0x210 [ 393.059307][ T9407] vfs_write+0x5ae/0x1150 [ 393.063623][ T9407] ? __pfx_sock_write_iter+0x10/0x10 [ 393.068901][ T9407] ? __pfx_vfs_write+0x10/0x10 [ 393.073653][ T9407] ? __fget_files+0x40/0x3a0 [ 393.078244][ T9407] ksys_write+0x207/0x250 [ 393.082562][ T9407] ? __pfx_ksys_write+0x10/0x10 [ 393.087405][ T9407] do_syscall_64+0xcd/0x250 [ 393.091901][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.097785][ T9407] RIP: 0033:0x7f72c8185d29 [ 393.102186][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.121779][ T9407] RSP: 002b:00007f72c8f7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.130182][ T9407] RAX: ffffffffffffffda RBX: 00007f72c8376080 RCX: 00007f72c8185d29 [ 393.138150][ T9407] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000008 [ 393.146113][ T9407] RBP: 00007f72c8f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.154068][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.162030][ T9407] R13: 0000000000000000 R14: 00007f72c8376080 R15: 00007fffed819c08 [ 393.169998][ T9407] [ 393.716901][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.735244][ T9410] FAULT_INJECTION: forcing a failure. [ 393.735244][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.756846][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.774674][ T9410] CPU: 0 UID: 0 PID: 9410 Comm: syz.3.901 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 393.785300][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.795368][ T9410] Call Trace: [ 393.798656][ T9410] [ 393.801595][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 393.806293][ T9410] should_fail_ex+0x497/0x5b0 [ 393.810992][ T9410] _copy_from_user+0x2e/0xd0 [ 393.815601][ T9410] kstrtouint_from_user+0xd7/0x1c0 [ 393.820723][ T9410] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 393.826470][ T9410] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 393.832120][ T9410] proc_fail_nth_write+0x84/0x250 [ 393.837151][ T9410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 393.842776][ T9410] ? ksys_write+0x12b/0x250 [ 393.847273][ T9410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 393.852899][ T9410] vfs_write+0x24c/0x1150 [ 393.857221][ T9410] ? __fget_files+0x1fc/0x3a0 [ 393.861886][ T9410] ? __pfx___mutex_lock+0x10/0x10 [ 393.866904][ T9410] ? __pfx_vfs_write+0x10/0x10 [ 393.871665][ T9410] ? __fget_files+0x206/0x3a0 [ 393.876336][ T9410] ksys_write+0x12b/0x250 [ 393.880667][ T9410] ? __pfx_ksys_write+0x10/0x10 [ 393.885518][ T9410] do_syscall_64+0xcd/0x250 [ 393.890014][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.895917][ T9410] RIP: 0033:0x7feefb9847df [ 393.900319][ T9410] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 393.919919][ T9410] RSP: 002b:00007feefc6fb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 393.928320][ T9410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feefb9847df [ 393.936280][ T9410] RDX: 0000000000000001 RSI: 00007feefc6fb0a0 RDI: 000000000000000e [ 393.944241][ T9410] RBP: 00007feefc6fb090 R08: 0000000000000000 R09: 0000000000000014 [ 393.952204][ T9410] R10: 0000000000044010 R11: 0000000000000293 R12: 0000000000000001 [ 393.960162][ T9410] R13: 0000000000000000 R14: 00007feefbb76080 R15: 00007ffeb59cf608 [ 393.968131][ T9410] [ 393.976699][ T46] usb 5-1: 0:2 : does not exist [ 394.059502][ T9376] vivid-003: reconnect [ 394.086615][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 394.112895][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.124636][ T46] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 394.174632][ T5868] usb 4-1: USB disconnect, device number 25 [ 394.227012][ T46] usb 5-1: USB disconnect, device number 36 [ 394.246415][ T9414] FAULT_INJECTION: forcing a failure. [ 394.246415][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.263456][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.3.907 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 394.274072][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.284135][ T9414] Call Trace: [ 394.287416][ T9414] [ 394.290355][ T9414] dump_stack_lvl+0x16c/0x1f0 [ 394.295053][ T9414] should_fail_ex+0x497/0x5b0 [ 394.299751][ T9414] _copy_from_user+0x2e/0xd0 [ 394.304363][ T9414] copy_msghdr_from_user+0x99/0x160 [ 394.309573][ T9414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.315389][ T9414] ? __pfx___lock_acquire+0x10/0x10 [ 394.320606][ T9414] ___sys_recvmsg+0xdc/0x1a0 [ 394.325210][ T9414] ? __pfx____sys_recvmsg+0x10/0x10 [ 394.330416][ T9414] ? __pfx_lock_release+0x10/0x10 [ 394.335451][ T9414] ? trace_lock_acquire+0x14e/0x1f0 [ 394.340682][ T9414] do_recvmmsg+0x2f8/0x740 [ 394.345107][ T9414] ? __pfx_do_recvmmsg+0x10/0x10 [ 394.350046][ T9414] ? vfs_write+0x306/0x1150 [ 394.354560][ T9414] ? __mutex_unlock_slowpath+0x164/0x690 [ 394.360214][ T9414] ? __fget_files+0x206/0x3a0 [ 394.364903][ T9414] __x64_sys_recvmmsg+0x239/0x290 [ 394.369938][ T9414] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 394.375505][ T9414] do_syscall_64+0xcd/0x250 [ 394.380025][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.385935][ T9414] RIP: 0033:0x7feefb985d29 [ 394.390359][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.409981][ T9414] RSP: 002b:00007feefc71c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 394.418425][ T9414] RAX: ffffffffffffffda RBX: 00007feefbb75fa0 RCX: 00007feefb985d29 [ 394.426409][ T9414] RDX: 0000000000000001 RSI: 00000000200030c0 RDI: 0000000000000004 [ 394.434387][ T9414] RBP: 00007feefc71c090 R08: 0000000000000000 R09: 0000000000000000 [ 394.442372][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.450353][ T9414] R13: 0000000000000000 R14: 00007feefbb75fa0 R15: 00007ffeb59cf608 [ 394.458351][ T9414] [ 394.477112][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.732148][ T9421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9421 comm=syz.0.909 [ 396.781172][ T9439] Process accounting resumed [ 397.453883][ T9439] Process accounting resumed [ 397.900260][ T9451] warning: `syz.2.919' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 398.348213][ T9453] netlink: 'syz.3.920': attribute type 2 has an invalid length. [ 398.356010][ T9453] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 398.425317][ T968] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 398.493511][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 398.932986][ T9453] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 399.300319][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 399.359704][ T968] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.396889][ T968] usb 1-1: config 179 has no interface number 0 [ 399.433760][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.477500][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 399.574669][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.617769][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 399.660003][ T968] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 399.750308][ T968] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.840969][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.876990][ T9466] vivid-004: disconnect [ 400.160495][ T9448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.396043][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 401.867974][ T5868] usb 1-1: USB disconnect, device number 32 [ 401.867974][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 401.868106][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 401.891260][ T5868] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 402.470142][ T5868] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 402.867369][ T9465] vivid-004: reconnect [ 403.050125][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 403.061560][ T5868] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.072027][ T5868] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 403.117398][ T9492] ntfs3(nullb0): Primary boot signature is not NTFS. [ 403.125132][ T9492] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 403.142188][ T9492] bridge0: port 3(erspan0) entered blocking state [ 403.148917][ T9492] bridge0: port 3(erspan0) entered disabled state [ 403.156215][ T9492] erspan0: entered allmulticast mode [ 403.166599][ T9492] erspan0: entered promiscuous mode [ 403.199125][ T5868] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 403.825374][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 403.832098][ T5868] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 403.841169][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.953241][ T5868] usb 1-1: config 0 descriptor?? [ 404.008073][ T29] audit: type=1400 audit(1735546410.385:492): avc: denied { module_load } for pid=9480 comm="syz.2.925" path="/sys/power/image_size" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 404.826177][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.837192][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.936641][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'. [ 405.608649][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.935'. [ 405.975996][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 405.990168][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 406.029080][ T5868] usb 1-1: USB disconnect, device number 33 [ 406.700355][ T5868] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 406.956923][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.548821][ T5868] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.658904][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.709870][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.721896][ T9535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 407.732664][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.300365][ T5867] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 408.598040][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 409.278333][ T5867] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 409.373815][ T5867] usb 4-1: config 0 has no interface number 0 [ 409.440632][ T5867] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 410.220945][ T8] usb 1-1: USB disconnect, device number 34 [ 410.289436][ T5867] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 410.298611][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.306753][ T5867] usb 4-1: Product: syz [ 410.311009][ T5867] usb 4-1: Manufacturer: syz [ 410.315614][ T5867] usb 4-1: SerialNumber: syz [ 410.322353][ T5867] usb 4-1: config 0 descriptor?? [ 410.423939][ T9561] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 410.453156][ T5867] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 410.470287][ T5867] em28xx 4-1:0.132: Video interface 132 found: bulk [ 410.477531][ T29] audit: type=1400 audit(1735546417.755:493): avc: denied { read } for pid=9574 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 410.650403][ T968] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 411.380195][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 411.394497][ T968] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 411.413760][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.430305][ T46] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 411.435946][ T968] usb 3-1: Product: syz [ 411.473537][ T968] usb 3-1: Manufacturer: syz [ 411.478170][ T968] usb 3-1: SerialNumber: syz [ 411.532046][ T5867] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 411.614235][ T5867] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 412.220978][ T968] usb 3-1: config 0 descriptor?? [ 412.263279][ T5867] em28xx 4-1:0.132: board has no eeprom [ 412.270887][ T46] usb 5-1: config 1 interface 0 altsetting 18 bulk endpoint 0x1 has invalid maxpacket 1024 [ 412.282060][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 412.341447][ T5867] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 412.349302][ T5867] em28xx 4-1:0.132: analog set to bulk mode. [ 412.373249][ T25] em28xx 4-1:0.132: Registering V4L2 extension [ 412.388444][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 412.404386][ T5867] usb 4-1: USB disconnect, device number 26 [ 412.432090][ T5867] em28xx 4-1:0.132: Disconnecting em28xx [ 412.579326][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.587788][ T46] usb 5-1: Product: ᠇ [ 412.592293][ T46] usb 5-1: Manufacturer: 鷔斳呐냡᱀䘊킉勜娯檇碧ូ퀇뙾唾ῂ碖궹⎏昝✛膗沎羽ຼ纓짿曏㴚飠燠隓╽齤掽ﳋ욦鐴뙦鍳꯭娏杞௞㹄饡빳쬜涙ᣩ큚ﱢ떧ん칸쪖⚎婟褸ⅈ緲넀ꀶน췬愽ｴ竫ㄓꭏ᪁㳵鹽衼봹顪Ǚ愯舐捸㩯駆ꡒ濕䚲ⵣ㯦殉͘싾骬箋钿 [ 412.624316][ T46] usb 5-1: SerialNumber: syz [ 412.636148][ T9580] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 412.663174][ T968] usb 3-1: can't set config #0, error -71 [ 412.677553][ T968] usb 3-1: USB disconnect, device number 26 [ 412.684649][ T29] audit: type=1400 audit(1735546419.975:494): avc: denied { watch watch_reads } for pid=9586 comm="syz.0.953" path="/proc/666/net/udplite6" dev="proc" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 412.850428][ T9579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.859043][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.869898][ T29] audit: type=1400 audit(1735546420.145:495): avc: denied { ioctl } for pid=9574 comm="syz.4.950" path="cgroup:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.917147][ T25] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 412.950652][ T25] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 413.107943][ T25] em28xx 4-1:0.132: No AC97 audio processor [ 413.125920][ T25] usb 4-1: Decoder not found [ 413.130562][ T25] em28xx 4-1:0.132: failed to create media graph [ 413.136934][ T25] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 413.146895][ T25] em28xx 4-1:0.132: Remote control support is not available for this card. [ 413.155789][ T5867] em28xx 4-1:0.132: Closing input extension [ 413.165327][ T5867] em28xx 4-1:0.132: Freeing device [ 413.948555][ T46] usb 5-1: USB disconnect, device number 37 [ 414.735003][ T9609] syz.2.958 uses obsolete (PF_INET,SOCK_PACKET) [ 415.133308][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 418.699007][ T9643] Process accounting resumed [ 418.850344][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 419.288674][ T9643] Process accounting resumed [ 419.403078][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.420246][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.767381][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.987616][ T9653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.994928][ T9653] IPv6: NLM_F_CREATE should be set when creating new route [ 420.031448][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.073074][ T5868] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 420.315396][ T9642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.352868][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 420.413324][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.426000][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.459653][ T9655] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 420.720230][ T5868] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 420.940231][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.950144][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.115295][ T9652] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 421.220136][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.438415][ T9665] raw_sendmsg: syz.1.975 forgot to set AF_INET. Fix it! [ 421.842503][ T5868] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 421.860738][ T46] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 421.893680][ T5864] usb 5-1: USB disconnect, device number 38 [ 422.050348][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 422.057381][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.067855][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.077599][ T5868] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 422.086020][ T5868] usb 3-1: config 0 has no interface number 0 [ 422.106464][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.124358][ T5868] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 422.136642][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.183304][ T46] usb 4-1: Product: syz [ 422.191189][ T5868] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 422.200943][ T46] usb 4-1: Manufacturer: syz [ 422.205798][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.214475][ T46] usb 4-1: SerialNumber: syz [ 422.221316][ T5868] usb 3-1: Product: syz [ 422.275906][ T5868] usb 3-1: Manufacturer: syz [ 422.282864][ T5868] usb 3-1: SerialNumber: syz [ 422.314367][ T5868] usb 3-1: config 0 descriptor?? [ 422.391200][ T9669] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.476191][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.511758][ T5868] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 422.528128][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.559116][ T5868] em28xx 3-1:0.132: Video interface 132 found: bulk [ 422.625008][ T29] audit: type=1400 audit(1735546429.905:496): avc: denied { read } for pid=9685 comm="syz.4.976" lport=56187 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.665375][ T46] usb 4-1: 0:2 : does not exist [ 422.695442][ T29] audit: type=1400 audit(1735546429.955:497): avc: denied { setopt } for pid=9685 comm="syz.4.976" lport=56187 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.728864][ T9686] netlink: 'syz.4.976': attribute type 3 has an invalid length. [ 422.850172][ T29] audit: type=1400 audit(1735546429.955:498): avc: denied { read } for pid=9685 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 422.984102][ T5868] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 423.341338][ T46] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 423.358172][ T46] usb 4-1: USB disconnect, device number 27 [ 423.633508][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.682873][ T9708] ebt_among: dst integrity fail: 100 [ 423.890889][ T5868] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 423.902412][ T5868] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 423.908925][ T5868] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 424.063677][ T5868] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 424.110013][ T5868] em28xx 3-1:0.132: analog set to bulk mode. [ 424.139316][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 424.160450][ T9718] vivid-003: disconnect [ 424.185771][ T25] em28xx 3-1:0.132: Registering V4L2 extension [ 424.519028][ T5868] usb 3-1: USB disconnect, device number 27 [ 424.525842][ T5868] em28xx 3-1:0.132: Disconnecting em28xx [ 425.140779][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 425.156532][ T46] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 425.183436][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.205518][ T46] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 425.217367][ T46] usb 4-1: config 0 has no interface number 1 [ 425.223851][ T46] usb 4-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 425.289381][ T25] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 425.316842][ T25] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 425.325101][ T25] em28xx 3-1:0.132: No AC97 audio processor [ 425.338687][ T25] usb 3-1: Decoder not found [ 425.343371][ T25] em28xx 3-1:0.132: failed to create media graph [ 425.349733][ T25] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 425.358931][ T25] em28xx 3-1:0.132: Remote control support is not available for this card. [ 425.367759][ T46] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 425.376952][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.385726][ T46] usb 4-1: Product: syz [ 425.389992][ T46] usb 4-1: Manufacturer: syz [ 425.395985][ T46] usb 4-1: SerialNumber: syz [ 426.022428][ T5868] em28xx 3-1:0.132: Closing input extension [ 426.073093][ T5868] em28xx 3-1:0.132: Freeing device [ 426.093765][ T46] usb 4-1: config 0 descriptor?? [ 426.668782][ T46] kaweth 4-1:0.235: Firmware present in device. [ 426.678914][ T29] audit: type=1400 audit(1735546433.935:499): avc: denied { override_creds } for pid=9701 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 426.869339][ T46] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 426.878443][ T46] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 426.911012][ T46] kaweth 4-1:0.0: Firmware present in device. [ 427.117837][ T25] usb 1-1: USB disconnect, device number 35 [ 427.125802][ T46] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 427.134548][ T46] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 427.145590][ T46] usb 4-1: USB disconnect, device number 28 [ 427.795521][ T9718] vivid-003: reconnect [ 427.813377][ T9755] Process accounting resumed [ 427.850110][ T9755] Process accounting resumed [ 428.465230][ T9746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.049801][ T9782] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 429.416777][ T5864] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 429.932950][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 429.947615][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.950263][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 429.986737][ T5864] usb 3-1: config 0 descriptor?? [ 430.012729][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 430.081869][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 430.107249][ T29] audit: type=1400 audit(1735546437.355:500): avc: denied { accept } for pid=9803 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 430.359273][ T5864] usb 3-1: USB disconnect, device number 28 [ 430.690153][ T25] usb 4-1: device descriptor read/64, error -71 [ 430.760663][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 431.043824][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 431.051974][ T46] usb 5-1: device descriptor read/64, error -71 [ 431.229228][ T9824] Process accounting resumed [ 431.247833][ T25] usb 4-1: device descriptor read/64, error -71 [ 431.290599][ T46] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 431.361029][ T25] usb usb4-port1: attempt power cycle [ 431.430336][ T46] usb 5-1: device descriptor read/64, error -71 [ 431.541935][ T46] usb usb5-port1: attempt power cycle [ 431.764897][ T9824] Process accounting resumed [ 431.819004][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 431.851305][ T25] usb 4-1: device descriptor read/8, error -71 [ 432.090462][ T46] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 432.253092][ T9840] Process accounting resumed [ 432.692471][ T9840] Process accounting resumed [ 432.959849][ T46] usb 5-1: device descriptor read/8, error -71 [ 433.118843][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 433.476874][ T25] usb 4-1: device descriptor read/8, error -71 [ 433.649107][ T25] usb usb4-port1: unable to enumerate USB device [ 433.980423][ T46] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 434.085677][ T46] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 434.150314][ T5868] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 434.206590][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.272134][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.282847][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.291413][ T46] usb 5-1: Product: syz [ 434.295844][ T46] usb 5-1: Manufacturer: ఌ [ 434.300871][ T46] usb 5-1: SerialNumber: syz [ 434.311749][ T5868] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 434.321423][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.337757][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 434.372322][ T5868] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 434.392411][ T5868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.403293][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.411460][ T5868] usb 3-1: Product: syz [ 434.416088][ T5868] usb 3-1: Manufacturer: syz [ 434.420965][ T5868] usb 3-1: SerialNumber: syz [ 435.140130][ T5864] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 435.198792][ T9877] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 435.311775][ T5864] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.335455][ T5864] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.351814][ T5864] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.361800][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.373780][ T9873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.250188][ T968] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 436.430259][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 436.441994][ T968] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 436.476738][ T968] usb 4-1: config 0 has no interface number 0 [ 436.507771][ T968] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 436.636185][ T968] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 436.640268][ T5868] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 436.653369][ T5868] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 436.654636][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.662059][ T5868] usb 3-1: found format II with max.bitrate = 128, frame size=0 [ 436.677831][ T5868] usb 3-1: 2:1: All rates were zero [ 436.738821][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.755840][ T968] usb 4-1: Product: syz [ 436.760421][ T968] usb 4-1: Manufacturer: syz [ 436.780405][ T968] usb 4-1: SerialNumber: syz [ 437.042079][ T9902] vivid-000: disconnect [ 437.133681][ T968] usb 4-1: config 0 descriptor?? [ 437.155144][ T9886] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 437.163839][ T968] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 437.173622][ T968] em28xx 4-1:0.132: Video interface 132 found: bulk [ 437.336803][ T5868] usb 3-1: USB disconnect, device number 29 [ 437.873075][ T46] usb 5-1: 0:2 : does not exist [ 437.920706][ T5864] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.923717][ T46] usb 5-1: USB disconnect, device number 42 [ 437.997061][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.070167][ T968] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 438.283370][ T9919] fuse: Unknown parameter '' [ 438.300223][ T9919] @: renamed from veth0_vlan (while UP) [ 438.432214][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.892393][ T968] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 438.924785][ T968] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 438.934158][ T968] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 439.013324][ T968] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.037925][ T968] em28xx 4-1:0.132: analog set to bulk mode. [ 439.069408][ T5866] em28xx 4-1:0.132: Registering V4L2 extension [ 439.122242][ T968] usb 4-1: USB disconnect, device number 33 [ 439.135339][ T968] em28xx 4-1:0.132: Disconnecting em28xx [ 439.223593][ T5868] usb 2-1: USB disconnect, device number 25 [ 439.538638][ T5866] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 439.546819][ T5866] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 439.554247][ T5866] em28xx 4-1:0.132: No AC97 audio processor [ 439.566881][ T5866] usb 4-1: Decoder not found [ 439.571752][ T5866] em28xx 4-1:0.132: failed to create media graph [ 439.579105][ T5866] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 439.603080][ T5866] em28xx 4-1:0.132: Remote control support is not available for this card. [ 439.629100][ T968] em28xx 4-1:0.132: Closing input extension [ 439.671604][ T9895] vivid-000: reconnect [ 439.676459][ T968] em28xx 4-1:0.132: Freeing device [ 439.956519][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.170449][ T5866] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 440.348944][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.409096][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.454102][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.468766][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.498912][ T5866] usb 3-1: Product: syz [ 440.510307][ T5866] usb 3-1: Manufacturer: syz [ 440.515096][ T5866] usb 3-1: SerialNumber: syz [ 440.544681][ T29] audit: type=1400 audit(1735546447.825:501): avc: denied { watch watch_reads } for pid=9958 comm="syz.3.1023" path="/proc/667/coredump_filter" dev="proc" ino=23922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 440.600333][ T29] audit: type=1326 audit(1735546447.855:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="syz.3.1023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feefb985d29 code=0x0 [ 440.738377][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.750551][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.783392][ T5866] usb 3-1: 0:2 : does not exist [ 440.812816][ T5866] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 440.885113][ T9969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.953746][ T5866] usb 3-1: USB disconnect, device number 30 [ 441.661109][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.052197][T10018] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 443.170362][ T5868] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 443.671592][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.080873][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.092605][T10033] ebt_among: dst integrity fail: 100 [ 444.116067][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.130414][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.140703][ T5868] usb 2-1: Product: syz [ 444.144887][ T5868] usb 2-1: Manufacturer: syz [ 444.149615][ T5868] usb 2-1: SerialNumber: syz [ 445.210565][ T46] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 445.480299][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 445.508576][ T46] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 445.517123][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.546604][ T46] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 445.559531][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.628722][ T46] usb 4-1: config 0 has no interface number 1 [ 445.634941][ T46] usb 4-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 445.749754][ T46] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 445.768937][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.787677][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.806110][ T46] usb 4-1: Product: syz [ 445.820088][ T46] usb 4-1: Manufacturer: syz [ 445.824757][ T46] usb 4-1: SerialNumber: syz [ 445.834550][ T46] usb 4-1: config 0 descriptor?? [ 445.844098][ T5868] usb 2-1: 0:2 : does not exist [ 445.888683][ T5868] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 445.922978][ T5868] usb 2-1: USB disconnect, device number 26 [ 446.266719][ T46] kaweth 4-1:0.235: Firmware present in device. [ 446.429979][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.514874][ T46] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 446.545514][ T46] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 446.742022][ T46] kaweth 4-1:0.0: Firmware present in device. [ 446.760362][ T46] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 446.769114][ T46] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 446.831645][ T46] usb 4-1: USB disconnect, device number 34 [ 447.166685][T10069] fuse: Bad value for 'fd' [ 447.665007][ T29] audit: type=1400 audit(1735546454.945:503): avc: denied { create } for pid=10073 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 448.502206][T10097] [ 448.504545][T10097] ============================= [ 448.509366][T10097] [ BUG: Invalid wait context ] [ 448.514183][T10097] 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Not tainted [ 448.521260][T10097] ----------------------------- [ 448.526074][T10097] iou-wrk-10079/10097 is trying to lock: [ 448.531690][T10097] ffff888032468018 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 448.541331][T10097] other info that might help us debug this: [ 448.547187][T10097] context-{5:5} [ 448.550618][T10097] 3 locks held by iou-wrk-10079/10097: [ 448.556055][T10097] #0: ffff8880617dd928 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0 [ 448.565076][T10097] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 448.574442][T10097] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 448.584172][T10097] stack backtrace: [ 448.587874][T10097] CPU: 1 UID: 0 PID: 10097 Comm: iou-wrk-10079 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 448.598863][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.608895][T10097] Call Trace: [ 448.612156][T10097] [ 448.615079][T10097] dump_stack_lvl+0x116/0x1f0 [ 448.619744][T10097] __lock_acquire+0x878/0x3c40 [ 448.624486][T10097] ? __pfx___lock_acquire+0x10/0x10 [ 448.629674][T10097] ? __pfx___lock_acquire+0x10/0x10 [ 448.634847][T10097] ? __pfx___lock_acquire+0x10/0x10 [ 448.640029][T10097] ? hlock_class+0x4e/0x130 [ 448.644536][T10097] lock_acquire.part.0+0x11b/0x380 [ 448.649628][T10097] ? __lock_task_sighand+0xc2/0x340 [ 448.654809][T10097] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 448.660424][T10097] ? rcu_is_watching+0x12/0xc0 [ 448.665175][T10097] ? trace_lock_acquire+0x14e/0x1f0 [ 448.670358][T10097] ? trace_lock_acquire+0x14e/0x1f0 [ 448.675544][T10097] ? __lock_task_sighand+0xc2/0x340 [ 448.680719][T10097] ? lock_acquire+0x2f/0xb0 [ 448.685195][T10097] ? __lock_task_sighand+0xc2/0x340 [ 448.690370][T10097] _raw_spin_lock_irqsave+0x3a/0x60 [ 448.695552][T10097] ? __lock_task_sighand+0xc2/0x340 [ 448.700724][T10097] __lock_task_sighand+0xc2/0x340 [ 448.705720][T10097] group_send_sig_info+0x290/0x300 [ 448.710820][T10097] ? __pfx_group_send_sig_info+0x10/0x10 [ 448.716447][T10097] ? __pfx___lock_acquire+0x10/0x10 [ 448.721630][T10097] ? __pfx_avc_has_perm+0x10/0x10 [ 448.726636][T10097] ? lock_acquire+0x2f/0xb0 [ 448.731117][T10097] bpf_send_signal_common+0x3d3/0x530 [ 448.736482][T10097] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 448.742347][T10097] ? trace_lock_acquire+0x14e/0x1f0 [ 448.747523][T10097] ? bpf_trace_run2+0x1c2/0x590 [ 448.752353][T10097] bpf_send_signal+0x1d/0x30 [ 448.756914][T10097] bpf_prog_631417f49dd64198+0x25/0x48 [ 448.762362][T10097] bpf_trace_run2+0x231/0x590 [ 448.767012][T10097] ? __pfx_bpf_trace_run2+0x10/0x10 [ 448.772185][T10097] ? hlock_class+0x4e/0x130 [ 448.776664][T10097] ? __lock_acquire+0x15a9/0x3c40 [ 448.781663][T10097] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 448.787879][T10097] __bpf_trace_contention_end+0xca/0x110 [ 448.793485][T10097] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 448.799696][T10097] ? hlock_class+0x4e/0x130 [ 448.804179][T10097] ? __lock_acquire+0x15a9/0x3c40 [ 448.809177][T10097] __traceiter_contention_end+0x5a/0xa0 [ 448.814695][T10097] trace_contention_end.constprop.0+0xf0/0x170 [ 448.820825][T10097] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 448.826869][T10097] ? io_worker_handle_work+0x800/0x1680 [ 448.832393][T10097] ? __pfx_lock_release+0x10/0x10 [ 448.837394][T10097] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 448.843956][T10097] ? lock_acquire.part.0+0x11b/0x380 [ 448.849215][T10097] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 448.854819][T10097] do_raw_spin_lock+0x210/0x2c0 [ 448.859646][T10097] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.864992][T10097] ? lock_acquire+0x2f/0xb0 [ 448.869468][T10097] ? io_wq_worker+0x34c/0xdf0 [ 448.874127][T10097] io_wq_worker+0x34c/0xdf0 [ 448.878615][T10097] ? __pfx_io_wq_worker+0x10/0x10 [ 448.883616][T10097] ? irqentry_exit+0x3b/0x90 [ 448.888182][T10097] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.893355][T10097] ? __pfx_io_wq_worker+0x10/0x10 [ 448.898357][T10097] ? __pfx_io_wq_worker+0x10/0x10 [ 448.903356][T10097] ret_from_fork+0x45/0x80 [ 448.907744][T10097] ? __pfx_io_wq_worker+0x10/0x10 [ 448.912745][T10097] ret_from_fork_asm+0x1a/0x30 [ 448.917488][T10097] [ 448.920588][ C1] vkms_vblank_simulate: vblank timer overrun