last executing test programs: 6m18.343832024s ago: executing program 2 (id=244): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', &(0x7f0000000300)=""/205, 0xcd) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) socket$inet(0x2, 0x2000000080005, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cec", 0x97}], 0x1}}], 0x1, 0x240080e4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000"], 0x30}}, 0x0) socket$inet6(0xa, 0x3, 0x7) capset(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000100), 0x4) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) syz_usb_connect(0x5, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009863341008043440cddd0102030109022200010000000009041100000e0101000824020128030118"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x27, 0x0, 0x10001, 0x0, 0xd, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x4, 0x8, 0x5, 0x0, 0x80000044}}) 6m15.135166997s ago: executing program 2 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r3 = socket$inet_dccp(0x2, 0x6, 0x0) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14) 6m12.247051887s ago: executing program 2 (id=264): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) fanotify_init(0x0, 0x80000) unshare(0x16060780) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=']) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 6m11.584641139s ago: executing program 2 (id=266): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x293}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xe1}, 0x1}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0x9, {0xb}, 0x3}, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000000c0)={r8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000000)=0x23, 0x0, 0x4) 6m8.29635268s ago: executing program 2 (id=275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x2, 0x3, 0x2}, {0x4, 0x4, 0xe, 0x9}], 0x10, 0x37, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x2, 0x3, 0x2}, {0x4, 0x4, 0xe, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) socket$kcm(0x25, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x818405, &(0x7f0000000480)=ANY=[@ANYBLOB="ff003df211a457fc8621e1e681fda47ccf3aac42ed0aca42ac62c43fd535094b95f230d5ecacbb4fb3fd00b736701f2daea0fd1565ff03000013b1f5f7add8efe141fa0e5fecd1a48ab44341abee187b4e91110fca22c7c333b058abf7116b79bfecde5338e42942606ea2f16dec0c25f84006e0d8e5ff917feff11b81d4ff84140b3ae01d46616377941c7f8f872fd6e793184278280d3092881100e6ce9af6a0326c0997e7a4ab7f3d435f000000000000048ef4ce6621b6264c3d3fc5f8038053ac04", @ANYRES16=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x1008098, 0x2, 0x0, 0x0, 0x8fb}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x1008098, 0x2, 0x0, 0x0, 0x8fb}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x140) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)) (async) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r6, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r4, r6, 0x6700000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 6m6.65435925s ago: executing program 2 (id=280): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) write$usbip_server(r2, &(0x7f0000000000)=ANY=[], 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003031e000500e1000c04000700800003", 0x23) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1001"], 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x141a82, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 6m6.322627127s ago: executing program 32 (id=280): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) write$usbip_server(r2, &(0x7f0000000000)=ANY=[], 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003031e000500e1000c04000700800003", 0x23) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1001"], 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x141a82, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 11.662220928s ago: executing program 3 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000380)={0x6}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x1050c0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x2, 0x0, 0x22, 0x3}) ioctl$int_in(r7, 0x5452, &(0x7f0000000b00)=0x3) 9.269053698s ago: executing program 1 (id=1477): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007040000140007800800084000000098050014002000000005000100060001"], 0x60}}, 0x20000000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e24d7cbc0390000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x3) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 8.736087119s ago: executing program 3 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @loopback, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0xff, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2009, 0xb280) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x2778f40c, 0x7, 0x4, 0x1}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) memfd_create(&(0x7f00000000c0)='{\x00', 0x5) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x489a, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x80) 8.309714082s ago: executing program 4 (id=1481): openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @vbi={0x800, 0x1, 0x7dc9, 0x3631564e, [0x3ff, 0x7], [0x6, 0x7], 0x108}}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r2, &(0x7f0000000940)="fb090537a14d968cacdcb13a88c4bf3550d67446c078276162a5ebd7e528afea3bd4ad445b09f7e83961072ff13ed9b5b1987e3801bd8b319e4202", &(0x7f00000009c0)=""/59}, 0x20) write$tcp_mem(r2, &(0x7f0000000180)={0x0, 0x20, 0x829, 0x20, 0x3}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x3) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x80000001, 0x9126, '\x00', &(0x7f0000000000)=0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000003, 0x13, r6, 0x2000) write$binfmt_aout(r6, 0x0, 0xffffffdb) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000404000/0x4000)=nil, 0x4000, 0x2000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 7.548423601s ago: executing program 3 (id=1482): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0xa, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000101000000000000"], 0x50}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000640)={{}, "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"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.188896814s ago: executing program 0 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000200)=0x4) write(r1, &(0x7f0000000040)="23aba4c8612c774fcb809028c748aaac26e4f5dee70530c352c64c5ffa83056239a27f8d14d1326d7f134ef6bc186f64263fe06e7a86e9cdd986e3e5857cf43773cf9fd8623c7240c15e37e5b2df48a858debde09ad771e868824c5f80a97104569eed7c807b7ea69efeed6248af75", 0x6f) 7.167788991s ago: executing program 1 (id=1484): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) 6.82987422s ago: executing program 0 (id=1485): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r4, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) 6.332560629s ago: executing program 4 (id=1486): r0 = epoll_create(0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x30000004}) 6.160712906s ago: executing program 1 (id=1487): mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000004240)='devpts\x00', 0x2000480, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) (fail_nth: 2) 6.134839851s ago: executing program 4 (id=1488): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4ed6f, 0x43426}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$l2tp6(r3, &(0x7f00000011c0)={0xa, 0x0, 0xfb30, @local, 0x2f, 0x2}, 0xfffffe8a) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x3, 0x9, 0x4, 0x8, 0x0, r5, 0xfffffb05, '\x00', 0x0, r6, 0x1, 0x4, 0xf, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 5.230414751s ago: executing program 0 (id=1489): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r3, 0x0, 0x9, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x1, 0x4, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0x3], [0xb, 0x0, 0xf, 0x4]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.735614329s ago: executing program 1 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x800}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r6}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x800}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) unshare(0x24020400) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r6}, 0x10) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402"], 0x0) (async) 4.732215567s ago: executing program 0 (id=1492): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00'}}, 0x118) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x54b429119f9f9676) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000fffe00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1100"], 0x144}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.05901998s ago: executing program 3 (id=1493): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5460, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ffffffff0000000001000018010000202069252d328905478fe2807b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008000850000007b000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 3.937674028s ago: executing program 4 (id=1494): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004ac0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00c3000000000000140035007465616d5f736c6176655f310000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000240)={0x7}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x22, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3.883109166s ago: executing program 5 (id=1495): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x90) 3.797214366s ago: executing program 5 (id=1496): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCVHANGUP(r1, 0x541b, 0x1000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x75}, 0x2c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d401, 0x4f) (async) r10 = open(&(0x7f0000000080)='./bus\x00', 0x14d401, 0x4f) ftruncate(r10, 0x2007ffd) sendfile(r3, r9, 0x0, 0x1000a3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) 3.327127228s ago: executing program 0 (id=1497): socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 3.209743044s ago: executing program 5 (id=1498): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) (async, rerun: 32) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4bc26916, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @exit, @generic={0xb4, 0x7, 0x5, 0x200, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.102313449s ago: executing program 1 (id=1499): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0xfd, 0xdd}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.982395036s ago: executing program 5 (id=1500): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r6, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) iopl(0x2) 2.957565052s ago: executing program 4 (id=1501): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20048050, &(0x7f00000003c0)={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'nr0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x7fff, 0x0, '\x00', 0x3}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) r4 = timerfd_create(0x7, 0x0) timerfd_gettime(r4, &(0x7f00000000c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000009000000000000550901000000000095a2dc0000000000184b0000f9ffffff0200e6ffffff0000bf9100000000000056080000010000008500000007000000b7000000000000009500"/96], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = eventfd(0xffff17a8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x0, &(0x7f0000006680)) membarrier(0x40, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x80000001, 0x1, 0x0, r9, 0xd}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x660}}, 0x40010) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffe, 0x0, &(0x7f00000004c0)={0x40, 0x18, 0x5, 0x2}, 0x8, 0xfffffffe, 0x80006, 0x0, 0x0, 0x0, 0x0}) clock_settime(0x5, &(0x7f0000000140)={0x77359400}) 2.081917873s ago: executing program 0 (id=1502): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0x17, 0x1, "88"}, 0x0, 0x0, 0x0, 0x0}) 1.750790662s ago: executing program 3 (id=1503): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0xf, 0x1, 0x0, "566a03491a03ff030000000000008c1d2dbdd86781293a91af348d2c19ca8eda", 0x41414770}) 1.445993016s ago: executing program 5 (id=1504): r0 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xa0c2, 0x51) (fail_nth: 2) 955.075416ms ago: executing program 4 (id=1505): r0 = creat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf253700000008000300", @ANYRES32=r3, @ANYBLOB="08003400cf0000090500180138080000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x24006080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) clock_adjtime(0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200002}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8927, &(0x7f0000000000)={'vlan1\x00', @ifru_addrs=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}}) syz_open_dev$usbfs(&(0x7f0000000700), 0x40000008847, 0xb6600) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x82002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0xffffffffe3ec087b) 819.835548ms ago: executing program 3 (id=1506): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00305d784b2dfe2700"/18], 0x48) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 317.264025ms ago: executing program 1 (id=1507): syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000ff"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082405010202050507"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async) msgget(0x1, 0x606) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000100)=[0x10001], &(0x7f0000000140)=[0xfffffff2, 0x5, 0x98], 0x4, 0x8, 0x4, &(0x7f0000000200)=[0x4, 0x0, 0x8000, 0x2, 0x6, 0x0, 0xb, 0x1ba], &(0x7f0000000240)=[0x6, 0x2, 0x2, 0x3, 0xfffffffe, 0x40, 0x4]}) (async) read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000001300)={{0x0}, 0x0, 0x52}, 0x20) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_DESTROY$hwpt(r6, 0x3b80, &(0x7f0000000340)={0x8, r9}) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="3b7229be80a6ba240f9cc72acee1af5298fcf3a76bc72d4c5bdacccddcefe338692189360a5839e79a3835a90dcb74ade669f7d686b79976f2391610844812a76beecba25889bc7f5dc9f6af77eb2e97a50baa98362312c4b93950998e9fc43a6d3031535cc771c35f1b9bc2eb9dfa5da5739c8af60aa4acb5261d7d44271c5811ef9db2dba8eb79128f08f87c129db2bcf27030903edcc742d1046a35ff80", 0x9f}, {&(0x7f0000000300)}, {&(0x7f0000000180)="d542e35ad6676b91e31d5739629d46d71b548de76b684fa425cbabbc31e873063a46fd723a2452dc4362250aab5977dab7ee02cd7529d44fda12b2a361ad34871610f1208c9714116fbe1e9ebea3a500b0c2dac9eab6d9ccf247fa8ee3bf01020566", 0x62}], 0x3, 0x0, 0x0, 0x5865}, 0x40080) (async) syz_usb_disconnect(r0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000bdb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/184, 0xb8, 0x0, &(0x7f0000000500)=""/101, 0x65}, &(0x7f0000000580)=0x40) 0s ago: executing program 5 (id=1508): getpid() syz_open_dev$sndmidi(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) listen(r0, 0x3) accept(r0, &(0x7f0000000040)=@qipcrtr, 0x0) (fail_nth: 2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) kernel console output (not intermixed with test programs): t(1740920075.712:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 408.405158][ T29] audit: type=1400 audit(1740920076.042:944): avc: denied { watch } for pid=10538 comm="syz.3.1134" path="/223" dev="tmpfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 408.983924][ T29] audit: type=1326 audit(1740920076.612:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.007940][ T29] audit: type=1326 audit(1740920076.612:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.045473][ T29] audit: type=1326 audit(1740920076.612:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.076183][ T29] audit: type=1326 audit(1740920076.612:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.186523][ T29] audit: type=1326 audit(1740920076.612:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.193145][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.210006][ T29] audit: type=1326 audit(1740920076.612:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.5.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e18d169 code=0x7fc00000 [ 409.221221][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.922924][T10567] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 409.963648][T10567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.993616][T10567] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 410.538055][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.703634][ T5869] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 410.827482][ T5868] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 411.419874][ T5919] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 411.493774][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 411.500565][ T5868] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 411.510007][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.533798][ T5868] usb 6-1: config 0 descriptor?? [ 411.592908][ T5869] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 411.603487][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 411.612136][ T5869] usb 5-1: config 0 has no interface number 0 [ 411.621171][ T5919] usb 2-1: config 0 has no interfaces? [ 411.629089][ T5869] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 411.638775][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.647936][ T5869] usb 5-1: Product: syz [ 411.652358][ T5869] usb 5-1: Manufacturer: syz [ 411.657833][ T5869] usb 5-1: SerialNumber: syz [ 411.662678][ T5919] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 411.672616][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 411.681760][ T5869] usb 5-1: config 0 descriptor?? [ 411.694185][ T5919] usb 2-1: Product: syz [ 411.703530][ T5919] usb 2-1: Manufacturer: syz [ 411.708167][ T5919] usb 2-1: SerialNumber: syz [ 411.734110][ T5919] usb 2-1: config 0 descriptor?? [ 411.759133][ T5868] wacom 0003:056A:0045.000A: item fetching failed at offset 3/5 [ 411.780280][ T5868] wacom 0003:056A:0045.000A: parse failed [ 411.790414][ T5868] wacom 0003:056A:0045.000A: probe with driver wacom failed with error -22 [ 411.900781][ T5869] cdc_subset 5-1:0.114: probe with driver cdc_subset failed with error -22 [ 411.957119][T10568] validate_nla: 44 callbacks suppressed [ 411.957137][T10568] netlink: 'syz.5.1141': attribute type 1 has an invalid length. [ 411.980299][ T5869] usb 2-1: USB disconnect, device number 38 [ 411.989223][T10568] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1141'. [ 411.998851][T10568] netlink: 'syz.5.1141': attribute type 1 has an invalid length. [ 412.024560][ T5871] usb 6-1: USB disconnect, device number 24 [ 412.043624][ T5919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 412.158389][ T5868] usb 5-1: USB disconnect, device number 38 [ 412.214087][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 412.220807][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.231795][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 412.243649][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 412.255078][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 412.266322][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.281557][ T5919] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 412.291602][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.299728][ T5919] usb 1-1: Product: syz [ 412.304873][ T5919] usb 1-1: Manufacturer: syz [ 412.309535][ T5919] usb 1-1: SerialNumber: syz [ 412.317964][ T5919] usb 1-1: config 0 descriptor?? [ 412.385135][ T5919] rc_core: IR keymap rc-imon-rsc not found [ 412.391245][ T5919] Registered IR keymap rc-empty [ 412.397242][ T5919] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 412.407979][ T5919] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 412.648677][ T5904] usb 1-1: USB disconnect, device number 30 [ 412.958288][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 412.967303][T10601] openvswitch: netlink: Message has 3 unknown bytes. [ 413.666909][ T5919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.384637][ T5871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.407056][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 414.407070][ T29] audit: type=1326 audit(1740920082.002:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa801f8d169 code=0x7fc00000 [ 414.523837][T10609] GUP no longer grows the stack in syz.3.1151 (10609): 400000004000-400000009000 (400000002000) [ 414.563923][ T29] audit: type=1326 audit(1740920082.002:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa801f8d169 code=0x7fc00000 [ 414.609300][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.3.1151 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 414.609329][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.609342][T10609] Call Trace: [ 414.609349][T10609] [ 414.609357][T10609] dump_stack_lvl+0x16c/0x1f0 [ 414.609393][T10609] gup_vma_lookup+0x1d2/0x220 [ 414.609424][T10609] __get_user_pages+0x236/0x36f0 [ 414.609441][T10609] ? find_held_lock+0x2d/0x110 [ 414.609465][T10609] ? mtree_load+0x30a/0xa40 [ 414.609487][T10609] ? __pfx_lock_release+0x10/0x10 [ 414.609513][T10609] ? __pfx___get_user_pages+0x10/0x10 [ 414.609540][T10609] get_user_pages_remote+0x25e/0xb30 [ 414.609564][T10609] ? __pfx_get_user_pages_remote+0x10/0x10 [ 414.609593][T10609] __access_remote_vm+0x235/0x7a0 [ 414.609622][T10609] ? __pfx___access_remote_vm+0x10/0x10 [ 414.609644][T10609] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 414.609665][T10609] proc_pid_cmdline_read+0x4f5/0x900 [ 414.609696][T10609] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 414.609722][T10609] ? rw_verify_area+0xcf/0x680 [ 414.609748][T10609] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 414.609772][T10609] vfs_readv+0x6c2/0x8a0 [ 414.609794][T10609] ? __pfx___lock_acquire+0x10/0x10 [ 414.609825][T10609] ? __pfx_vfs_readv+0x10/0x10 [ 414.609856][T10609] ? __fget_files+0x1fc/0x3a0 [ 414.609883][T10609] ? __pfx_lock_release+0x10/0x10 [ 414.609920][T10609] ? __fget_files+0x206/0x3a0 [ 414.609940][T10609] ? do_preadv+0x1b1/0x270 [ 414.609957][T10609] do_preadv+0x1b1/0x270 [ 414.609975][T10609] ? __pfx_do_preadv+0x10/0x10 [ 414.609997][T10609] do_syscall_64+0xcd/0x250 [ 414.610013][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.610030][T10609] RIP: 0033:0x7ff14438d169 [ 414.610041][T10609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.610053][T10609] RSP: 002b:00007ff1451c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 414.610065][T10609] RAX: ffffffffffffffda RBX: 00007ff1445a5fa0 RCX: 00007ff14438d169 [ 414.610072][T10609] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000005 [ 414.610079][T10609] RBP: 00007ff14440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.610086][T10609] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 414.610094][T10609] R13: 0000000000000000 R14: 00007ff1445a5fa0 R15: 00007fff3549f508 [ 414.610108][T10609] [ 414.849981][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.944546][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.368844][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 415.804198][T10642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1160'. [ 415.833674][ T5919] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 416.003674][ T5919] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 416.015075][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.024050][ T5919] usb 4-1: Product: syz [ 416.028296][ T5919] usb 4-1: Manufacturer: syz [ 416.032939][ T5919] usb 4-1: SerialNumber: syz [ 416.145444][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1162'. [ 416.313821][ T5871] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 416.315193][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.364222][ T5919] usb 4-1: config 0 descriptor?? [ 416.699002][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 416.771208][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 416.804047][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 416.815864][ T5869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 416.846192][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 416.857948][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 416.883716][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.916429][ T5871] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 416.934170][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.952427][ T5871] usb 2-1: Product: syz [ 416.956681][ T5871] usb 2-1: Manufacturer: syz [ 416.961327][ T5871] usb 2-1: SerialNumber: syz [ 416.983259][ T5871] usb 2-1: config 0 descriptor?? [ 417.010678][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.023478][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 417.047855][ T5869] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 417.063955][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.099956][ T5869] usb 6-1: config 0 has no interface number 0 [ 417.123712][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.144079][ T5869] usb 6-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 417.168052][ T5871] rc_core: IR keymap rc-imon-rsc not found [ 417.220168][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 417.229235][T10662] openvswitch: netlink: Message has 3 unknown bytes. [ 417.241612][ T5871] Registered IR keymap rc-empty [ 417.253211][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.324742][ T5871] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 417.343492][ T5869] usb 6-1: Product: syz [ 417.386656][ T5869] usb 6-1: Manufacturer: syz [ 417.391324][ T5869] usb 6-1: SerialNumber: syz [ 417.407990][ T5871] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 417.572233][ T5869] usb 6-1: config 0 descriptor?? [ 417.607083][ T5871] usb 2-1: USB disconnect, device number 39 [ 417.695825][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 418.290842][ T5869] usb 6-1: Found UVC 0.00 device syz (0408:4034) [ 418.301102][ T5869] usb 6-1: No valid video chain found. [ 418.385190][ T5869] usb 6-1: USB disconnect, device number 25 [ 418.479760][ T5919] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 418.512865][ T5919] usb 4-1: USB disconnect, device number 34 [ 418.784206][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.834829][ T5869] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 419.213695][ T5869] usb 1-1: Invalid ep0 maxpacket: 16 [ 419.353675][ T5869] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 420.424452][ T5869] usb 1-1: Invalid ep0 maxpacket: 16 [ 420.441705][ T5869] usb usb1-port1: attempt power cycle [ 420.766940][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.770004][ T5871] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 421.127390][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 421.232488][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 421.253932][ T5871] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 421.262066][ T5871] usb 4-1: config 0 has no interface number 0 [ 421.268921][ T5869] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 421.373079][T10702] FAULT_INJECTION: forcing a failure. [ 421.373079][T10702] name failslab, interval 1, probability 0, space 0, times 0 [ 421.387657][ T5871] usb 4-1: config 0 interface 33 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 421.995375][ T5871] usb 4-1: config 0 interface 33 has no altsetting 0 [ 421.995666][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.002372][ T5869] usb 1-1: Invalid ep0 maxpacket: 16 [ 422.051343][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.5.1177 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 422.051369][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.051379][T10702] Call Trace: [ 422.051384][T10702] [ 422.051391][T10702] dump_stack_lvl+0x16c/0x1f0 [ 422.051412][T10702] should_fail_ex+0x50a/0x650 [ 422.051429][T10702] ? fs_reclaim_acquire+0xae/0x150 [ 422.051447][T10702] ? __cgroup_bpf_attach+0xf1b/0x17e0 [ 422.051468][T10702] should_failslab+0xc2/0x120 [ 422.051487][T10702] __kmalloc_cache_noprof+0x68/0x410 [ 422.051514][T10702] ? bpf_cgroup_atype_find+0x93/0x290 [ 422.051535][T10702] __cgroup_bpf_attach+0xf1b/0x17e0 [ 422.051556][T10702] ? __pfx___cgroup_bpf_attach+0x10/0x10 [ 422.051578][T10702] cgroup_bpf_prog_attach+0x10d/0x360 [ 422.051596][T10702] __sys_bpf+0x376c/0x49c0 [ 422.051614][T10702] ? __pfx_lock_release+0x10/0x10 [ 422.051639][T10702] ? __pfx___sys_bpf+0x10/0x10 [ 422.051654][T10702] ? vfs_write+0x306/0x1150 [ 422.051681][T10702] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 422.051704][T10702] ? fput+0x67/0x440 [ 422.051717][T10702] ? ksys_write+0x1ba/0x250 [ 422.051733][T10702] ? __pfx_ksys_write+0x10/0x10 [ 422.051757][T10702] __x64_sys_bpf+0x78/0xc0 [ 422.051775][T10702] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.051794][T10702] do_syscall_64+0xcd/0x250 [ 422.051820][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.051839][T10702] RIP: 0033:0x7f393e18d169 [ 422.051847][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.051858][T10702] RSP: 002b:00007f393effb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.051869][T10702] RAX: ffffffffffffffda RBX: 00007f393e3a5fa0 RCX: 00007f393e18d169 [ 422.051876][T10702] RDX: 0000000000000020 RSI: 00004000000002c0 RDI: 0000000000000008 [ 422.051882][T10702] RBP: 00007f393effb090 R08: 0000000000000000 R09: 0000000000000000 [ 422.051889][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.051899][T10702] R13: 0000000000000000 R14: 00007f393e3a5fa0 R15: 00007ffc8f00a218 [ 422.051922][T10702] [ 422.379439][ T5871] usb 4-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice=e4.9a [ 422.467467][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 422.476456][T10708] openvswitch: netlink: Message has 3 unknown bytes. [ 422.513577][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.521741][ T5871] usb 4-1: Product: syz [ 422.642694][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 422.651780][T10712] openvswitch: netlink: Message has 3 unknown bytes. [ 422.899160][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 422.908792][T10718] openvswitch: netlink: Message has 3 unknown bytes. [ 423.094950][ T5871] usb 4-1: config 0 descriptor?? [ 423.244943][ T5871] usb 4-1: can't set config #0, error -71 [ 423.258850][ T5871] usb 4-1: USB disconnect, device number 35 [ 423.315153][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.615573][T10720] qrtr: Invalid version 8 [ 423.904305][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.058640][T10726] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 424.075627][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 424.333653][T10726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.360223][T10730] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 424.404242][T10732] FAULT_INJECTION: forcing a failure. [ 424.404242][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 424.418084][T10734] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1185'. [ 424.464754][T10732] CPU: 1 UID: 0 PID: 10732 Comm: syz.0.1186 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 424.464784][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 424.464795][T10732] Call Trace: [ 424.464801][T10732] [ 424.464808][T10732] dump_stack_lvl+0x16c/0x1f0 [ 424.464838][T10732] should_fail_ex+0x50a/0x650 [ 424.464864][T10732] ? fs_reclaim_acquire+0xae/0x150 [ 424.464890][T10732] ? tomoyo_encode2+0x100/0x3e0 [ 424.464912][T10732] should_failslab+0xc2/0x120 [ 424.464931][T10732] __kmalloc_noprof+0xcb/0x510 [ 424.464950][T10732] ? d_absolute_path+0x137/0x1b0 [ 424.464972][T10732] ? rcu_is_watching+0x12/0xc0 [ 424.464995][T10732] tomoyo_encode2+0x100/0x3e0 [ 424.465022][T10732] tomoyo_encode+0x29/0x50 [ 424.465045][T10732] tomoyo_realpath_from_path+0x19d/0x720 [ 424.465081][T10732] tomoyo_path_number_perm+0x248/0x590 [ 424.465102][T10732] ? tomoyo_path_number_perm+0x235/0x590 [ 424.465126][T10732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.465173][T10732] ? __pfx_lock_release+0x10/0x10 [ 424.465196][T10732] ? trace_lock_acquire+0x14e/0x1f0 [ 424.465219][T10732] ? lock_acquire+0x2f/0xb0 [ 424.465244][T10732] ? __fget_files+0x40/0x3a0 [ 424.465264][T10732] ? __fget_files+0x206/0x3a0 [ 424.465284][T10732] security_file_ioctl+0x9b/0x240 [ 424.465314][T10732] __x64_sys_ioctl+0xb7/0x200 [ 424.465341][T10732] do_syscall_64+0xcd/0x250 [ 424.465363][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.465387][T10732] RIP: 0033:0x7f29d138d169 [ 424.465403][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.465419][T10732] RSP: 002b:00007f29d21e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.465436][T10732] RAX: ffffffffffffffda RBX: 00007f29d15a5fa0 RCX: 00007f29d138d169 [ 424.465448][T10732] RDX: 0000400000000380 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 424.465458][T10732] RBP: 00007f29d21e2090 R08: 0000000000000000 R09: 0000000000000000 [ 424.465469][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.465479][T10732] R13: 0000000000000000 R14: 00007f29d15a5fa0 R15: 00007fff4cd5b3a8 [ 424.465502][T10732] [ 424.470848][T10732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.573638][ T5871] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 425.013470][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 425.019893][ T5871] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 425.029220][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.048540][ T5871] usb 2-1: config 0 has no interface number 0 [ 425.069508][ T5871] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 425.078989][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.098619][ T5871] usb 2-1: Product: syz [ 425.112815][ T5871] usb 2-1: Manufacturer: syz [ 425.129042][ T5871] usb 2-1: SerialNumber: syz [ 425.151432][ T5871] usb 2-1: config 0 descriptor?? [ 425.396666][ T5871] usb 2-1: Found UVC 0.00 device syz (0408:4034) [ 425.554764][T10743] FAULT_INJECTION: forcing a failure. [ 425.554764][T10743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.568161][T10743] CPU: 0 UID: 0 PID: 10743 Comm: syz.3.1189 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 425.568183][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.568193][T10743] Call Trace: [ 425.568198][T10743] [ 425.568202][T10743] dump_stack_lvl+0x16c/0x1f0 [ 425.568221][T10743] should_fail_ex+0x50a/0x650 [ 425.568240][T10743] _copy_from_user+0x2e/0xd0 [ 425.568252][T10743] ucma_destroy_id+0xb7/0x2a0 [ 425.568269][T10743] ? __pfx_ucma_destroy_id+0x10/0x10 [ 425.568286][T10743] ? __pfx_ucma_destroy_id+0x10/0x10 [ 425.568301][T10743] ucma_write+0x1f9/0x330 [ 425.568313][T10743] ? __pfx_ucma_write+0x10/0x10 [ 425.568326][T10743] ? bpf_lsm_file_permission+0x9/0x10 [ 425.568339][T10743] ? security_file_permission+0x71/0x210 [ 425.568358][T10743] ? rw_verify_area+0xcf/0x680 [ 425.568374][T10743] ? __pfx_ucma_write+0x10/0x10 [ 425.568386][T10743] vfs_write+0x24c/0x1150 [ 425.568403][T10743] ? __fget_files+0x1fc/0x3a0 [ 425.568414][T10743] ? __pfx_lock_release+0x10/0x10 [ 425.568430][T10743] ? __pfx_vfs_write+0x10/0x10 [ 425.568447][T10743] ? lock_acquire+0x2f/0xb0 [ 425.568461][T10743] ? __fget_files+0x40/0x3a0 [ 425.568473][T10743] ? __fget_files+0x206/0x3a0 [ 425.568486][T10743] ksys_write+0x207/0x250 [ 425.568503][T10743] ? __pfx_ksys_write+0x10/0x10 [ 425.568523][T10743] do_syscall_64+0xcd/0x250 [ 425.568538][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.568555][T10743] RIP: 0033:0x7ff14438d169 [ 425.568564][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.568575][T10743] RSP: 002b:00007ff1451a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.568585][T10743] RAX: ffffffffffffffda RBX: 00007ff1445a6080 RCX: 00007ff14438d169 [ 425.568592][T10743] RDX: 0000000000000018 RSI: 0000400000000380 RDI: 0000000000000007 [ 425.568598][T10743] RBP: 00007ff1451a0090 R08: 0000000000000000 R09: 0000000000000000 [ 425.568604][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.568610][T10743] R13: 0000000000000000 R14: 00007ff1445a6080 R15: 00007fff3549f508 [ 425.568623][T10743] [ 425.569114][ T5871] usb 2-1: No valid video chain found. [ 425.903557][ T5871] usb 2-1: USB disconnect, device number 40 [ 426.287801][T10750] FAULT_INJECTION: forcing a failure. [ 426.287801][T10750] name failslab, interval 1, probability 0, space 0, times 0 [ 426.331662][T10750] CPU: 0 UID: 0 PID: 10750 Comm: syz.0.1191 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 426.331688][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.331698][T10750] Call Trace: [ 426.331704][T10750] [ 426.331711][T10750] dump_stack_lvl+0x16c/0x1f0 [ 426.331739][T10750] should_fail_ex+0x50a/0x650 [ 426.331770][T10750] ? fs_reclaim_acquire+0xae/0x150 [ 426.331796][T10750] should_failslab+0xc2/0x120 [ 426.331818][T10750] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 426.331836][T10750] ? __alloc_skb+0x2b1/0x380 [ 426.331861][T10750] __alloc_skb+0x2b1/0x380 [ 426.331881][T10750] ? __pfx___alloc_skb+0x10/0x10 [ 426.331905][T10750] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 426.331933][T10750] netlink_alloc_large_skb+0x69/0x130 [ 426.331956][T10750] netlink_sendmsg+0x689/0xd70 [ 426.331979][T10750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.332007][T10750] ____sys_sendmsg+0xaaf/0xc90 [ 426.332025][T10750] ? copy_msghdr_from_user+0x10b/0x160 [ 426.332047][T10750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.332077][T10750] ___sys_sendmsg+0x135/0x1e0 [ 426.332103][T10750] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.332136][T10750] ? __pfx_lock_release+0x10/0x10 [ 426.332160][T10750] ? trace_lock_acquire+0x14e/0x1f0 [ 426.332188][T10750] ? __fget_files+0x206/0x3a0 [ 426.332212][T10750] __sys_sendmsg+0x16e/0x220 [ 426.332236][T10750] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.332275][T10750] do_syscall_64+0xcd/0x250 [ 426.332298][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.332322][T10750] RIP: 0033:0x7f29d138d169 [ 426.332337][T10750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.332354][T10750] RSP: 002b:00007f29d21e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.332372][T10750] RAX: ffffffffffffffda RBX: 00007f29d15a5fa0 RCX: 00007f29d138d169 [ 426.332384][T10750] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 426.332395][T10750] RBP: 00007f29d21e2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.332406][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.332417][T10750] R13: 0000000000000000 R14: 00007f29d15a5fa0 R15: 00007fff4cd5b3a8 [ 426.332440][T10750] [ 426.655832][T10754] syz.0.1193: attempt to access beyond end of device [ 426.655832][T10754] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 426.835922][T10754] syz.0.1193: attempt to access beyond end of device [ 426.835922][T10754] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 426.853532][ T5867] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 426.865456][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 426.874570][T10762] openvswitch: netlink: Message has 3 unknown bytes. [ 426.923592][ T5868] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 426.935289][T10755] ceph: No mds server is up or the cluster is laggy [ 426.943348][ T8] libceph: connect (1)[c::]:6789 error -101 [ 426.952414][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 426.972751][T10754] syz.0.1193: attempt to access beyond end of device [ 426.972751][T10754] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 427.000181][T10754] syz.0.1193: attempt to access beyond end of device [ 427.000181][T10754] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 427.073780][ T5867] usb 4-1: device descriptor read/64, error -71 [ 427.093502][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 427.097922][T10754] syz.0.1193: attempt to access beyond end of device [ 427.097922][T10754] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 427.195192][T10754] syz.0.1193: attempt to access beyond end of device [ 427.195192][T10754] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 427.249376][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 427.266191][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 427.293889][T10754] VFS: unable to find oldfs superblock on device loop0 [ 427.728693][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.739829][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 427.751666][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 427.763019][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 427.763788][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.774214][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.799824][ T5868] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 427.809975][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.818131][ T5868] usb 6-1: Product: syz [ 427.822416][ T5868] usb 6-1: Manufacturer: syz [ 427.827301][ T5868] usb 6-1: SerialNumber: syz [ 427.853874][ T5868] usb 6-1: config 0 descriptor?? [ 427.863540][ T5867] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 427.943846][ T29] audit: type=1400 audit(1740920095.592:959): avc: denied { getopt } for pid=10767 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 428.014866][ T5868] rc_core: IR keymap rc-imon-rsc not found [ 428.023520][ T5868] Registered IR keymap rc-empty [ 428.053966][ T5868] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 428.065750][ T5867] usb 4-1: device descriptor read/64, error -71 [ 428.082346][ T29] audit: type=1400 audit(1740920095.702:960): avc: denied { bind } for pid=10771 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.103098][ T5868] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 428.131147][ T29] audit: type=1400 audit(1740920095.702:961): avc: denied { connect } for pid=10771 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.173769][ T5867] usb usb4-port1: attempt power cycle [ 428.189681][T10778] FAULT_INJECTION: forcing a failure. [ 428.189681][T10778] name failslab, interval 1, probability 0, space 0, times 0 [ 428.202918][T10778] CPU: 1 UID: 0 PID: 10778 Comm: syz.4.1199 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 428.202940][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 428.202953][T10778] Call Trace: [ 428.202958][T10778] [ 428.202965][T10778] dump_stack_lvl+0x16c/0x1f0 [ 428.202997][T10778] should_fail_ex+0x50a/0x650 [ 428.203022][T10778] ? fs_reclaim_acquire+0xae/0x150 [ 428.203048][T10778] ? bpf_test_init.isra.0+0x9e/0x130 [ 428.203066][T10778] should_failslab+0xc2/0x120 [ 428.203084][T10778] __kmalloc_noprof+0xcb/0x510 [ 428.203105][T10778] bpf_test_init.isra.0+0x9e/0x130 [ 428.203124][T10778] bpf_prog_test_run_skb+0x246/0x2280 [ 428.203145][T10778] ? __fget_files+0x40/0x3a0 [ 428.203165][T10778] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 428.203188][T10778] ? fput+0x67/0x440 [ 428.203209][T10778] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 428.203228][T10778] __sys_bpf+0xfc6/0x49c0 [ 428.203245][T10778] ? __pfx_lock_release+0x10/0x10 [ 428.203269][T10778] ? __pfx___sys_bpf+0x10/0x10 [ 428.203285][T10778] ? vfs_write+0x306/0x1150 [ 428.203313][T10778] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 428.203346][T10778] ? fput+0x67/0x440 [ 428.203364][T10778] ? ksys_write+0x1ba/0x250 [ 428.203387][T10778] ? __pfx_ksys_write+0x10/0x10 [ 428.203414][T10778] __x64_sys_bpf+0x78/0xc0 [ 428.203431][T10778] ? lockdep_hardirqs_on+0x7c/0x110 [ 428.203450][T10778] do_syscall_64+0xcd/0x250 [ 428.203473][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.203496][T10778] RIP: 0033:0x7fe475d8d169 [ 428.203510][T10778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.203527][T10778] RSP: 002b:00007fe476b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.203543][T10778] RAX: ffffffffffffffda RBX: 00007fe475fa5fa0 RCX: 00007fe475d8d169 [ 428.203554][T10778] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 428.203565][T10778] RBP: 00007fe476b56090 R08: 0000000000000000 R09: 0000000000000000 [ 428.203575][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.203585][T10778] R13: 0000000000000000 R14: 00007fe475fa5fa0 R15: 00007ffd4638d9f8 [ 428.203608][T10778] [ 428.588002][ T45] usb 6-1: USB disconnect, device number 26 [ 428.693579][ T5868] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 428.704703][ T5867] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 428.723969][ T5867] usb 4-1: device descriptor read/8, error -71 [ 428.769637][ T29] audit: type=1400 audit(1740920096.412:962): avc: denied { setopt } for pid=10787 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.845133][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.858361][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 428.877539][ T5868] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 428.893649][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.908370][ T5868] usb 2-1: config 0 descriptor?? [ 428.914089][T10780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 428.963527][ T5867] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 428.984047][ T5867] usb 4-1: device descriptor read/8, error -71 [ 429.063768][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 429.093766][ T5867] usb usb4-port1: unable to enumerate USB device [ 429.215723][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 429.222531][ T8] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 429.231382][ T8] usb 5-1: config 0 has no interface number 0 [ 429.239887][ T8] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=c6.bb [ 429.249536][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.273849][ T8] usb 5-1: Product: syz [ 429.284700][ T8] usb 5-1: Manufacturer: syz [ 429.302178][ T8] usb 5-1: SerialNumber: syz [ 429.324344][ T8] usb 5-1: config 0 descriptor?? [ 429.380821][ T8] kvaser_usb 5-1:0.92: error -ENODEV: Cannot get usb endpoint(s) [ 429.468092][T10795] FAULT_INJECTION: forcing a failure. [ 429.468092][T10795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.542877][T10795] CPU: 1 UID: 0 PID: 10795 Comm: syz.3.1204 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 429.542906][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.542915][T10795] Call Trace: [ 429.542921][T10795] [ 429.542928][T10795] dump_stack_lvl+0x16c/0x1f0 [ 429.542960][T10795] should_fail_ex+0x50a/0x650 [ 429.542989][T10795] _copy_from_user+0x2e/0xd0 [ 429.543013][T10795] lowpan_control_write+0x105/0x730 [ 429.543040][T10795] ? __pfx_lowpan_control_write+0x10/0x10 [ 429.543070][T10795] ? __debugfs_file_get+0x1ff/0x850 [ 429.543097][T10795] ? rcu_is_watching+0x12/0xc0 [ 429.543116][T10795] ? trace_lock_acquire+0x14e/0x1f0 [ 429.543139][T10795] full_proxy_write+0x13c/0x200 [ 429.543167][T10795] ? __pfx_full_proxy_write+0x10/0x10 [ 429.543190][T10795] vfs_write+0x24c/0x1150 [ 429.543219][T10795] ? __fget_files+0x1fc/0x3a0 [ 429.543237][T10795] ? __pfx___mutex_lock+0x10/0x10 [ 429.543259][T10795] ? __pfx_vfs_write+0x10/0x10 [ 429.543289][T10795] ? __fget_files+0x206/0x3a0 [ 429.543314][T10795] ksys_write+0x12b/0x250 [ 429.543339][T10795] ? __pfx_ksys_write+0x10/0x10 [ 429.543372][T10795] do_syscall_64+0xcd/0x250 [ 429.543397][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.543419][T10795] RIP: 0033:0x7ff14438d169 [ 429.543433][T10795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.543448][T10795] RSP: 002b:00007ff1451c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.543465][T10795] RAX: ffffffffffffffda RBX: 00007ff1445a5fa0 RCX: 00007ff14438d169 [ 429.543476][T10795] RDX: 000000000000001b RSI: 0000400000003080 RDI: 0000000000000004 [ 429.543486][T10795] RBP: 00007ff1451c1090 R08: 0000000000000000 R09: 0000000000000000 [ 429.543495][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.543504][T10795] R13: 0000000000000000 R14: 00007ff1445a5fa0 R15: 00007fff3549f508 [ 429.543522][T10795] [ 429.552499][ T5871] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 429.685887][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.792448][ T8] usb 5-1: USB disconnect, device number 39 [ 429.847919][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 430.353578][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 430.365536][ T5871] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 430.878323][ T5869] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.909302][ T5871] usb 6-1: config 0 has no interface number 0 [ 430.918597][ T5871] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 430.928026][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.942207][ T5871] usb 6-1: Product: syz [ 430.950986][ T5871] usb 6-1: Manufacturer: syz [ 430.961380][ T5871] usb 6-1: SerialNumber: syz [ 430.974862][ T5871] usb 6-1: config 0 descriptor?? [ 430.991597][ T5871] gspca_main: etoms-2.14.0 probing 102c:6251 [ 431.064031][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 431.071086][ T5869] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 431.079973][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.090489][ T5869] usb 4-1: config 0 has no interface number 0 [ 431.100341][ T5869] usb 4-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 431.123653][ T9] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 431.142815][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 431.143606][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.171671][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.173466][ T5869] usb 4-1: Product: syz [ 431.187363][ T5868] usb 2-1: USB disconnect, device number 41 [ 431.194307][ T5869] usb 4-1: Manufacturer: syz [ 431.201313][ T5869] usb 4-1: SerialNumber: syz [ 431.225940][ T5869] usb 4-1: config 0 descriptor?? [ 431.245447][ T5871] usb 6-1: USB disconnect, device number 27 [ 431.296277][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 431.325391][ T9] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 431.334743][ T9] usb 5-1: config 0 has no interface number 0 [ 431.340901][ T9] usb 5-1: config 0 interface 33 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 431.363681][ T9] usb 5-1: config 0 interface 33 has no altsetting 0 [ 431.372457][ T9] usb 5-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice=e4.9a [ 431.382726][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.391181][ T9] usb 5-1: Product: syz [ 431.396163][ T9] usb 5-1: Manufacturer: Њ [ 431.400710][ T9] usb 5-1: SerialNumber: syz [ 431.554413][ T9] usb 5-1: config 0 descriptor?? [ 432.293466][ T29] audit: type=1400 audit(1740920099.312:963): avc: denied { setopt } for pid=10809 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 432.360479][ T5869] usb 4-1: Found UVC 0.00 device syz (0408:4034) [ 432.491558][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 432.500665][T10817] openvswitch: netlink: Message has 3 unknown bytes. [ 432.565065][ T5869] usb 4-1: No valid video chain found. [ 432.724843][ T9] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 432.749869][ T5869] usb 4-1: USB disconnect, device number 40 [ 432.793963][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 432.930126][T10825] sctp: [Deprecated]: syz.5.1211 (pid 10825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.930126][T10825] Use struct sctp_sack_info instead [ 432.931420][T10819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.956719][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.983695][ T9] dib0700: firmware download failed at 7 with -22 [ 433.022032][ T9] usb 5-1: USB disconnect, device number 40 [ 433.024625][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.043727][ T6225] udevd[6225]: setting mode of /dev/bus/usb/005/040 to 020664 failed: No such file or directory [ 433.513647][ T5869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.087982][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.224077][ T6225] udevd[6225]: setting owner of /dev/bus/usb/005/040 to uid=0, gid=0 failed: No such file or directory [ 434.347702][ T29] audit: type=1400 audit(1740920101.882:964): avc: denied { execmem } for pid=10829 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 435.310242][ T29] audit: type=1400 audit(1740920102.952:965): avc: denied { read } for pid=10844 comm="syz.5.1219" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.424571][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.768435][ T29] audit: type=1400 audit(1740920103.412:966): avc: denied { create } for pid=10845 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.834458][ T29] audit: type=1400 audit(1740920103.412:967): avc: denied { write } for pid=10845 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.859120][ T29] audit: type=1400 audit(1740920103.412:968): avc: denied { nlmsg_write } for pid=10845 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.999018][ T29] audit: type=1400 audit(1740920103.412:969): avc: denied { read } for pid=10845 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.094775][ T5869] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 436.209383][T10862] geneve3: entered promiscuous mode [ 436.226132][T10862] geneve3: entered allmulticast mode [ 436.333832][ T5868] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 436.335306][ T5869] usb 1-1: not running at top speed; connect to a high speed hub [ 436.371491][ T29] audit: type=1326 audit(1740920103.992:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.1.1222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa801f8d169 code=0x0 [ 436.466027][ T5869] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 436.493814][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 436.495425][ T5869] usb 1-1: config 0 has no interface number 0 [ 436.503044][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.511100][ T5869] usb 1-1: config 0 interface 33 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 436.527038][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 436.539895][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1224'. [ 436.621311][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 436.653988][ T5869] usb 1-1: config 0 interface 33 has no altsetting 0 [ 436.664589][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 436.687216][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 436.717671][ T5869] usb 1-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice=e4.9a [ 436.717749][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.728686][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.750584][T10868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.764386][T10868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.767221][ T5868] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 436.791106][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.799525][ T5868] usb 4-1: Product: syz [ 436.804420][ T5869] usb 1-1: Product: syz [ 436.804446][ T5868] usb 4-1: Manufacturer: syz [ 436.808578][ T5869] usb 1-1: Manufacturer: Њ [ 436.808593][ T5869] usb 1-1: SerialNumber: syz [ 436.814451][ T5869] usb 1-1: config 0 descriptor?? [ 436.818086][ T5868] usb 4-1: SerialNumber: syz [ 436.834149][ T5868] usb 4-1: config 0 descriptor?? [ 436.883516][ T5868] rc_core: IR keymap rc-imon-rsc not found [ 436.884182][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 436.890514][ T5868] Registered IR keymap rc-empty [ 436.904292][ T9] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 436.912425][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.912850][ T5868] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 436.952797][ T5868] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 436.953132][ T9] usb 6-1: config 0 has no interface number 0 [ 436.976813][ T9] usb 6-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 436.999786][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.053470][ T9] usb 6-1: Product: syz [ 437.057698][ T9] usb 6-1: Manufacturer: syz [ 437.062312][ T9] usb 6-1: SerialNumber: syz [ 437.107413][ T9] usb 6-1: config 0 descriptor?? [ 437.258224][ T5871] usb 4-1: USB disconnect, device number 41 [ 437.359884][ T9] usb 6-1: Found UVC 0.00 device syz (0408:4034) [ 437.389077][ T5869] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 437.962028][ T9] usb 6-1: No valid video chain found. [ 437.970653][ T5869] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 437.981392][ T9] usb 6-1: USB disconnect, device number 28 [ 437.988178][ T5869] dib0700: firmware download failed at 7 with -22 [ 438.025639][ T5869] usb 1-1: USB disconnect, device number 35 [ 438.317805][T10889] bond1: (slave team_slave_1): Releasing active interface [ 438.584692][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 439.078156][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 439.087231][T10900] openvswitch: netlink: Message has 3 unknown bytes. [ 439.329099][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 439.344483][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 439.355278][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 439.369339][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 440.064085][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.073956][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.132928][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.151470][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.162645][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.194448][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 440.273547][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.436802][ T5867] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 440.467061][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.477199][ T5867] usb 5-1: Product: syz [ 440.481409][ T5867] usb 5-1: Manufacturer: syz [ 440.502033][ T5867] usb 5-1: SerialNumber: syz [ 440.523364][ T5867] usb 5-1: config 0 descriptor?? [ 440.676037][ T5867] rc_core: IR keymap rc-imon-rsc not found [ 441.185187][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.497328][ T5867] Registered IR keymap rc-empty [ 441.615528][ T5867] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 441.654669][ T5867] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 441.755500][ T5867] usb 5-1: USB disconnect, device number 41 [ 441.941041][ T29] audit: type=1400 audit(1740920109.572:971): avc: denied { append } for pid=10931 comm="syz.5.1244" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 442.060154][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1243'. [ 442.404057][ T5869] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 443.419815][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 443.429130][T10943] wlan0 speed is unknown, defaulting to 1000 [ 443.438129][T10943] wlan0 speed is unknown, defaulting to 1000 [ 443.451984][T10943] wlan0 speed is unknown, defaulting to 1000 [ 443.540806][T10943] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 443.619114][ T5869] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 443.643873][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.659088][T10943] wlan0 speed is unknown, defaulting to 1000 [ 443.665553][ T5869] usb 5-1: config 0 has no interface number 0 [ 444.377313][ T5869] usb 5-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 444.394713][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.402874][ T5869] usb 5-1: Product: syz [ 444.407826][ T5869] usb 5-1: Manufacturer: syz [ 444.555875][ T5869] usb 5-1: SerialNumber: syz [ 444.560710][T10943] wlan0 speed is unknown, defaulting to 1000 [ 444.568175][T10945] block nbd0: NBD_DISCONNECT [ 444.574699][ T5869] usb 5-1: config 0 descriptor?? [ 444.605069][T10943] wlan0 speed is unknown, defaulting to 1000 [ 444.634253][T10943] wlan0 speed is unknown, defaulting to 1000 [ 444.640753][T10943] wlan0 speed is unknown, defaulting to 1000 [ 444.652680][T10945] block nbd0: Disconnected due to user request. [ 444.863477][T10945] block nbd0: shutting down sockets [ 444.900415][ T5869] usb 5-1: Found UVC 0.00 device syz (0408:4034) [ 444.909488][ T5869] usb 5-1: No valid video chain found. [ 444.940100][ T5869] usb 5-1: USB disconnect, device number 42 [ 445.824902][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.836272][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.488194][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1251'. [ 446.545182][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.712701][T10969] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1252'. [ 449.052356][ T45] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 449.219407][ T45] usb 6-1: config 0 has an invalid interface number: 114 but max is 0 [ 449.282420][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 449.326979][ T45] usb 6-1: config 0 has no interface number 0 [ 449.454786][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 449.470885][ T45] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 449.681783][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.706027][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.723977][ T45] usb 6-1: Product: syz [ 449.862851][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 449.872413][T11010] openvswitch: netlink: Message has 3 unknown bytes. [ 449.912958][ T45] usb 6-1: Manufacturer: syz [ 449.917826][ T45] usb 6-1: SerialNumber: syz [ 449.934093][ T5869] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 449.948555][ T45] usb 6-1: config 0 descriptor?? [ 450.099798][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 450.106963][ T5869] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 450.115729][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.134373][ T5869] usb 2-1: config 0 has no interface number 0 [ 450.157869][ T5869] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 450.168453][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.178342][ T5869] usb 2-1: Product: syz [ 450.187911][ T5869] usb 2-1: Manufacturer: syz [ 450.198002][ T5869] usb 2-1: SerialNumber: syz [ 450.203792][ T45] cdc_subset 6-1:0.114: probe with driver cdc_subset failed with error -22 [ 450.219867][ T5869] usb 2-1: config 0 descriptor?? [ 450.474731][ T5869] usb 2-1: Found UVC 0.00 device syz (0408:4034) [ 450.571853][T11015] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1266'. [ 451.002325][ T5871] usb 6-1: USB disconnect, device number 29 [ 451.015445][ T5869] usb 2-1: No valid video chain found. [ 451.028996][ T5869] usb 2-1: USB disconnect, device number 42 [ 451.270342][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 451.279852][T11021] openvswitch: netlink: Message has 3 unknown bytes. [ 451.482515][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.494326][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.107143][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.860754][ T5871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.132589][T11053] Bluetooth: MGMT ver 1.23 [ 455.264217][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.296779][ T5904] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 456.474373][T11074] block nbd3: NBD_DISCONNECT [ 456.479362][T11074] block nbd3: Disconnected due to user request. [ 456.486075][T11074] block nbd3: shutting down sockets [ 456.577153][ T5904] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 456.603101][ T5904] usb 1-1: config 0 has no interface number 0 [ 456.776785][ T5904] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 456.793509][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.819793][ T5904] usb 1-1: Product: syz [ 456.843972][ T5904] usb 1-1: Manufacturer: syz [ 456.853918][ T5904] usb 1-1: SerialNumber: syz [ 456.960904][ T5904] usb 1-1: config 0 descriptor?? [ 457.600123][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.611588][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.640340][ T5904] cdc_subset 1-1:0.114: probe with driver cdc_subset failed with error -22 [ 457.826893][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 457.836564][T11086] openvswitch: netlink: Message has 3 unknown bytes. [ 457.862360][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.078145][ T5904] usb 1-1: USB disconnect, device number 36 [ 459.108536][T11094] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 459.142314][T11094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.830311][T11098] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 460.217118][T11110] FAULT_INJECTION: forcing a failure. [ 460.217118][T11110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.254329][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.4.1292 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 460.254363][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.254374][T11110] Call Trace: [ 460.254381][T11110] [ 460.254389][T11110] dump_stack_lvl+0x16c/0x1f0 [ 460.254419][T11110] should_fail_ex+0x50a/0x650 [ 460.254451][T11110] _copy_to_user+0x32/0xd0 [ 460.254473][T11110] simple_read_from_buffer+0xd0/0x160 [ 460.254502][T11110] proc_fail_nth_read+0x198/0x270 [ 460.254534][T11110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.254561][T11110] ? rw_verify_area+0xcf/0x680 [ 460.254587][T11110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.254611][T11110] vfs_read+0x1df/0xbf0 [ 460.254639][T11110] ? __fget_files+0x1fc/0x3a0 [ 460.254657][T11110] ? __pfx___mutex_lock+0x10/0x10 [ 460.254681][T11110] ? __pfx_vfs_read+0x10/0x10 [ 460.254715][T11110] ? __fget_files+0x206/0x3a0 [ 460.254740][T11110] ksys_read+0x12b/0x250 [ 460.254767][T11110] ? __pfx_ksys_read+0x10/0x10 [ 460.254800][T11110] do_syscall_64+0xcd/0x250 [ 460.254825][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.254851][T11110] RIP: 0033:0x7fe475d8bb7c [ 460.254867][T11110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.254885][T11110] RSP: 002b:00007fe476b56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.254904][T11110] RAX: ffffffffffffffda RBX: 00007fe475fa5fa0 RCX: 00007fe475d8bb7c [ 460.254917][T11110] RDX: 000000000000000f RSI: 00007fe476b560a0 RDI: 0000000000000004 [ 460.254927][T11110] RBP: 00007fe476b56090 R08: 0000000000000000 R09: 0000000000000000 [ 460.254939][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.254950][T11110] R13: 0000000000000000 R14: 00007fe475fa5fa0 R15: 00007ffd4638d9f8 [ 460.254975][T11110] [ 460.752193][T11122] overlayfs: missing 'lowerdir' [ 460.839913][ T29] audit: type=1326 audit(1740920128.482:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14438d169 code=0x7fc00000 [ 461.029091][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.809430][T11152] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1305'. [ 462.830495][ T5867] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 462.975408][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.988082][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.185958][ T5867] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 463.483087][ T5867] usb 4-1: config 0 has no interface number 0 [ 463.505650][ T5867] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 463.513895][T11155] can0 (unregistered): slcan off ttyS3. [ 463.581455][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.594113][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.623512][ T5867] usb 4-1: Product: syz [ 463.629632][ T5867] usb 4-1: Manufacturer: syz [ 463.642370][ T5867] usb 4-1: SerialNumber: syz [ 463.666738][ T5867] usb 4-1: config 0 descriptor?? [ 463.833679][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 463.912808][ T5867] cdc_subset 4-1:0.114: probe with driver cdc_subset failed with error -22 [ 463.993605][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 464.037973][ T45] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 464.549220][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.845594][ T5869] usb 4-1: USB disconnect, device number 42 [ 464.847282][ T45] usb 6-1: config 0 descriptor?? [ 464.909702][T11170] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1309'. [ 464.930878][ T45] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 465.636814][T11202] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1312'. [ 465.893037][ T45] gspca_sonixj: reg_r err -71 [ 465.922087][ T45] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 465.945658][ T45] usb 6-1: USB disconnect, device number 30 [ 466.157504][ T29] audit: type=1326 audit(1740920133.802:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa801f8d169 code=0x7fc00000 [ 466.978432][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.168333][T11223] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 467.176305][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.206323][T11223] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 467.567119][T11229] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1319'. [ 468.712055][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.712640][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.724498][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.897614][T11243] siw: device registration error -23 [ 469.230495][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 469.245927][T11235] openvswitch: netlink: Message has 3 unknown bytes. [ 469.514672][T11251] FAULT_INJECTION: forcing a failure. [ 469.514672][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 469.543811][T11251] CPU: 1 UID: 0 PID: 11251 Comm: syz.0.1323 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 469.543843][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.543854][T11251] Call Trace: [ 469.543860][T11251] [ 469.543867][T11251] dump_stack_lvl+0x16c/0x1f0 [ 469.543896][T11251] should_fail_ex+0x50a/0x650 [ 469.543922][T11251] ? fs_reclaim_acquire+0xae/0x150 [ 469.543950][T11251] ? io_cache_alloc_new+0x45/0xf0 [ 469.543971][T11251] should_failslab+0xc2/0x120 [ 469.543992][T11251] __kmalloc_noprof+0xcb/0x510 [ 469.544009][T11251] ? lock_acquire+0x2f/0xb0 [ 469.544031][T11251] ? __io_alloc_req_refill+0xeb/0x5b0 [ 469.544060][T11251] io_cache_alloc_new+0x45/0xf0 [ 469.544083][T11251] io_prep_rw+0xdc8/0x10e0 [ 469.544108][T11251] ? __pfx_io_prep_rw+0x10/0x10 [ 469.544141][T11251] io_submit_sqes+0x863/0x2670 [ 469.544183][T11251] __do_sys_io_uring_enter+0xd60/0x1670 [ 469.544216][T11251] ? __fget_files+0x206/0x3a0 [ 469.544235][T11251] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 469.544266][T11251] ? fput+0x67/0x440 [ 469.544288][T11251] ? ksys_write+0x1ba/0x250 [ 469.544315][T11251] ? __pfx_ksys_write+0x10/0x10 [ 469.544349][T11251] do_syscall_64+0xcd/0x250 [ 469.544373][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.544399][T11251] RIP: 0033:0x7f29d138d169 [ 469.544414][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.544431][T11251] RSP: 002b:00007f29d21e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 469.544449][T11251] RAX: ffffffffffffffda RBX: 00007f29d15a5fa0 RCX: 00007f29d138d169 [ 469.544461][T11251] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000004 [ 469.544472][T11251] RBP: 00007f29d21e2090 R08: 0000000000000000 R09: 0000000000000000 [ 469.544483][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.544494][T11251] R13: 0000000000000000 R14: 00007f29d15a5fa0 R15: 00007fff4cd5b3a8 [ 469.544518][T11251] [ 469.557228][T11253] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 470.013592][ T5904] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 470.199587][ T5904] usb 1-1: not running at top speed; connect to a high speed hub [ 470.239894][ T5904] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 470.433525][ T5904] usb 1-1: config 0 has no interface number 0 [ 470.551415][ T5904] usb 1-1: config 0 interface 33 altsetting 244 has an invalid descriptor for endpoint zero, skipping [ 470.607584][ T5904] usb 1-1: config 0 interface 33 has no altsetting 0 [ 470.630971][ T5904] usb 1-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice=e4.9a [ 470.649175][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.666380][ T5904] usb 1-1: Product: syz [ 470.680511][ T5904] usb 1-1: Manufacturer: Њ [ 470.707058][ T5904] usb 1-1: SerialNumber: syz [ 470.754755][ T5904] usb 1-1: config 0 descriptor?? [ 471.624494][T11279] No such timeout policy "syz1" [ 471.646334][ T5904] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 471.796232][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 472.076295][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.112613][ T5904] dib0700: firmware download failed at 7 with -22 [ 472.193828][ T5904] usb 1-1: USB disconnect, device number 37 [ 472.323069][T11284] No control pipe specified [ 473.078164][ T29] audit: type=1400 audit(1740920140.722:974): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 473.283737][ T5904] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 473.359925][ T29] audit: type=1400 audit(1740920141.002:975): avc: denied { mount } for pid=11300 comm="syz.5.1333" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 473.399640][T11303] Cache volume key already in use (9p,(null),) [ 473.407091][ T29] audit: type=1400 audit(1740920141.042:976): avc: denied { setattr } for pid=11300 comm="syz.5.1333" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.483506][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 473.490962][ T29] audit: type=1400 audit(1740920141.092:977): avc: denied { read write } for pid=11302 comm="syz.3.1334" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.521712][ T29] audit: type=1400 audit(1740920141.092:978): avc: denied { open } for pid=11302 comm="syz.3.1334" path="/261/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.548605][ T5904] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 473.573793][ T5904] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 473.593688][ T29] audit: type=1400 audit(1740920141.132:979): avc: denied { unmount } for pid=7034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 473.614947][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.644061][ T29] audit: type=1400 audit(1740920141.242:980): avc: denied { ioctl } for pid=11304 comm="syz.1.1335" path="socket:[34568]" dev="sockfs" ino=34568 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 473.684210][ T5904] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 473.693304][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.725728][ T5904] usb 1-1: Product: syz [ 473.725749][ T5904] usb 1-1: Manufacturer: syz [ 473.725769][ T5904] usb 1-1: SerialNumber: syz [ 473.740090][ T5904] usb 1-1: config 0 descriptor?? [ 473.763614][ T29] audit: type=1400 audit(1740920141.301:981): avc: denied { write } for pid=11304 comm="syz.1.1335" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 474.464031][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.475459][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.637994][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 475.521565][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 475.529952][ T29] audit: type=1400 audit(1740920143.171:982): avc: denied { remount } for pid=11333 comm="syz.4.1342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 475.561136][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 475.604193][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.616752][ T9] usb 6-1: config 0 descriptor?? [ 475.627880][T11314] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 475.652697][ T29] audit: type=1326 audit(1740920143.281:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14438d169 code=0x7fc00000 [ 475.794184][ T5871] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 475.914582][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 475.925326][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 475.964931][ T5871] usb 5-1: config 0 has an invalid interface number: 40 but max is 0 [ 475.985795][ T9] usb 6-1: USB disconnect, device number 31 [ 475.992923][ T5871] usb 5-1: config 0 has no interface number 0 [ 476.584123][ T5871] usb 5-1: config 0 interface 40 has no altsetting 0 [ 476.605794][ T5871] usb 5-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=40.ab [ 476.623552][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.631584][ T5871] usb 5-1: Product: syz [ 476.637170][ T5871] usb 5-1: Manufacturer: syz [ 476.643190][ T5871] usb 5-1: SerialNumber: syz [ 476.652324][ T5871] usb 5-1: config 0 descriptor?? [ 476.660090][ T5871] ax88179_178a 5-1:0.40: probe with driver ax88179_178a failed with error -22 [ 476.741117][ T5871] usb 1-1: USB disconnect, device number 38 [ 476.983534][ T5904] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 477.095420][ T5867] usb 5-1: USB disconnect, device number 43 [ 477.150880][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.261421][ T5904] usb 2-1: not running at top speed; connect to a high speed hub [ 477.287613][ T5904] usb 2-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.340501][ T5904] usb 2-1: config 1 interface 0 has no altsetting 0 [ 477.514272][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 477.582563][ T5904] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 477.664644][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.670880][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.697288][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1348'. [ 477.722434][ T5904] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 477.736519][T11354] bond2: (slave team_slave_1): Releasing active interface [ 477.744407][ T5871] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 478.011467][ T5904] usb 2-1: USB disconnect, device number 43 [ 478.171130][ T5871] usb 6-1: device descriptor read/64, error -71 [ 478.225906][T11363] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 478.236644][T11363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.272216][T11363] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 478.844105][ T5871] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 478.978609][ T5871] usb 6-1: device descriptor read/64, error -71 [ 479.104358][ T5871] usb usb6-port1: attempt power cycle [ 479.729259][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.749921][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 480.072078][ T5871] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 480.095710][ T5871] usb 6-1: device descriptor read/8, error -71 [ 480.612504][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.936905][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 480.936922][ T29] audit: type=1400 audit(1740920148.591:987): avc: denied { getopt } for pid=11401 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.143638][ T5904] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 481.383530][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 481.425858][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.959169][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 481.998166][T11402] block nbd1: shutting down sockets [ 482.053615][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 482.173597][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 482.193657][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.275846][ T5904] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 482.292145][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.422623][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 482.432897][T11421] openvswitch: netlink: Message has 3 unknown bytes. [ 483.802442][ T5904] usb 1-1: Product: syz [ 483.807638][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.813465][ T5904] usb 1-1: Manufacturer: syz [ 483.843465][ T5904] usb 1-1: SerialNumber: syz [ 483.898151][ T5904] usb 1-1: config 0 descriptor?? [ 484.043990][ T29] audit: type=1400 audit(1740920151.671:988): avc: denied { ioctl } for pid=11428 comm="syz.4.1369" path="socket:[35289]" dev="sockfs" ino=35289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.097078][T11429] xt_connbytes: Forcing CT accounting to be enabled [ 484.104878][T11429] --map-set only usable from mangle table [ 484.112849][T11429] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12561 sclass=netlink_xfrm_socket pid=11429 comm=syz.4.1369 [ 484.129588][ T5904] rc_core: IR keymap rc-imon-rsc not found [ 484.129617][ T29] audit: type=1400 audit(1740920151.671:989): avc: denied { bind } for pid=11428 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.163685][ T5904] Registered IR keymap rc-empty [ 484.196773][ T5904] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 484.290493][ T5904] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 484.696154][ T5904] usb 1-1: USB disconnect, device number 39 [ 485.774334][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.936298][ T29] audit: type=1400 audit(1740920153.581:990): avc: denied { getopt } for pid=11445 comm="syz.4.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 485.984961][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.993123][ T29] audit: type=1400 audit(1740920153.591:991): avc: denied { ioctl } for pid=11445 comm="syz.4.1376" path="socket:[35324]" dev="sockfs" ino=35324 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.374107][ T5869] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 486.523888][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 486.539359][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.571151][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 486.598126][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 486.624963][ T5871] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 486.652827][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 486.698791][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.725653][ T5869] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 486.742709][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.759275][ T5869] usb 4-1: Product: syz [ 486.764940][ T5869] usb 4-1: Manufacturer: syz [ 486.769606][ T5869] usb 4-1: SerialNumber: syz [ 486.777656][ T5869] usb 4-1: config 0 descriptor?? [ 486.793892][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 486.801054][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 486.833532][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.855925][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 486.874216][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.914187][ T5871] usb 5-1: Product: syz [ 486.918394][ T5871] usb 5-1: Manufacturer: syz [ 486.940149][ T5871] usb 5-1: SerialNumber: syz [ 486.959280][ T5871] usb 5-1: config 0 descriptor?? [ 486.985718][ T5869] rc_core: IR keymap rc-imon-rsc not found [ 486.994174][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 487.012299][ T5869] Registered IR keymap rc-empty [ 487.024787][ T5869] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 487.085135][ T5869] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 487.141538][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 487.147959][ T5869] usb 4-1: USB disconnect, device number 43 [ 487.157129][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 487.177342][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.240490][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 487.252799][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 487.267439][ T5871] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 487.269844][ T5871] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 487.303160][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 487.303202][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.319742][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 487.319775][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.319795][ T9] usb 2-1: Product: syz [ 487.319811][ T9] usb 2-1: Manufacturer: syz [ 487.319829][ T9] usb 2-1: SerialNumber: syz [ 487.321561][ T9] usb 2-1: config 0 descriptor?? [ 487.323838][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 487.400549][T11471] block nbd0: NBD_DISCONNECT [ 487.400676][T11471] block nbd0: Disconnected due to user request. [ 487.400707][T11471] block nbd0: shutting down sockets [ 487.437490][ T9] rc_core: IR keymap rc-imon-rsc not found [ 487.544101][ T45] usb 5-1: USB disconnect, device number 44 [ 487.693115][ T9] Registered IR keymap rc-empty [ 487.699589][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 487.734085][ T9] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 487.750459][ T9] usb 2-1: USB disconnect, device number 44 [ 489.436151][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.629223][T11497] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1388'. [ 489.756620][ T29] audit: type=1400 audit(1740920157.411:992): avc: denied { read } for pid=11494 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.883532][ T5904] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 490.056121][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7278, setting to 64 [ 490.096685][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 490.158974][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.212133][ T5904] usb 2-1: config 0 descriptor?? [ 490.237951][T11499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.263813][ T5904] hub 2-1:0.0: USB hub found [ 490.457385][ T5904] hub 2-1:0.0: 1 port detected [ 490.895369][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.952998][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.015629][T11516] block nbd4: NBD_DISCONNECT [ 491.020718][T11516] block nbd4: Disconnected due to user request. [ 491.027667][T11516] block nbd4: shutting down sockets [ 491.120866][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 491.153117][ T5904] usb 2-1: USB disconnect, device number 45 [ 491.159271][ T45] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 491.274279][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 491.291597][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.325190][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 491.424237][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 491.464665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 491.523545][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.562596][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 491.605563][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.658134][ T9] usb 4-1: Product: syz [ 491.686656][ T9] usb 4-1: Manufacturer: syz [ 491.708732][ T9] usb 4-1: SerialNumber: syz [ 491.744478][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.745487][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.773722][ T5904] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 491.782160][ T9] usb 4-1: config 0 descriptor?? [ 491.924722][ T9] rc_core: IR keymap rc-imon-rsc not found [ 491.930746][ T9] Registered IR keymap rc-empty [ 491.936835][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 491.962018][ T9] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 492.031478][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 492.076764][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 492.094250][ T9] usb 4-1: USB disconnect, device number 44 [ 492.116557][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 492.205473][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 492.269344][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.299846][ T5904] usb 2-1: Product: syz [ 492.334101][ T5904] usb 2-1: Manufacturer: syz [ 492.338761][ T5904] usb 2-1: SerialNumber: syz [ 492.360257][ T5904] usb 2-1: config 0 descriptor?? [ 492.446582][T11536] block nbd0: NBD_DISCONNECT [ 492.451292][T11536] block nbd0: Disconnected due to user request. [ 492.457958][T11536] block nbd0: shutting down sockets [ 492.635778][ T5904] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 492.636495][ T5904] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 492.837414][ T9] usb 2-1: USB disconnect, device number 46 [ 493.460470][T11540] misc userio: The device must be registered before sending interrupts [ 493.758337][T11555] FAULT_INJECTION: forcing a failure. [ 493.758337][T11555] name failslab, interval 1, probability 0, space 0, times 0 [ 493.924110][T11555] CPU: 1 UID: 0 PID: 11555 Comm: syz.3.1401 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 493.924138][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.924148][T11555] Call Trace: [ 493.924154][T11555] [ 493.924160][T11555] dump_stack_lvl+0x16c/0x1f0 [ 493.924187][T11555] should_fail_ex+0x50a/0x650 [ 493.924213][T11555] ? fs_reclaim_acquire+0xae/0x150 [ 493.924239][T11555] ? tomoyo_encode2+0x100/0x3e0 [ 493.924261][T11555] should_failslab+0xc2/0x120 [ 493.924279][T11555] __kmalloc_noprof+0xcb/0x510 [ 493.924297][T11555] ? d_absolute_path+0x137/0x1b0 [ 493.924318][T11555] ? rcu_is_watching+0x12/0xc0 [ 493.924337][T11555] tomoyo_encode2+0x100/0x3e0 [ 493.924362][T11555] tomoyo_encode+0x29/0x50 [ 493.924384][T11555] tomoyo_realpath_from_path+0x19d/0x720 [ 493.924415][T11555] tomoyo_path_number_perm+0x248/0x590 [ 493.924434][T11555] ? tomoyo_path_number_perm+0x235/0x590 [ 493.924457][T11555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.924501][T11555] ? __pfx_lock_release+0x10/0x10 [ 493.924522][T11555] ? trace_lock_acquire+0x14e/0x1f0 [ 493.924544][T11555] ? lock_acquire+0x2f/0xb0 [ 493.924565][T11555] ? __fget_files+0x40/0x3a0 [ 493.924592][T11555] ? __fget_files+0x206/0x3a0 [ 493.924609][T11555] security_file_ioctl+0x9b/0x240 [ 493.924633][T11555] __x64_sys_ioctl+0xb7/0x200 [ 493.924658][T11555] do_syscall_64+0xcd/0x250 [ 493.924680][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.924704][T11555] RIP: 0033:0x7ff14438d169 [ 493.924719][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.924737][T11555] RSP: 002b:00007ff1451c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.924754][T11555] RAX: ffffffffffffffda RBX: 00007ff1445a5fa0 RCX: 00007ff14438d169 [ 493.924767][T11555] RDX: 0000400000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 493.924778][T11555] RBP: 00007ff1451c1090 R08: 0000000000000000 R09: 0000000000000000 [ 493.924789][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.924799][T11555] R13: 0000000000000000 R14: 00007ff1445a5fa0 R15: 00007fff3549f508 [ 493.924824][T11555] [ 493.925566][T11555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 495.089295][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.367924][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 495.376995][T11566] openvswitch: netlink: Message has 3 unknown bytes. [ 495.665561][T11570] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 497.056132][ T29] audit: type=1326 audit(1740920164.701:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14438d169 code=0x7ffc0000 [ 497.136536][ T29] audit: type=1326 audit(1740920164.781:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ff14438d169 code=0x7ffc0000 [ 497.886827][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.898732][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.529775][T11606] evm: overlay not supported [ 499.572894][ T5871] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 500.324238][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.354599][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.373862][ T5871] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 500.382954][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.435736][ T5871] usb 2-1: config 0 descriptor?? [ 500.447306][T11611] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 501.319484][T11623] No such timeout policy "syz1" [ 501.409755][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.419761][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.435251][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.846414][ T29] audit: type=1400 audit(1740920169.491:995): avc: denied { setopt } for pid=11631 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 501.857646][ T5871] usb 2-1: can't set config #0, error -71 [ 501.880860][ T5871] usb 2-1: USB disconnect, device number 47 [ 502.618090][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 502.628708][T11641] openvswitch: netlink: Message has 3 unknown bytes. [ 502.835503][T11632] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 502.843446][T11632] netlink: 134708 bytes leftover after parsing attributes in process `syz.0.1421'. [ 503.130516][ T29] audit: type=1326 audit(1740920170.781:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.192253][T11657] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 503.237647][ T29] audit: type=1326 audit(1740920170.781:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.261729][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.265655][ T29] audit: type=1326 audit(1740920170.781:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.295089][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.295690][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.331712][T11657] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 503.437320][ T29] audit: type=1326 audit(1740920170.781:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.510309][ T29] audit: type=1326 audit(1740920170.781:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.715203][ T29] audit: type=1326 audit(1740920170.781:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 503.982510][ T29] audit: type=1326 audit(1740920170.781:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 504.098891][ T29] audit: type=1326 audit(1740920170.781:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 504.145218][ T29] audit: type=1326 audit(1740920170.781:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 504.273632][ T29] audit: type=1326 audit(1740920170.781:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.4.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe475d8d169 code=0x7ffc0000 [ 504.299762][T11668] bond2: entered promiscuous mode [ 504.386716][T11668] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 504.608525][T11675] No such timeout policy "syz1" [ 506.265907][T11690] xt_hashlimit: size too large, truncated to 1048576 [ 506.350648][T11693] netlink: 'syz.4.1439': attribute type 4 has an invalid length. [ 506.716847][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.435244][T11696] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1440'. [ 507.647079][T11708] FAULT_INJECTION: forcing a failure. [ 507.647079][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 507.659895][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.4.1442 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 507.659918][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.659927][T11708] Call Trace: [ 507.659931][T11708] [ 507.659935][T11708] dump_stack_lvl+0x16c/0x1f0 [ 507.659954][T11708] should_fail_ex+0x50a/0x650 [ 507.659973][T11708] ? fs_reclaim_acquire+0xae/0x150 [ 507.659990][T11708] should_failslab+0xc2/0x120 [ 507.660003][T11708] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 507.660016][T11708] ? __alloc_skb+0x2b1/0x380 [ 507.660032][T11708] __alloc_skb+0x2b1/0x380 [ 507.660046][T11708] ? __pfx___alloc_skb+0x10/0x10 [ 507.660061][T11708] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 507.660078][T11708] netlink_alloc_large_skb+0x69/0x130 [ 507.660093][T11708] netlink_sendmsg+0x689/0xd70 [ 507.660110][T11708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.660128][T11708] ____sys_sendmsg+0xaaf/0xc90 [ 507.660140][T11708] ? copy_msghdr_from_user+0x10b/0x160 [ 507.660156][T11708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.660173][T11708] ___sys_sendmsg+0x135/0x1e0 [ 507.660189][T11708] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.660208][T11708] ? __pfx_lock_release+0x10/0x10 [ 507.660224][T11708] ? trace_lock_acquire+0x14e/0x1f0 [ 507.660241][T11708] ? __fget_files+0x206/0x3a0 [ 507.660255][T11708] __sys_sendmsg+0x16e/0x220 [ 507.660271][T11708] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.660293][T11708] do_syscall_64+0xcd/0x250 [ 507.660308][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.660324][T11708] RIP: 0033:0x7fe475d8d169 [ 507.660335][T11708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.660346][T11708] RSP: 002b:00007fe476b35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.660356][T11708] RAX: ffffffffffffffda RBX: 00007fe475fa6080 RCX: 00007fe475d8d169 [ 507.660363][T11708] RDX: 0000000000000004 RSI: 0000400000001680 RDI: 0000000000000004 [ 507.660370][T11708] RBP: 00007fe476b35090 R08: 0000000000000000 R09: 0000000000000000 [ 507.660376][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.660382][T11708] R13: 0000000000000000 R14: 00007fe475fa6080 R15: 00007ffd4638d9f8 [ 507.660394][T11708] [ 508.123938][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 508.984330][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 508.996926][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 509.033891][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.044997][ T6493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.063995][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 509.114494][ T5871] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 509.150275][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 509.202029][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.245523][ T9] usb 6-1: Product: syz [ 509.250171][ T9] usb 6-1: Manufacturer: syz [ 509.259330][ T9] usb 6-1: SerialNumber: syz [ 509.271822][ T9] usb 6-1: config 0 descriptor?? [ 509.277431][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 509.288011][ T5871] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 509.474899][T11721] syz.3.1446 (11721): /proc/11720/oom_adj is deprecated, please use /proc/11720/oom_score_adj instead. [ 509.615597][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.635332][ T5871] usb 2-1: config 0 descriptor?? [ 509.653999][ T5871] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 509.718856][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 509.718873][ T29] audit: type=1400 audit(1740920177.371:1211): avc: denied { audit_read } for pid=11719 comm="syz.3.1446" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 509.884302][ T9] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 509.896282][ T9] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 510.041250][ T9] usb 6-1: USB disconnect, device number 36 [ 510.461772][ T5871] gspca_sonixj: reg_r err -71 [ 510.467018][ T5871] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 510.484396][ T5871] usb 2-1: USB disconnect, device number 48 [ 510.665170][T11729] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 510.687397][T11729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.718084][T11729] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 510.722146][T11730] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 510.820438][T11730] ip6gre2: entered promiscuous mode [ 511.068563][T11739] netlink: 'syz.1.1452': attribute type 4 has an invalid length. [ 512.116753][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 512.167840][T11744] ipvlan2: entered promiscuous mode [ 512.195268][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 512.223939][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.424313][T11753] misc userio: The device must be registered before sending interrupts [ 512.436513][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 512.458557][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 512.793767][T11757] VFS: could not find a valid V7 on nullb0. [ 513.384130][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.425359][ T9] usb 5-1: config 0 descriptor?? [ 513.431436][T11736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 513.513762][ T5867] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 513.767353][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 513.785201][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 513.937180][ T5867] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 513.944228][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 513.975036][T11763] FAULT_INJECTION: forcing a failure. [ 513.975036][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 513.994179][ T5867] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.014650][ T9] usb 5-1: USB disconnect, device number 45 [ 514.022132][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.3.1457 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 514.022153][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 514.022163][T11763] Call Trace: [ 514.022167][T11763] [ 514.022174][T11763] dump_stack_lvl+0x16c/0x1f0 [ 514.022200][T11763] should_fail_ex+0x50a/0x650 [ 514.022224][T11763] ? fs_reclaim_acquire+0xae/0x150 [ 514.022249][T11763] ? tomoyo_encode2+0x100/0x3e0 [ 514.022272][T11763] should_failslab+0xc2/0x120 [ 514.022291][T11763] __kmalloc_noprof+0xcb/0x510 [ 514.022307][T11763] ? d_absolute_path+0x137/0x1b0 [ 514.022328][T11763] ? rcu_is_watching+0x12/0xc0 [ 514.022348][T11763] tomoyo_encode2+0x100/0x3e0 [ 514.022374][T11763] tomoyo_encode+0x29/0x50 [ 514.022396][T11763] tomoyo_realpath_from_path+0x19d/0x720 [ 514.022423][T11763] tomoyo_path_number_perm+0x248/0x590 [ 514.022443][T11763] ? tomoyo_path_number_perm+0x235/0x590 [ 514.022473][T11763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.022519][T11763] ? __pfx_lock_release+0x10/0x10 [ 514.022544][T11763] ? trace_lock_acquire+0x14e/0x1f0 [ 514.022568][T11763] ? lock_acquire+0x2f/0xb0 [ 514.022590][T11763] ? __fget_files+0x40/0x3a0 [ 514.022610][T11763] ? __fget_files+0x206/0x3a0 [ 514.022631][T11763] security_file_ioctl+0x9b/0x240 [ 514.022658][T11763] __x64_sys_ioctl+0xb7/0x200 [ 514.022684][T11763] do_syscall_64+0xcd/0x250 [ 514.022709][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.022734][T11763] RIP: 0033:0x7ff14438d169 [ 514.022749][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.022766][T11763] RSP: 002b:00007ff1451c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.022784][T11763] RAX: ffffffffffffffda RBX: 00007ff1445a5fa0 RCX: 00007ff14438d169 [ 514.022797][T11763] RDX: 0000400000000040 RSI: 00000000c02c564a RDI: 0000000000000003 [ 514.022808][T11763] RBP: 00007ff1451c1090 R08: 0000000000000000 R09: 0000000000000000 [ 514.022820][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.022830][T11763] R13: 0000000000000000 R14: 00007ff1445a5fa0 R15: 00007fff3549f508 [ 514.022855][T11763] [ 514.033582][ T5867] usb 6-1: config 1 has no interface number 1 [ 514.034893][T11763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.193648][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.279451][ T5867] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.298888][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.323162][ T5867] usb 6-1: Product: syz [ 514.343645][ T5867] usb 6-1: Manufacturer: syz [ 514.354422][ T5867] usb 6-1: SerialNumber: syz [ 514.527244][T11765] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 514.559316][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.655306][T11766] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 514.784292][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.784292][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.064197][ T5871] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 515.138944][T11775] FAULT_INJECTION: forcing a failure. [ 515.138944][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 515.175437][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.1.1459 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 515.175466][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.175478][T11775] Call Trace: [ 515.175483][T11775] [ 515.175490][T11775] dump_stack_lvl+0x16c/0x1f0 [ 515.175523][T11775] should_fail_ex+0x50a/0x650 [ 515.175549][T11775] ? fs_reclaim_acquire+0xae/0x150 [ 515.175576][T11775] should_failslab+0xc2/0x120 [ 515.175597][T11775] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 515.175614][T11775] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 515.175636][T11775] ? getname_flags.part.0+0x4c/0x550 [ 515.175662][T11775] getname_flags.part.0+0x4c/0x550 [ 515.175687][T11775] getname_flags+0x93/0xf0 [ 515.175713][T11775] user_path_at+0x24/0x60 [ 515.175729][T11775] __x64_sys_name_to_handle_at+0x1eb/0x310 [ 515.175757][T11775] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 515.175789][T11775] do_syscall_64+0xcd/0x250 [ 515.175813][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.175836][T11775] RIP: 0033:0x7fa801f8d169 [ 515.175850][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.175867][T11775] RSP: 002b:00007fa7ffdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 515.175884][T11775] RAX: ffffffffffffffda RBX: 00007fa8021a6160 RCX: 00007fa801f8d169 [ 515.175895][T11775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 515.175905][T11775] RBP: 00007fa7ffdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.175915][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.175926][T11775] R13: 0000000000000000 R14: 00007fa8021a6160 R15: 00007fff5f666bf8 [ 515.175949][T11775] [ 515.600953][ T5871] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 515.610927][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.677817][ T5867] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 515.686345][ T5867] usb 6-1: 2:1 : sample bitwidth 54 in over sample bytes 4 [ 515.688621][ T5871] usb 5-1: config 0 descriptor?? [ 515.694813][ T5867] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 515.720388][ T5867] usb 6-1: USB disconnect, device number 37 [ 516.125411][ T5867] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 516.188316][ T5871] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 516.210553][ T5871] [drm] Initialized udl on minor 2 [ 516.263744][T11786] netlink: 'syz.1.1465': attribute type 4 has an invalid length. [ 516.346388][ T29] audit: type=1400 audit(1740920184.001:1212): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 516.458016][ T5867] usb 6-1: config 0 has no interfaces? [ 516.463752][ T5867] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.472808][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.289181][ T5871] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 517.303313][ T5871] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 517.305260][ T5867] usb 6-1: config 0 descriptor?? [ 517.315390][T11793] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 517.365753][ T9311] udevd[9311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.424845][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 517.465478][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 517.475819][ T5871] usb 5-1: USB disconnect, device number 46 [ 517.482140][ T5919] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 517.774118][T11800] No such timeout policy "syz1" [ 518.200169][ T2985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.568563][ T29] audit: type=1400 audit(1740920186.201:1213): avc: denied { write } for pid=11810 comm="syz.1.1473" name="route" dev="proc" ino=4026533236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 518.687962][ T29] audit: type=1400 audit(1740920186.211:1214): avc: denied { create } for pid=11810 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 518.710492][ T5871] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 518.714051][ T45] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 518.886863][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.915674][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.982963][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 518.998382][ T45] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 519.004540][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 519.017858][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.033770][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.039515][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.055694][ T45] usb 5-1: Product: syz [ 519.059908][ T45] usb 5-1: Manufacturer: syz [ 519.073261][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.092716][ T5871] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 519.113028][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.122172][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.145919][ T5871] usb 4-1: config 0 descriptor?? [ 519.223478][ T45] usb 5-1: SerialNumber: syz [ 519.254059][ T45] usb 5-1: config 0 descriptor?? [ 519.274053][ T45] gspca_main: se401-2.14.0 probing 047d:5003 [ 519.757565][ T45] gspca_se401: Wrong descriptor type [ 519.919355][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.045934][ T5871] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 520.117408][T11829] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 520.117408][T11829] The task syz.4.1470 (11829) triggered the difference, watch for misbehavior. [ 520.143043][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 520.153904][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1470'. [ 520.205895][T11829] gtp0: entered promiscuous mode [ 520.210932][T11829] gtp0: entered allmulticast mode [ 520.404558][ T5919] usb 6-1: USB disconnect, device number 38 [ 520.423092][ T5871] usb 4-1: USB disconnect, device number 45 [ 520.544457][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.549650][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1475'. [ 520.582872][T11835] program syz.1.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.724346][T11838] netlink: 'syz.1.1477': attribute type 4 has an invalid length. [ 521.575446][ T5871] usb 5-1: USB disconnect, device number 47 [ 522.878979][ T29] audit: type=1400 audit(1740920190.531:1215): avc: denied { getopt } for pid=11858 comm="syz.0.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 522.928943][ T29] audit: type=1400 audit(1740920190.531:1216): avc: denied { write } for pid=11858 comm="syz.0.1483" path="socket:[36735]" dev="sockfs" ino=36735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 524.609675][ T29] audit: type=1400 audit(1740920192.261:1217): avc: denied { mount } for pid=11872 comm="syz.1.1487" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 524.633208][T11873] FAULT_INJECTION: forcing a failure. [ 524.633208][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.742164][T11873] CPU: 1 UID: 0 PID: 11873 Comm: syz.1.1487 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 524.742196][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 524.742207][T11873] Call Trace: [ 524.742213][T11873] [ 524.742220][T11873] dump_stack_lvl+0x16c/0x1f0 [ 524.742249][T11873] should_fail_ex+0x50a/0x650 [ 524.742281][T11873] _copy_to_iter+0x2a1/0x1560 [ 524.742301][T11873] ? trace_lock_acquire+0x14e/0x1f0 [ 524.742325][T11873] ? __pfx__copy_to_iter+0x10/0x10 [ 524.742341][T11873] ? __virt_addr_valid+0x1a4/0x590 [ 524.742363][T11873] ? __virt_addr_valid+0x5e/0x590 [ 524.742381][T11873] ? __phys_addr_symbol+0x30/0x80 [ 524.742398][T11873] ? __check_object_size+0x488/0x710 [ 524.742422][T11873] seq_read_iter+0xd00/0x12b0 [ 524.742459][T11873] vfs_read+0x886/0xbf0 [ 524.742490][T11873] ? __pfx_vfs_read+0x10/0x10 [ 524.742532][T11873] ksys_read+0x12b/0x250 [ 524.742557][T11873] ? __pfx_ksys_read+0x10/0x10 [ 524.742590][T11873] do_syscall_64+0xcd/0x250 [ 524.742614][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.742638][T11873] RIP: 0033:0x7fa801f8d169 [ 524.742652][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.742667][T11873] RSP: 002b:00007fa802d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.742684][T11873] RAX: ffffffffffffffda RBX: 00007fa8021a5fa0 RCX: 00007fa801f8d169 [ 524.742696][T11873] RDX: 000000000000941f RSI: 0000400000007100 RDI: 0000000000000003 [ 524.742706][T11873] RBP: 00007fa802d26090 R08: 0000000000000000 R09: 0000000000000000 [ 524.742716][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.742726][T11873] R13: 0000000000000000 R14: 00007fa8021a5fa0 R15: 00007fff5f666bf8 [ 524.742750][T11873] [ 525.185100][ T29] audit: type=1400 audit(1740920192.841:1218): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 525.458812][T11883] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1492'. [ 525.665024][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.770780][ T5821] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 526.007310][T11891] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 526.033899][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 526.063785][T11891] bond1: entered promiscuous mode [ 526.084368][T11893] team_slave_1: entered promiscuous mode [ 526.090057][T11893] team_slave_1: entered allmulticast mode [ 526.125522][T11893] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 526.194134][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 526.303981][ T3024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.515685][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.535090][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.559112][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.570102][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.579075][ T9] usb 2-1: Product: syz [ 526.584414][ T9] usb 2-1: Manufacturer: syz [ 526.589066][ T9] usb 2-1: SerialNumber: syz [ 526.811612][ T9] usb 2-1: 0:2 : does not exist [ 526.817367][ T9] usb 2-1: unit 0 not found! [ 526.867822][ T9] usb 2-1: USB disconnect, device number 49 [ 527.274132][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 527.454007][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 527.565366][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 527.575340][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.583357][ T9] usb 2-1: Product: syz [ 527.894071][ T9] usb 2-1: Manufacturer: syz [ 527.923630][ T9] usb 2-1: SerialNumber: syz [ 527.958048][ T9] usb 2-1: config 0 descriptor?? [ 528.020635][ T9] imon_raw 2-1:0.0: IR endpoint missing [ 528.035324][ T9311] udevd[9311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.184167][ T5867] usb 2-1: USB disconnect, device number 50 [ 528.253538][ T45] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 528.474886][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.984989][ T45] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.003356][T11939] No such timeout policy "syz1" [ 529.013575][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.044976][ T45] usb 1-1: config 0 descriptor?? [ 529.327033][ T45] pwc: Askey VC010 type 2 USB webcam detected. [ 529.612177][T11946] FAULT_INJECTION: forcing a failure. [ 529.612177][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.637572][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.5.1504 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 529.637597][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 529.637607][T11946] Call Trace: [ 529.637612][T11946] [ 529.637618][T11946] dump_stack_lvl+0x16c/0x1f0 [ 529.637644][T11946] should_fail_ex+0x50a/0x650 [ 529.637671][T11946] strncpy_from_user+0x3b/0x2d0 [ 529.637695][T11946] getname_flags.part.0+0x8f/0x550 [ 529.637718][T11946] getname+0x8d/0xe0 [ 529.637741][T11946] do_sys_openat2+0x104/0x1e0 [ 529.637761][T11946] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.637782][T11946] ? __fget_files+0x206/0x3a0 [ 529.637802][T11946] __x64_sys_openat+0x175/0x210 [ 529.637823][T11946] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.637843][T11946] ? ksys_write+0x1ba/0x250 [ 529.637872][T11946] do_syscall_64+0xcd/0x250 [ 529.637894][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.637915][T11946] RIP: 0033:0x7f393e18d169 [ 529.637929][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.637945][T11946] RSP: 002b:00007f393effb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.637962][T11946] RAX: ffffffffffffffda RBX: 00007f393e3a5fa0 RCX: 00007f393e18d169 [ 529.637974][T11946] RDX: 000000000000a0c2 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 529.637984][T11946] RBP: 00007f393effb090 R08: 0000000000000000 R09: 0000000000000000 [ 529.637993][T11946] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 529.638003][T11946] R13: 0000000000000000 R14: 00007f393e3a5fa0 R15: 00007ffc8f00a218 [ 529.638024][T11946] [ 529.673463][ T45] pwc: recv_control_msg error -32 req 02 val 2b00 [ 529.675120][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.820413][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.826394][ C0] hrtimer: interrupt took 183013321 ns [ 529.841345][ T45] pwc: recv_control_msg error -32 req 02 val 2700 [ 529.848322][ T45] pwc: recv_control_msg error -32 req 02 val 2c00 [ 529.855650][ T45] pwc: recv_control_msg error -32 req 04 val 1000 [ 529.862757][ T45] pwc: recv_control_msg error -32 req 04 val 1300 [ 529.869781][ T45] pwc: recv_control_msg error -32 req 04 val 1400 [ 529.923665][T11952] FAULT_INJECTION: forcing a failure. [ 529.923665][T11952] name failslab, interval 1, probability 0, space 0, times 0 [ 529.926438][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.949432][ T45] pwc: recv_control_msg error -32 req 02 val 2000 [ 529.959764][T11952] CPU: 1 UID: 0 PID: 11952 Comm: syz.5.1508 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 529.959795][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 529.959807][T11952] Call Trace: [ 529.959814][T11952] [ 529.959823][T11952] dump_stack_lvl+0x16c/0x1f0 [ 529.959853][T11952] should_fail_ex+0x50a/0x650 [ 529.959882][T11952] ? fs_reclaim_acquire+0xae/0x150 [ 529.959913][T11952] should_failslab+0xc2/0x120 [ 529.959935][T11952] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 529.959955][T11952] ? lockdep_init_map_type+0x16d/0x7d0 [ 529.959983][T11952] ? security_inode_alloc+0x3b/0x2b0 [ 529.960012][T11952] security_inode_alloc+0x3b/0x2b0 [ 529.960038][T11952] inode_init_always_gfp+0xce4/0x1030 [ 529.960061][T11952] alloc_inode+0x82/0x230 [ 529.960083][T11952] sock_alloc+0x40/0x280 [ 529.960111][T11952] do_accept+0xf8/0x530 [ 529.960134][T11952] ? do_raw_spin_lock+0x12d/0x2c0 [ 529.960153][T11952] ? __pfx_do_accept+0x10/0x10 [ 529.960192][T11952] __sys_accept4+0xfe/0x1b0 [ 529.960215][T11952] ? __pfx___sys_accept4+0x10/0x10 [ 529.960236][T11952] ? ksys_write+0x1ba/0x250 [ 529.960265][T11952] ? __pfx_ksys_write+0x10/0x10 [ 529.960299][T11952] __x64_sys_accept+0x74/0xb0 [ 529.960320][T11952] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.960346][T11952] do_syscall_64+0xcd/0x250 [ 529.960380][T11952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.960407][T11952] RIP: 0033:0x7f393e18d169 [ 529.960423][T11952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.960442][T11952] RSP: 002b:00007f393effb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 529.960461][T11952] RAX: ffffffffffffffda RBX: 00007f393e3a5fa0 RCX: 00007f393e18d169 [ 529.960474][T11952] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 529.960486][T11952] RBP: 00007f393effb090 R08: 0000000000000000 R09: 0000000000000000 [ 529.960498][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.960509][T11952] R13: 0000000000000000 R14: 00007f393e3a5fa0 R15: 00007ffc8f00a218 [ 529.960535][T11952] [ 530.244575][ T45] pwc: recv_control_msg error -32 req 02 val 2100 [ 530.246136][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.254015][ T45] pwc: recv_control_msg error -32 req 04 val 1500 [ 530.267365][ T45] pwc: recv_control_msg error -32 req 02 val 2500 [ 530.277461][ T5821] ================================================================== [ 530.285548][ T5821] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 530.293643][ T5821] Read of size 8 at addr ffff8880611d9188 by task kworker/u9:2/5821 [ 530.301607][ T5821] [ 530.303931][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:2 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 530.303953][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 530.303966][ T5821] Workqueue: hci4 hci_rx_work [ 530.303994][ T5821] Call Trace: [ 530.304001][ T5821] [ 530.304008][ T5821] dump_stack_lvl+0x116/0x1f0 [ 530.304030][ T5821] print_report+0xc3/0x670 [ 530.304051][ T5821] ? __virt_addr_valid+0x5e/0x590 [ 530.304068][ T5821] ? __phys_addr+0xc6/0x150 [ 530.304084][ T5821] kasan_report+0xd9/0x110 [ 530.304100][ T5821] ? l2cap_sock_ready_cb+0x16a/0x170 [ 530.304123][ T5821] ? l2cap_sock_ready_cb+0x16a/0x170 [ 530.304146][ T5821] l2cap_sock_ready_cb+0x16a/0x170 [ 530.304166][ T5821] l2cap_le_start+0x1ec/0xe40 [ 530.304183][ T5821] ? __pfx___mutex_lock+0x10/0x10 [ 530.304201][ T5821] ? __pfx_l2cap_le_start+0x10/0x10 [ 530.304218][ T5821] ? do_raw_read_unlock+0x44/0xe0 [ 530.304234][ T5821] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 530.304252][ T5821] ? __l2cap_chan_add+0x3ed/0xa30 [ 530.304271][ T5821] l2cap_connect_cfm+0x99f/0xf10 [ 530.304292][ T5821] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 530.304311][ T5821] ? rcu_is_watching+0x12/0xc0 [ 530.304327][ T5821] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 530.304361][ T5821] le_conn_complete_evt+0x168d/0x1da0 [ 530.304387][ T5821] ? __pfx_lock_release+0x10/0x10 [ 530.304409][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 530.304434][ T5821] hci_le_conn_complete_evt+0x23c/0x370 [ 530.304459][ T5821] hci_le_meta_evt+0x2e2/0x5d0 [ 530.304484][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 530.304505][ T5821] hci_event_packet+0x666/0x1180 [ 530.304523][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 530.304544][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 530.304563][ T5821] ? mark_held_locks+0x9f/0xe0 [ 530.304582][ T5821] ? kcov_remote_start+0x3cf/0x6e0 [ 530.304603][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.304621][ T5821] hci_rx_work+0x2c5/0x16b0 [ 530.304641][ T5821] ? process_one_work+0x921/0x1ba0 [ 530.304661][ T5821] process_one_work+0x9c5/0x1ba0 [ 530.304682][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 530.304701][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 530.304721][ T5821] ? assign_work+0x1a0/0x250 [ 530.304738][ T5821] worker_thread+0x6c8/0xf00 [ 530.304759][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 530.304777][ T5821] kthread+0x3af/0x750 [ 530.304793][ T5821] ? __pfx_kthread+0x10/0x10 [ 530.304808][ T5821] ? lock_acquire+0x2f/0xb0 [ 530.304827][ T5821] ? __pfx_kthread+0x10/0x10 [ 530.304843][ T5821] ret_from_fork+0x45/0x80 [ 530.304862][ T5821] ? __pfx_kthread+0x10/0x10 [ 530.304877][ T5821] ret_from_fork_asm+0x1a/0x30 [ 530.304897][ T5821] [ 530.304902][ T5821] [ 530.565480][ T5821] Allocated by task 11952: [ 530.569894][ T5821] kasan_save_stack+0x33/0x60 [ 530.574567][ T5821] kasan_save_track+0x14/0x30 [ 530.579248][ T5821] __kasan_kmalloc+0xaa/0xb0 [ 530.583826][ T5821] __kmalloc_noprof+0x21c/0x510 [ 530.588684][ T5821] sk_prot_alloc+0x1a8/0x2a0 [ 530.593259][ T5821] sk_alloc+0x36/0xc20 [ 530.597314][ T5821] bt_sock_alloc+0x3b/0x3a0 [ 530.601806][ T5821] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 530.607609][ T5821] l2cap_sock_create+0x123/0x1f0 [ 530.612541][ T5821] bt_sock_create+0x182/0x350 [ 530.617210][ T5821] __sock_create+0x335/0x8d0 [ 530.621788][ T5821] __sys_socket+0x14f/0x260 [ 530.626272][ T5821] __x64_sys_socket+0x72/0xb0 [ 530.630937][ T5821] do_syscall_64+0xcd/0x250 [ 530.635429][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.641312][ T5821] [ 530.643622][ T5821] Freed by task 11951: [ 530.647678][ T5821] kasan_save_stack+0x33/0x60 [ 530.652344][ T5821] kasan_save_track+0x14/0x30 [ 530.657002][ T5821] kasan_save_free_info+0x3b/0x60 [ 530.662016][ T5821] __kasan_slab_free+0x51/0x70 [ 530.666765][ T5821] kfree+0x2c4/0x4d0 [ 530.670664][ T5821] __sk_destruct+0x5ef/0x6f0 [ 530.675264][ T5821] sk_destruct+0xc2/0xf0 [ 530.679508][ T5821] __sk_free+0xf4/0x3e0 [ 530.683658][ T5821] sk_free+0x6a/0x90 [ 530.687573][ T5821] l2cap_sock_kill+0x171/0x2d0 [ 530.692318][ T5821] l2cap_sock_release+0x189/0x210 [ 530.697326][ T5821] __sock_release+0xb0/0x270 [ 530.701907][ T5821] sock_close+0x1c/0x30 [ 530.706052][ T5821] __fput+0x3ff/0xb70 [ 530.710037][ T5821] task_work_run+0x14e/0x250 [ 530.714627][ T5821] syscall_exit_to_user_mode+0x27b/0x2a0 [ 530.720253][ T5821] do_syscall_64+0xda/0x250 [ 530.724744][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.730629][ T5821] [ 530.732933][ T5821] The buggy address belongs to the object at ffff8880611d9000 [ 530.732933][ T5821] which belongs to the cache kmalloc-2k of size 2048 [ 530.746990][ T5821] The buggy address is located 392 bytes inside of [ 530.746990][ T5821] freed 2048-byte region [ffff8880611d9000, ffff8880611d9800) [ 530.760858][ T5821] [ 530.763162][ T5821] The buggy address belongs to the physical page: [ 530.769550][ T5821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x611d8 [ 530.778292][ T5821] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 530.786770][ T5821] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 530.794297][ T5821] page_type: f5(slab) [ 530.798261][ T5821] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 530.806826][ T5821] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 530.815392][ T5821] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 530.824048][ T5821] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 530.832699][ T5821] head: 00fff00000000003 ffffea0001847601 ffffffffffffffff 0000000000000000 [ 530.841372][ T5821] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 530.850021][ T5821] page dumped because: kasan: bad access detected [ 530.856413][ T5821] page_owner tracks the page as allocated [ 530.862104][ T5821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 55598113881, free_ts 13058889019 [ 530.883457][ T5821] post_alloc_hook+0x181/0x1b0 [ 530.888228][ T5821] get_page_from_freelist+0xfce/0x2f80 [ 530.893675][ T5821] __alloc_frozen_pages_noprof+0x221/0x2470 [ 530.899558][ T5821] alloc_pages_mpol+0x1fc/0x540 [ 530.904392][ T5821] new_slab+0x23d/0x330 [ 530.908534][ T5821] ___slab_alloc+0xc5d/0x1720 [ 530.913202][ T5821] __slab_alloc.constprop.0+0x56/0xb0 [ 530.918564][ T5821] __kmalloc_node_noprof+0x2f0/0x510 [ 530.923835][ T5821] __kvmalloc_node_noprof+0xad/0x1a0 [ 530.929115][ T5821] page_pool_create_percpu+0x34e/0xb20 [ 530.934567][ T5821] nsim_open+0x376/0x9e0 [ 530.938789][ T5821] __dev_open+0x2d4/0x540 [ 530.943106][ T5821] __dev_change_flags+0x561/0x720 [ 530.948128][ T5821] dev_change_flags+0x8f/0x160 [ 530.952878][ T5821] do_setlink.constprop.0+0x699/0x3f80 [ 530.958323][ T5821] rtnl_newlink+0x1306/0x1d60 [ 530.962989][ T5821] page last free pid 1 tgid 1 stack trace: [ 530.968772][ T5821] free_frozen_pages+0x6db/0xfb0 [ 530.973696][ T5821] free_contig_range+0x133/0x3f0 [ 530.978619][ T5821] destroy_args+0x66f/0x830 [ 530.983104][ T5821] debug_vm_pgtable+0x130f/0x2d60 [ 530.988121][ T5821] do_one_initcall+0x128/0x700 [ 530.992871][ T5821] kernel_init_freeable+0x5c7/0x900 [ 530.998050][ T5821] kernel_init+0x1c/0x2b0 [ 531.002369][ T5821] ret_from_fork+0x45/0x80 [ 531.006774][ T5821] ret_from_fork_asm+0x1a/0x30 [ 531.011522][ T5821] [ 531.013833][ T5821] Memory state around the buggy address: [ 531.019447][ T5821] ffff8880611d9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.027498][ T5821] ffff8880611d9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.035566][ T5821] >ffff8880611d9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.043608][ T5821] ^ [ 531.047920][ T5821] ffff8880611d9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.055962][ T5821] ffff8880611d9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.064001][ T5821] ================================================================== [ 531.072733][ T5904] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 531.088758][ T45] pwc: recv_control_msg error -71 req 02 val 2600 [ 531.099672][ T5821] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 531.106898][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:2 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 531.117763][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.127824][ T5821] Workqueue: hci4 hci_rx_work [ 531.132524][ T5821] Call Trace: [ 531.135799][ T5821] [ 531.138727][ T5821] dump_stack_lvl+0x3d/0x1f0 [ 531.143326][ T5821] panic+0x71d/0x800 [ 531.147222][ T5821] ? __pfx_panic+0x10/0x10 [ 531.151639][ T5821] ? irqentry_exit+0x3b/0x90 [ 531.156234][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.161436][ T5821] ? preempt_schedule_thunk+0x1a/0x30 [ 531.166815][ T5821] ? preempt_schedule_common+0x44/0xc0 [ 531.172284][ T5821] check_panic_on_warn+0xab/0xb0 [ 531.177225][ T5821] end_report+0x117/0x180 [ 531.181561][ T5821] kasan_report+0xe9/0x110 [ 531.185981][ T5821] ? l2cap_sock_ready_cb+0x16a/0x170 [ 531.191276][ T5821] ? l2cap_sock_ready_cb+0x16a/0x170 [ 531.196579][ T5821] l2cap_sock_ready_cb+0x16a/0x170 [ 531.201703][ T5821] l2cap_le_start+0x1ec/0xe40 [ 531.206389][ T5821] ? __pfx___mutex_lock+0x10/0x10 [ 531.211414][ T5821] ? __pfx_l2cap_le_start+0x10/0x10 [ 531.216610][ T5821] ? do_raw_read_unlock+0x44/0xe0 [ 531.221638][ T5821] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 531.227619][ T5821] ? __l2cap_chan_add+0x3ed/0xa30 [ 531.232647][ T5821] l2cap_connect_cfm+0x99f/0xf10 [ 531.237596][ T5821] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 531.243063][ T5821] ? rcu_is_watching+0x12/0xc0 [ 531.247836][ T5821] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 531.253297][ T5821] le_conn_complete_evt+0x168d/0x1da0 [ 531.258674][ T5821] ? __pfx_lock_release+0x10/0x10 [ 531.263707][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 531.269439][ T5821] hci_le_conn_complete_evt+0x23c/0x370 [ 531.274999][ T5821] hci_le_meta_evt+0x2e2/0x5d0 [ 531.279778][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 531.285852][ T5821] hci_event_packet+0x666/0x1180 [ 531.290798][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 531.296088][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 531.301470][ T5821] ? mark_held_locks+0x9f/0xe0 [ 531.306241][ T5821] ? kcov_remote_start+0x3cf/0x6e0 [ 531.311362][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.316568][ T5821] hci_rx_work+0x2c5/0x16b0 [ 531.321076][ T5821] ? process_one_work+0x921/0x1ba0 [ 531.326204][ T5821] process_one_work+0x9c5/0x1ba0 [ 531.331174][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 531.336825][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 531.342225][ T5821] ? assign_work+0x1a0/0x250 [ 531.346831][ T5821] worker_thread+0x6c8/0xf00 [ 531.351438][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 531.356562][ T5821] kthread+0x3af/0x750 [ 531.360635][ T5821] ? __pfx_kthread+0x10/0x10 [ 531.365227][ T5821] ? lock_acquire+0x2f/0xb0 [ 531.369742][ T5821] ? __pfx_kthread+0x10/0x10 [ 531.374333][ T5821] ret_from_fork+0x45/0x80 [ 531.378760][ T5821] ? __pfx_kthread+0x10/0x10 [ 531.383356][ T5821] ret_from_fork_asm+0x1a/0x30 [ 531.388125][ T5821] [ 531.391391][ T5821] Kernel Offset: disabled [ 531.395698][ T5821] Rebooting in 86400 seconds..