last executing test programs: 13m30.274255997s ago: executing program 4 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000001f0000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 13m30.10418373s ago: executing program 4 (id=33): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x180, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 13m29.936925399s ago: executing program 4 (id=35): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000b3b627dae43b0f46c8d2b5aaecef8da6c3006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x34001, 0x0) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) (async) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) (async) flock(r1, 0x2) (async) close_range(r1, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) prlimit64(r4, 0xd, &(0x7f0000000000)={0x9, 0x80000000}, &(0x7f0000000300)) (async) r5 = open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) fcntl$setlease(r5, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x0, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$TCFLSH(r3, 0x89f0, 0x1) 13m29.726113766s ago: executing program 4 (id=36): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket(0x840000000002, 0x3, 0xff) setresgid(0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x101}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000300)="ea72ae3fcc71a916cc5d84036b45697174c3144f7b63e4a73d78a4de119304bf1535f5935386c873bcae8f707ee35a6400f29a13e50512d478348f5efd8c78567575aac8acda0f81b0fd5c74696469428b46f7e279df31d0e05ed48ee4534f9f6ae3ba5ce3a378656a840c63cff2c35b7c6c82ad4f55f32949c9ce48b1107b3de128c315afbd24fce9ff6753091fcc32944f994386c0751a1e9828e1b9cb10aaa67039bbc618631ce3c798244352a8e2aa857971f774560d9ae3a4936c912482a0330a2c85af2ab9ccd88f0e0783b3b106670e276ddbb5fca7b62260a2d7b19a357c5f", 0xe3, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='encrypted\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x4) 13m26.16443864s ago: executing program 4 (id=42): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740)="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"/446, 0x1be) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@deltclass={0x4c, 0x29, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x1, 0xc}, {0x2, 0x2}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0xfe, 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080884}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0xb635773f04ebbeed, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002bbd845fa2122d5f999a79fa7000fddbdf2506000000140006006970766c616e31000000000000000000080004007f00000114000300fc02000000000000000000000000000005000100000000004c6679a428c721c45cbd45318aa98a2bb9fe66d17529fdca198c5b78010699ebf78cb293518ae1ddc6822f16d0d45162f053901ac1fe8397fa82e95af2"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000844) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b", 0xe}], 0x1}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13m25.203639461s ago: executing program 4 (id=44): open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x2004804c) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)={[{'noac,'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x26e}}, './file0\x00'}) 13m10.070198695s ago: executing program 32 (id=44): open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x2004804c) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)={[{'noac,'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x26e}}, './file0\x00'}) 11.920110917s ago: executing program 1 (id=2586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) semget$private(0x0, 0x0, 0x162) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff0000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0), &(0x7f0000000280)) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0xaa}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) 11.434813596s ago: executing program 0 (id=2587): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x6) 9.644454521s ago: executing program 1 (id=2589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xc0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xc0, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0xa9, 0x2, 0x0, 0x0, @str='n\x1f\xf3\' Rl8\xf5J\x95\xab\'\xa4\x02I$.\x0ee\xa9\t\x11\xe8q\xbd\xb6\xa3\x18\xf4\xaf2\x01NB\xab\xcdD\xaf\x80U\x93\xe3\x00\xd2\x10(u`\x95)\xa1HP\xe9\x8c\xe9\xd7\x18\t\xd6\x1e8|\x03x\xb48[\x84\xab\xe9\x88\x8a\x14\'\b\x91\r\xf8\x9c\x9d\xb8l\x94\xf7\xba\xdc\xe7\xb9<\xb1\xc4\x11*]V2\xb9n\x9e\x8a\xe8\x89\x84x\xeam\xd93\xadq\xd7\xa2=wB\xd1\xf6-]\x89\xf2\xae:*\x13\xe0\xce\xac\xa9\xc8Z\xfa\x89\t\xe1\xdaXp\xfb\xfb\xcf\xa3\x9c\t\x82\xbc\x9dD\x9e9\xabSx\xd2\x8a\xdd\x03F\xa3|\xa1aK'}]}, 0xc0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000009040), r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffd16}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x880) 9.643529197s ago: executing program 5 (id=2590): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000041dbd935c5657fce23d3e44fad4ac1adeb1254aafac7652eeddd8dcfb43be2c810a1d564af2407bc6df197c200dadddaeb534f5a3adae5e31ab944c953dacb1", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_make_fs_calli\x00', r3, 0x0, 0x40}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000580)="09000000010001", 0x7) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x58, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 9.620867319s ago: executing program 0 (id=2591): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000008c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote}, 0xc07, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0xc1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @dev}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local, {[0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x100, 0xfff, 0x0, 0x0, 'ip6_vti0\x00', 'netpci0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={@remote, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@loopback}, {@broadcast}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r5, 0x18, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x467}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x130e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x113a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x805}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1024}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x400409c) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/236, 0xec}], 0x6) 7.928086425s ago: executing program 1 (id=2595): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000300)={0xb}, 0xa) 7.267160494s ago: executing program 5 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@getqdisc={0x28, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0xc, 0xec470baacb9dbbc1}, {0xffe0, 0xfff2}}, [{0x4}]}, 0x28}}, 0x4) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) setresuid(0xee00, 0xee01, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) sendmmsg$sock(r5, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x800, 0x2) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) 5.444942605s ago: executing program 2 (id=2597): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_j1939(r7, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) accept$packet(r7, 0x0, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000433fac88850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r2, 0x0, r3}) getsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1ff, 0x240100) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0xfffffffc, {0x81, 0x0, 0x80, 0x20, 0xc7, 0x0, 0x0, 0x5}, [@FRA_DST={0x54, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x30}}, 0x0) 5.443407375s ago: executing program 3 (id=2598): r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x8}) ioctl$TCFLSH(r3, 0x40384708, 0x20000000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, 0x0, 0x8}) write$UHID_INPUT2(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0028b5f17ca499db4b4b71adb30000bc1d020a73caee00"], 0x6) 4.89211106s ago: executing program 3 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x20}}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, 0x0, 0xb5) socket$unix(0x1, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x200, 0x1, 0x7fff, 0x0, r2, 0x2, '\x00', 0x0, r6, 0x1, 0x4, 0x1, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) r9 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r9, 0xc0844123, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 4.660286414s ago: executing program 0 (id=2600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xce28}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0)=0x2, 0x4) r3 = gettid() migrate_pages(r3, 0x8, &(0x7f0000000000)=0x9, &(0x7f0000000200)=0xf1) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0x1}}) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="4834615f421c6267f016a16ff754824c1c5c56dfdbd211b929252a327dd949b852bf54248fb5625e8751fb3a796e1e9fcf6dbf524b580ce29fdfb66367cb4ad1d437e0d4522ceaec49e9c7408a58f9ad885879cb16789e40686e832136171f43f5d142f99fc1eec921aaa240648f2b8ada17387f54b758d35a4019811bef21a0cc58eb28f80031afbc460d7b1fdfa91da4ced07d1f5fd9d1ecbe74036a74811e34da29c9c42c2ff5c770d38e0d61e4", 0xaf}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6000020000383afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000040000000000000000000105bd3569f49eb946583e6d4706598080a80300378927fc503b87aafaffffffffffffff2373247244b37e068b4a239a9ae4ae8f465a85e9926dd4bb"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)=""/211) r8 = semget(0x1, 0x1, 0x10) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000300)=[0x0, 0x5ab, 0x200, 0xea, 0x500, 0x0, 0x8, 0x0, 0xfff9, 0x5]) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x4a2, 0x6}, &(0x7f0000000040)=0x10) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000280)=[0x9, 0x9, 0x6]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r9, 0x2}, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.659681757s ago: executing program 1 (id=2601): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="2c78b84dbb574040dd4c98e9cf187de1df5058a6461fa34a2aef83e2dcc57f67fea69d7fb5fb930171202b86ae81cacb145acbee", 0x34}], 0x1, 0x0, 0xb8}, 0x20000000) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000300)='(', 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019bc0)=""/102400, 0x19000) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) 4.468673559s ago: executing program 5 (id=2602): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c8a570497e62df3227b4d7ec9aa3fc24800090881522de844a6e3c8889b1b48c490789164f443e59596bef1f66f37d6e2838d0dceea4c24e69798d41c4835cf3749251ab4529547c9552ba2a", 0x4c}, {&(0x7f0000000200)="ba5d6db8c7a8124b8973574bd3fb2d41d0f64e15da74e0181beaf8eef9ce70962d73567bf71b12ad50bbc592e4eba25ced5b9c7ee6ce18e29c7b583f5a33a4a059dfff8fd7278df5a8ab1eaeb1042bfbd37d58627ada090c7ea8686513a76d4ba9da504916b30e75a51c8dbf8321e5ee88b8bedbe1acddd3517669c46aca582cfee23b6e169c7e07644f67533f6b8c813afa4c1e65d95fd6adb54d8fae3fc425", 0xa0}, {&(0x7f0000000340)="f596b5f8f4df4686d26cad3a331e108dcbc0456ebb36166453c0c884088fbe4003d65e41af73e8caf1d50f4896559323e3d17fee583bdb2f32ce27fcd996a58c282b8a578a7096cd81ab1c91acd99f60b4bca97a02c378baaf0407640e56ac2f6e04fbebb041de51b33434c1bed683dac7f780b41cb8c8223b60462302ff8434aa690c06be7e2fb364c9760f4ec29a5cfb77769abd51aeb4a6e4cd3f26f35f92f5a310f3d5f0f8b1fbfeb1661b7330a13439bd504054962e8e7262bda98265409ea3e4d3ac85aeb710130164d492c04c6615edae5c282a463c7eb72fc9e06e4a18dbcb7a4065803e932b", 0xea}, {&(0x7f0000000040)="2aaad512f5a4c660cf63a52e336bda6e3d9970ed0615dc4e53", 0x19}, {&(0x7f0000000140)="1670110354ae2f92a5037cf8742de894bd196033adb28634eaf22e3bb139564f144e4fab005a5f20f145106a7e2d1a418130c8b6d70025f2d6673078a6f3ed3680e00e7f3089ae23ec", 0x49}, {&(0x7f0000000440)="e3898d87cfee65411fde6b61478c7fcfd0bcec1951c4cbb0d6fc1d79ed66da1dd7f6b53e4ed731e63fd71463dc1a5f39662704abc412fbaf4c060d4afaad4a5f17e91ed3cbbcf37d76fb6b38e91c38e826cb3bf66b6729339b86b13e3bcc656f6b42b3db4254522179e0e869dd4c09dab3ace10289a0a38da0d17a1a1384fcee967d9cb1de83979247e83b4381279bff17eebd2b28", 0x95}], 0x6}, 0x14) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r2, 0x539, 0x70b92d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0xfc, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x2c}}, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x3d}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x566}, @alu={0x7, 0x0, 0x8, 0xa, 0x6, 0xffffffffffffffff, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0xb, 0xaa, &(0x7f0000000640)=""/170, 0x40f00, 0x14, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x6, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x3, 0x1, 0xc, 0x8}], 0x10, 0x3ff, @void, @value}, 0x94) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'tunl0\x00', &(0x7f00000008c0)={'ip_vti0\x00', r4, 0x1, 0x7800, 0x400, 0x0, {{0x2a, 0x4, 0x0, 0x13, 0xa8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x73, 0x3, 0x5, [{@empty, 0x295abd11}]}, @ssrr={0x89, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0x5, "8e02cb"}, @end, @generic={0x82, 0x11, "acbce71b44836d39b8559d89ab8938"}, @lsrr={0x83, 0x27, 0xb9, [@private=0xa010101, @private=0xa010102, @multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0xb, 0x6a, [@dev={0xac, 0x14, 0x14, 0x12}, @local]}, @lsrr={0x83, 0x1f, 0xff, [@dev={0xac, 0x14, 0x14, 0xe}, @remote, @private=0xa010101, @remote, @rand_addr=0x64010101, @rand_addr=0x64010100, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @broadcast]}, @end]}}}}}) (async, rerun: 32) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r6, 0x88c9b000) (async, rerun: 64) ioctl$EVIOCGMASK(r9, 0x80015b1b, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r6, r7, 0x25, 0x8, @val=@kprobe_multi=@syms={0x1, 0x6, &(0x7f0000000b80)=[&(0x7f0000000a00)='veth0_vlan\x00', &(0x7f0000000a40)='$.%\'\x00', &(0x7f0000000a80)='veth0_vlan\x00', &(0x7f0000000ac0)='\\..+/^)}[%{\\!,\x00', &(0x7f0000000b00)='#\x00', &(0x7f0000000b40)='veth0_vlan\x00'], 0x0, 0x101}}, 0x30) 3.505277334s ago: executing program 2 (id=2603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200ff801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.424152533s ago: executing program 1 (id=2604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.41375004s ago: executing program 0 (id=2605): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="250000002500000500000000fbdbdf25030000"], 0x14}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) prlimit64(r1, 0x5, 0x0, &(0x7f0000000240)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000940)=@delqdisc={0x6f0, 0x25, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xfff2, 0xa}, {0x7, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4fd}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x3, 0x8da, 0x1, 0x8, 0xffff, 0x4}}, {0xc, 0x2, [0x1, 0x8, 0x8001, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x80, 0x3, 0x1, 0xffff, 0x1, 0x4}}, {0xc, 0x2, [0x8, 0x401, 0x7, 0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x9, 0xf9, 0x0, 0x2, 0x6, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x27, 0x4, 0xc7a0, 0xffffbc66, 0x2, 0x44130b1, 0x6, 0x3}}, {0xa, 0x2, [0x50b, 0x1, 0x40e]}}, {{0x1c, 0x1, {0x9, 0xa, 0xec, 0x0, 0x1, 0x0, 0xb, 0x2}}, {0x8, 0x2, [0x6, 0x40]}}, {{0x1c, 0x1, {0x8, 0x7f, 0x300, 0x1000, 0x1, 0x9, 0x24d, 0x4}}, {0xc, 0x2, [0x1, 0x4, 0x67f, 0x0]}}, {{0x1c, 0x1, {0x87, 0x7, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0xfffb, 0x939, 0xff00]}}, {{0x1c, 0x1, {0x90, 0x6, 0x9, 0x6, 0x0, 0x3, 0x7, 0x6}}, {0x10, 0x2, [0x8, 0x8000, 0x2, 0x4, 0x2, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0xbb57, 0x5, 0x0, 0x1ff, 0x0, 0x5}}, {0xe, 0x2, [0x1, 0x4, 0x4, 0x3, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x9, 0x3, 0xffffffff, 0x0, 0x81, 0x10, 0x5}}, {0xe, 0x2, [0x5, 0x200, 0x13, 0x1, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0xd, 0x4, 0x0, 0x4, 0x100, 0x4}}, {0xc, 0x2, [0x8b, 0x6, 0x40, 0x5]}}, {{0x1c, 0x1, {0x2, 0x2, 0x5, 0x126b, 0x1, 0x4, 0x200, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}, {{0x1c, 0x1, {0xec, 0x2, 0x1, 0x2, 0x0, 0x8, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x9, 0x1000, 0x9]}}, {{0x1c, 0x1, {0x2, 0xff, 0x31bb, 0x1, 0x0, 0x6, 0xfffffffa, 0x5}}, {0xe, 0x2, [0x8, 0x8, 0xd, 0xfff8, 0x2]}}, {{0x1c, 0x1, {0xeb, 0x4, 0x1, 0x3, 0x1, 0x7fff, 0x3ff, 0x4}}, {0xc, 0x2, [0xff, 0xb, 0x10, 0xfff]}}, {{0x1c, 0x1, {0x3, 0x5, 0x9, 0x7, 0x2, 0x400, 0x6, 0x2}}, {0x8, 0x2, [0x81, 0x6]}}, {{0x1c, 0x1, {0x6a, 0x6, 0xffc9, 0x96, 0x1, 0x2, 0x6, 0x7}}, {0x12, 0x2, [0x5, 0x7f, 0x4, 0xfffc, 0x8000, 0x1, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb9, 0xe2, 0x3, 0x3ff, 0x2, 0x0, 0x401, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5, 0xa9, 0xe, 0x5, 0x2, 0x0, 0x80000000, 0x3}}, {0xa, 0x2, [0xfc00, 0xe00, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x3, 0x81, 0x0, 0x5, 0xffffffff, 0xa}}, {0x18, 0x2, [0x7f, 0xb, 0x1, 0x2, 0x75, 0xd, 0x2, 0x7ff, 0x9, 0x6feb]}}, {{0x1c, 0x1, {0x7, 0x40, 0x6, 0x100, 0x2, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0xff, 0x4, 0x9]}}, {{0x1c, 0x1, {0x0, 0x5, 0x8, 0x5, 0x1, 0xb, 0x9, 0x4}}, {0xc, 0x2, [0x2, 0xe2, 0x800, 0x5]}}, {{0x1c, 0x1, {0x80, 0x9, 0x3e9, 0x9, 0x1, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0x50, 0x3, 0x5]}}, {{0x1c, 0x1, {0x5, 0x1, 0x268, 0x4, 0x1, 0x2, 0xffffb043, 0x8}}, {0x14, 0x2, [0x81, 0x101, 0x8001, 0xffff, 0x2, 0x6, 0x3, 0x5]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x2b4, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x144, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc0}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x50}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc05}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5c}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x86f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xd, 0x1, 0xe, 0x8, 0x5, 0x9, 0x8, 0x0, 0x3, 0xe, 0x4, 0xa, 0x2, 0x2, 0x10, 0xd], 0x0, [0xc0e2, 0x365, 0x9, 0x3ff, 0x1000, 0x1000, 0x7, 0x1ca4, 0x8001, 0x7, 0x400, 0x4, 0x8, 0x2, 0xff3f, 0x400], [0x8, 0x7, 0x2, 0x100, 0x0, 0xfff, 0x4, 0x5, 0x7, 0xf, 0x9, 0xe89, 0x7, 0xa838, 0x656, 0xfff0]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x418}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x101}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x78}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1e77}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x57}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7e}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8000000000000001}]}}]}, 0x6f0}}, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) (async) r7 = syz_io_uring_setup(0x497, &(0x7f0000000580)={0x0, 0x7078, 0x0, 0x2, 0xfd}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) io_setup(0x7fffffff, &(0x7f0000000000)=0x0) io_submit(r10, 0x4, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x9, r6, &(0x7f00000000c0)="5c857131043a9e7e3361c12e8432f7c701dc45bde27802101a568689b3fd4f06726a6d2d35b6ea33e2e7786f125b7f27692ad5539f8f3d066c2177ad90413ec412ac8f606fd2f40d85e36910", 0x4c, 0x9, 0x0, 0x0, r6}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f00000003c0)="fe3e261e80e5e8727e7392296de34e6d7add2399da923d8ee2721a39e0024ae3bf6bb20db898cf0ad910208ad5aae39dc2475e2888426aae9b64978f4401ea4d79273b4dae74932dd12d25f74d851fd9ef26e225ddc9720c8cefc0548d2a15cf22f141d226785ee4e49da8ff7f7ec3e2623ddcab913168d0988e4555825b92cb95bc92dbc76f87278f4d2009b9dc4d4ed2b2b2c48a24734610e825beee19c32f4c313977fccf405ef6c0372865acbf85bb948747629d8067107ee58aa1d926a3af2a3d7923c6d1396972aebb4957d46f8353b6cb882a29b5fddf1044cad620ec9f2c0fb293c8", 0xe6, 0xffffffff7fffffff, 0x0, 0x4, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xba0, r7, &(0x7f0000000180)="4e3c64d920f915f0d51aa21c2df45548ced69e67df698e31c11a47964d5c02d3f4408534b5d94446f4283acae1b323bc4d7c9d7d97fea33f2a92dc672dcde1d9d7d9458a78f9799eaa7b0913612a3170fc4e055faa4355763a406cdcb567", 0x5e, 0xd8, 0x0, 0x2, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xcaa9, r6, &(0x7f00000004c0)="6187ad117391a432a419cbff959270044f5b0b38dbdc42caa7180be2046d5349f982dfa4267307033983a2f50498ef2e00c5f3db9bf6c65fcd", 0x39, 0x3ff, 0x0, 0x3, r6}]) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r6, 0x351e, 0x1000, 0x0, 0x0, 0x0) 3.381577288s ago: executing program 5 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x2) semget$private(0x0, 0x0, 0x162) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0), 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x79ae, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) 3.342472787s ago: executing program 1 (id=2607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x1, 0x1000000, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x7}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x9, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x6, 0x4, 0x0, '\x00', 0x2}, {0x5, 0x7, 0xb, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0xb}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x1d, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0x9b}, {0x9, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x9, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x76, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x6, 0x0, '\x00', 0xf7}, {0x6, 0x0, 0x5, '\x00', 0x93}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0xd, 0x5, 0x1, '\x00', 0x7f}]}}) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(r4, &(0x7f0000000a40)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_test={0x51, 0x0, 0x4}}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, 0x0, 0x29, 0x6, @void}, 0x10) syz_usb_connect$uac1(0x3, 0xf8, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0xfc, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x5, 0x5, 0x2, ';\f'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x2, 0x5, 0x0, 0x1, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x7, 0x9, 0xf8, 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x5, 0xd, 0x4, 0x1, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x81, 0x8, 0x6, "9b737874a803"}, @as_header={0x7, 0x24, 0x1, 0xb6, 0x3, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x8, 0x1, "830015398a9f54e2b5"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0xe, 0x8, "73d90b8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xce, 0x3, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7f, 0x9, '9'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x101, 0xb072, 0x0, "ef"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8f, 0x1, 0x8, 0x8, "09c6a15f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x9, 0x6, {0x7, 0x25, 0x1, 0x82, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x110, 0x9, 0x10, 0x3c, 0x8, 0x4}, 0xb3, &(0x7f0000000900)={0x5, 0xf, 0xb3, 0x6, [@generic={0x70, 0x10, 0x3, "b91f90a5e0ebd1a0af258f4b75f08c76e4f2132de5885ccbac9237f61a103796753530644209a6bdd28ef2a8a8276123ed1c187b8698b5e9502523fa2082f9c0a39eb829be488d9345579c590b3d868f025d7cfe3f06a395c97ac92d4735a62d79091644f7c0c0fc51c6bd816e"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "2b751f569f05c9f3e0fc99cb3779b0b5"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x9, 0xf0f, 0x2ad}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "fc1dbe48105ae4e5cf693aa0c607b402"}]}, 0x1, [{0x26, &(0x7f00000009c0)=@string={0x26, 0x3, "ea964a96718a91b8edda216f5f3045d8e9e71891e494681075c63aa42c25e71b18c7f907"}}]}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x8, 0xf2, {0xf2, 0x7, "46f90b8a203ac1e820147cfc990d15c4084257a6cee7c3a8e19464942e826f78ceec0dbb873f65833384c7bd94132a5ea6d977a45dd3511ee2bb6de294485cb6e5d866fc56035b41c9d28ff53a13bec650fce65b7ef4dc7da601f3aad9cce6d1dda4655ed490e57692d0c89cee10f956ee5f31f58c78b0d1a9779d6cd5838a66e3be9af043b3ba68ffdcb9904df13ef0242a3fb77fa4eb3d8b5711527699adb77558b570e8786eb291eb73829787af132fd831868f8547ebb5b16ad97679ba98682ae92ec831e985ebeafb8ca8c20fe9c6c6134f74f8cb1a41d83f2f887801a4ed7c1e69cdc2683f7fbbced7228a93ed"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x7, 0x10, "915b439a", "f050a479"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x3, 0x1, 0xee, 0x1, 0x6, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0xe, 0x85, "422a132e560d1a8e0b84c5e936713ef8d158d3f6c0e5bb972ffbd6969f34da61ab3f9c7dbf5350c109abd8c4065ef67f734f3989b12aa1ae5de7d2903b26218e3d4e6e52d11e473d8827a41b210eac2b025a548c01797669239c956c3f39592881d0d76aac1c6277268cdaaf27199d5fa5795ba0faecbdf47946d056574370e2ac0ee6bc0b"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4c}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x4005}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "928c"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="ffca4faa73ce"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "bc69"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1e}}) 3.068526285s ago: executing program 3 (id=2608): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0xfc, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x4, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) 2.976168965s ago: executing program 3 (id=2609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd(0xeb5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x57, 0x87, 0x40c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0), 0x900}, 0x20) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.893178332s ago: executing program 3 (id=2610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.802839896s ago: executing program 5 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x400) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r5, 0x113, 0x4, 0x0, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) 2.47609876s ago: executing program 2 (id=2612): r0 = socket(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0xc, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x90, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x0, 0x139c, 0x41c876c6, 0x9}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffff7fffffff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) 1.877398759s ago: executing program 0 (id=2613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x10, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0x9, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x248) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x32d400) pipe2$9p(0x0, 0x80880) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0xa, 0x65c5) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) 1.782625821s ago: executing program 2 (id=2614): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./cgroup\x00', 0x81000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x175) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40440c0}, 0x40d0) getsockopt$inet_int(r1, 0x10d, 0x21, &(0x7f0000010140), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x10) 1.782037239s ago: executing program 5 (id=2615): r0 = syz_io_uring_setup(0x5ca, &(0x7f00000006c0)={0x0, 0x9217, 0x100, 0x0, 0x29d}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x638f, 0x3, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10, 0x800) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000040)='\x13cz\xddcA2\xa5y9\x9d<\x02+/?:\x808\xd5$@a') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000024d0000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x2) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r5, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_call\x00', r8, 0x0, 0x80000001}, 0x18) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 437.57307ms ago: executing program 2 (id=2616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000080), 0x0) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f0001030000000000000000010100800c0006"], 0x114}], 0x1}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setreuid(0x0, 0xee01) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100677265000800000000000000080000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r6, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000100)=0x9, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) syz_open_pts(r3, 0x8100) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) syz_io_uring_setup(0x176a, &(0x7f0000000080)={0x0, 0xe0d9, 0x10100, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4003, @fd, 0x7ff, 0xfff, 0x400, 0x3, 0x0, {0x3}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) 343.245368ms ago: executing program 3 (id=2617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 314.429079ms ago: executing program 0 (id=2618): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x4000) r6 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @empty, 0x2}, 0x1c) 0s ago: executing program 2 (id=2619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x921f, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = eventfd(0x0) r9 = socket(0x1, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1000, 0xb7, {{0x5, 0x4, 0x3, 0xf, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @local}}}}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r8, 0x80000001, 0x1, r8}) kernel console output (not intermixed with test programs): ror -71 [ 711.753832][ T8] usb usb3-port1: attempt power cycle [ 711.792589][T13332] FAULT_INJECTION: forcing a failure. [ 711.792589][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.807208][T13332] CPU: 0 UID: 0 PID: 13332 Comm: syz.2.2000 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 711.817998][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 711.828061][T13332] Call Trace: [ 711.831346][T13332] [ 711.834260][T13332] dump_stack_lvl+0x16c/0x1f0 [ 711.838927][T13332] should_fail_ex+0x497/0x5b0 [ 711.843597][T13332] _copy_from_iter+0x2a1/0x1560 [ 711.848433][T13332] ? trace_lock_acquire+0x14e/0x1f0 [ 711.853627][T13332] ? __alloc_skb+0x1fe/0x380 [ 711.858206][T13332] ? __pfx__copy_from_iter+0x10/0x10 [ 711.863496][T13332] ? __virt_addr_valid+0x1a4/0x590 [ 711.868608][T13332] ? __virt_addr_valid+0x5e/0x590 [ 711.873644][T13332] ? __phys_addr_symbol+0x30/0x80 [ 711.878673][T13332] ? __check_object_size+0x488/0x710 [ 711.883968][T13332] netlink_sendmsg+0x813/0xd70 [ 711.888731][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.894016][T13332] ____sys_sendmsg+0xaaf/0xc90 [ 711.898775][T13332] ? copy_msghdr_from_user+0x10b/0x160 [ 711.904248][T13332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.909541][T13332] ___sys_sendmsg+0x135/0x1e0 [ 711.914243][T13332] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.919437][T13332] ? __pfx_lock_release+0x10/0x10 [ 711.924457][T13332] ? trace_lock_acquire+0x14e/0x1f0 [ 711.929666][T13332] ? __fget_files+0x206/0x3a0 [ 711.934363][T13332] __sys_sendmsg+0x16e/0x220 [ 711.938954][T13332] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.944077][T13332] do_syscall_64+0xcd/0x250 [ 711.948581][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.954484][T13332] RIP: 0033:0x7f4956185d29 [ 711.958890][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.978501][T13332] RSP: 002b:00007f4955fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.986917][T13332] RAX: ffffffffffffffda RBX: 00007f4956376080 RCX: 00007f4956185d29 [ 711.994882][T13332] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 712.002869][T13332] RBP: 00007f4955fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 712.010850][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.018815][T13332] R13: 0000000000000000 R14: 00007f4956376080 R15: 00007ffdc1583588 [ 712.026788][T13332] [ 713.969021][T13352] syz.0.2001: attempt to access beyond end of device [ 713.969021][T13352] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 714.780744][ T29] audit: type=1400 audit(1735544127.388:1606): avc: denied { getopt } for pid=13359 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 715.311707][ T29] audit: type=1400 audit(1735544127.898:1607): avc: denied { write } for pid=13377 comm="syz.3.2009" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 715.408683][ T5905] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 715.558697][ T5905] usb 1-1: device descriptor read/64, error -71 [ 715.832389][ T5905] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 715.908002][T13384] can: request_module (can-proto-0) failed. [ 715.924131][ T29] audit: type=1326 audit(1735544128.528:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13383 comm="syz.5.2012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb70985d29 code=0x0 [ 715.998751][ T5905] usb 1-1: device descriptor read/64, error -71 [ 716.121351][ T5905] usb usb1-port1: attempt power cycle [ 717.348994][ T29] audit: type=1400 audit(1735544129.958:1609): avc: denied { getopt } for pid=13398 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.359985][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'. [ 717.369696][ T5905] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 717.459041][ T5905] usb 1-1: device descriptor read/8, error -71 [ 717.548443][T13403] bridge_slave_0 (unregistering): left allmulticast mode [ 717.555585][T13403] bridge_slave_0 (unregistering): left promiscuous mode [ 717.563224][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.680532][T13405] bond2: entered promiscuous mode [ 717.704552][T13405] bond2: entered allmulticast mode [ 717.709921][ T5905] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 717.742293][T13405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.759203][ T5905] usb 1-1: device descriptor read/8, error -71 [ 717.852450][T13414] nfs: Unknown parameter ' ' [ 717.880779][ T8] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 717.888611][ T5905] usb usb1-port1: unable to enumerate USB device [ 718.058622][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 718.074684][ T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 718.104820][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 718.116565][ T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 718.128103][ T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 718.142212][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 718.250825][ T5905] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 718.280479][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 718.791880][ T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 718.802298][ T8] usb 4-1: Product: syz [ 718.806513][ T8] usb 4-1: Manufacturer: syz [ 718.811334][ T8] usb 4-1: SerialNumber: syz [ 718.836908][ T8] usb 4-1: config 0 descriptor?? [ 718.846679][ T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 718.918815][ T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 719.008952][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 719.031011][ T5905] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.039401][ T5905] usb 3-1: config 0 has no interface number 0 [ 719.065318][ T9399] usb 4-1: USB disconnect, device number 74 [ 719.071549][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 719.088332][ T5905] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.098254][T13428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.106199][ T9399] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 719.120184][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.129340][ T5905] usb 3-1: Product: syz [ 719.134624][ T5905] usb 3-1: Manufacturer: syz [ 719.181158][ T5905] usb 3-1: SerialNumber: syz [ 719.186629][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2024'. [ 719.219091][ T5905] usb 3-1: config 0 descriptor?? [ 719.250056][ T5905] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 719.259281][T13409] ldusb: No device or device unplugged -19 [ 719.269696][ T29] audit: type=1326 audit(1735544131.868:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 719.294924][T13431] : entered promiscuous mode [ 719.303881][ T29] audit: type=1326 audit(1735544131.868:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 719.358987][T13432] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 719.421645][ T29] audit: type=1326 audit(1735544131.868:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 719.508617][ T29] audit: type=1326 audit(1735544131.868:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 719.860840][ T29] audit: type=1326 audit(1735544131.868:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.108863][ T29] audit: type=1326 audit(1735544131.868:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.139306][ T29] audit: type=1326 audit(1735544131.868:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.163606][ T29] audit: type=1326 audit(1735544131.868:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.299201][ T29] audit: type=1326 audit(1735544131.868:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.322697][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.346857][ T29] audit: type=1326 audit(1735544131.868:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.385929][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 720.397240][T13446] ip6t_srh: unknown srh match flags 4000 [ 720.404092][ T29] audit: type=1326 audit(1735544131.868:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.436959][ T29] audit: type=1326 audit(1735544131.868:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.460464][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.467462][ T29] audit: type=1326 audit(1735544131.868:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.490975][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.497856][ T29] audit: type=1326 audit(1735544131.868:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 720.521358][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.826418][ T5905] usb 3-1: qt2_attach - failed to power on unit: -71 [ 720.833614][ T5905] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 720.845292][ T5905] usb 3-1: USB disconnect, device number 81 [ 720.904286][T13455] netlink: 'syz.1.2030': attribute type 33 has an invalid length. [ 721.463904][T13460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.615397][T13468] FAULT_INJECTION: forcing a failure. [ 721.615397][T13468] name failslab, interval 1, probability 0, space 0, times 0 [ 721.645253][T13468] CPU: 0 UID: 0 PID: 13468 Comm: syz.2.2037 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 721.656066][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 721.666147][T13468] Call Trace: [ 721.669437][T13468] [ 721.672375][T13468] dump_stack_lvl+0x16c/0x1f0 [ 721.677076][T13468] should_fail_ex+0x497/0x5b0 [ 721.681782][T13468] ? fs_reclaim_acquire+0xae/0x150 [ 721.686916][T13468] should_failslab+0xc2/0x120 [ 721.691626][T13468] __kmalloc_noprof+0xcb/0x510 [ 721.696420][T13468] ? d_absolute_path+0x137/0x1b0 [ 721.701571][T13468] tomoyo_encode2+0x100/0x3e0 [ 721.706281][T13468] tomoyo_encode+0x29/0x50 [ 721.710725][T13468] tomoyo_realpath_from_path+0x19d/0x720 [ 721.716396][T13468] tomoyo_mount_acl+0x66d/0x880 [ 721.721266][T13468] ? hlock_class+0x4e/0x130 [ 721.725790][T13468] ? __lock_acquire+0x15a9/0x3c40 [ 721.730869][T13468] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 721.736271][T13468] ? __pfx___lock_acquire+0x10/0x10 [ 721.741499][T13468] ? stack_trace_save+0x95/0xd0 [ 721.746379][T13468] ? __pfx_lock_release+0x10/0x10 [ 721.751446][T13468] ? trace_lock_acquire+0x14e/0x1f0 [ 721.756692][T13468] ? tomoyo_mount_permission+0x149/0x420 [ 721.762353][T13468] ? lock_acquire+0x2f/0xb0 [ 721.766878][T13468] ? tomoyo_mount_permission+0x149/0x420 [ 721.772538][T13468] tomoyo_mount_permission+0x16e/0x420 [ 721.778031][T13468] ? tomoyo_mount_permission+0x149/0x420 [ 721.783708][T13468] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 721.789736][T13468] ? get_current_fs_domain+0x184/0x1f0 [ 721.795231][T13468] security_sb_mount+0x9b/0x260 [ 721.800101][T13468] path_mount+0x129/0x1f20 [ 721.800150][T13468] ? kmem_cache_free+0x152/0x4c0 [ 721.800171][T13468] ? __pfx_path_mount+0x10/0x10 [ 721.800195][T13468] ? putname+0x13c/0x180 [ 721.800221][T13468] __x64_sys_mount+0x294/0x320 [ 721.800243][T13468] ? __pfx___x64_sys_mount+0x10/0x10 [ 721.800276][T13468] do_syscall_64+0xcd/0x250 [ 721.800302][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.800328][T13468] RIP: 0033:0x7f4956185d29 [ 721.800347][T13468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.863482][T13468] RSP: 002b:00007f4955ff9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 721.871904][T13468] RAX: ffffffffffffffda RBX: 00007f4956375fa0 RCX: 00007f4956185d29 [ 721.879920][T13468] RDX: 0000000020000280 RSI: 0000000020000300 RDI: 00000000200000c0 [ 721.887908][T13468] RBP: 00007f4955ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 721.895901][T13468] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000002 [ 721.903891][T13468] R13: 0000000000000000 R14: 00007f4956375fa0 R15: 00007ffdc1583588 [ 721.911892][T13468] [ 721.920554][T13468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 722.496772][T13487] netlink: 'syz.5.2041': attribute type 1 has an invalid length. [ 722.505135][T13487] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2041'. [ 722.584900][ T8] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 722.711287][T13493] overlay: ./file0 is not a directory [ 722.722889][T13493] overlayfs: overlapping lowerdir path [ 722.738784][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 722.748648][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.759031][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 722.770209][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.779968][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 722.789872][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.803871][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.817778][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 722.826248][ T8] usb 3-1: Manufacturer: syz [ 722.832731][ T8] usb 3-1: config 0 descriptor?? [ 723.009124][ T866] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 723.108579][ T8] rc_core: IR keymap rc-hauppauge not found [ 723.114591][ T8] Registered IR keymap rc-empty [ 723.119657][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.138625][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.159276][ T866] usb 4-1: Using ep0 maxpacket: 32 [ 723.179425][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 723.179756][ T866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.207005][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 723.219172][ T866] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.221109][ T866] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 723.238123][ T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.251263][ T866] usb 4-1: Product: syz [ 723.260177][ T866] usb 4-1: Manufacturer: syz [ 723.279443][ T866] usb 4-1: SerialNumber: syz [ 723.284613][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.295875][ T866] usb 4-1: config 0 descriptor?? [ 723.315071][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.348750][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.368981][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.402806][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.443693][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.472078][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.508902][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.548643][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.578658][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 723.728980][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 723.957309][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 724.025678][ T8] usb 3-1: USB disconnect, device number 82 [ 726.208419][ T5867] usb 4-1: USB disconnect, device number 75 [ 726.988984][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 726.989004][ T29] audit: type=1400 audit(1735544138.938:1654): avc: denied { mounton } for pid=13523 comm="syz.5.2056" path="/402/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 727.098622][ T866] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 727.276288][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.303829][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.313926][ T866] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 727.323169][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.343346][ T866] usb 1-1: config 0 descriptor?? [ 727.578915][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 727.749372][ T8] usb 2-1: no configurations [ 728.119009][ T8] usb 2-1: can't read configurations, error -22 [ 728.158837][ T29] audit: type=1400 audit(1735544140.538:1655): avc: denied { map } for pid=13519 comm="syz.0.2052" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 728.186112][ T29] audit: type=1400 audit(1735544140.538:1656): avc: denied { execute } for pid=13519 comm="syz.0.2052" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 728.377636][ T8] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 728.482980][T13551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2061'. [ 728.495862][T13551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2061'. [ 728.575034][ T8] usb 2-1: no configurations [ 728.579823][ T8] usb 2-1: can't read configurations, error -22 [ 728.586357][ T8] usb usb2-port1: attempt power cycle [ 728.962353][ T8] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 729.057104][ T8] usb 2-1: no configurations [ 729.086280][ T8] usb 2-1: can't read configurations, error -22 [ 729.299010][ T8] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 729.386335][ T8] usb 2-1: no configurations [ 729.403663][ T8] usb 2-1: can't read configurations, error -22 [ 729.425147][ T8] usb usb2-port1: unable to enumerate USB device [ 729.543037][ T866] usbhid 1-1:0.0: can't add hid device: -71 [ 729.552121][ T866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 729.577150][ T866] usb 1-1: USB disconnect, device number 72 [ 729.929669][ T5868] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 730.138732][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 730.281065][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.291364][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.471752][ T5868] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 730.471788][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.471814][ T5868] usb 4-1: Product: syz [ 730.471832][ T5868] usb 4-1: Manufacturer: syz [ 730.471850][ T5868] usb 4-1: SerialNumber: syz [ 730.664153][ T29] audit: type=1400 audit(1735544143.248:1657): avc: denied { shutdown } for pid=13583 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 731.036281][ T5868] usb 4-1: config 0 descriptor?? [ 731.438767][T13597] autofs: Unknown parameter 'l7÷…Õ@}EâDpk¨“VÃ/%%€ÆÏVyˆÞìÝCúx`Â_«Òæ€ë̪eQ`y€“ÑübN “™¯ùSe¶ªÜÍ–r%჻RTém>hkÐÀDM Š {îÉ€—M@qþwD’¤ª#<µÄì*5-·4GŽpY¯(Ù7Ždñ!{ìX» ©×¹@ŽàínÑg' [ 732.735578][T12926] Bluetooth: hci4: command 0x0406 tx timeout [ 733.397838][ T5868] usb 4-1: USB disconnect, device number 76 [ 733.757545][ T29] audit: type=1400 audit(1735544146.358:1658): avc: denied { setopt } for pid=13622 comm="syz.5.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 734.380320][T13633] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 735.158688][ T5896] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 735.349430][ T5896] usb 2-1: device descriptor read/64, error -71 [ 735.406001][T13653] vivid-001: disconnect [ 735.559392][ T8] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 735.568612][ T5868] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 735.598696][ T5896] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 735.731757][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 735.743532][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 735.755770][ T5896] usb 2-1: device descriptor read/64, error -71 [ 735.762890][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.775272][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 735.794980][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.805634][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 735.818142][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 735.831907][ T8] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 735.845121][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.856239][ T5868] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 735.867259][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.876381][ T5868] usb 3-1: Product: syz [ 735.883414][ T8] usb 4-1: config 0 descriptor?? [ 735.888982][ T5896] usb usb2-port1: attempt power cycle [ 735.894804][ T5868] usb 3-1: Manufacturer: syz [ 735.906121][ T5868] usb 3-1: SerialNumber: syz [ 735.929607][ T5868] usb 3-1: config 0 descriptor?? [ 735.937954][T13652] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 736.008635][ T5867] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 736.062789][T13645] vivid-001: reconnect [ 736.067413][ T5868] rc_core: IR keymap rc-streamzap not found [ 736.089136][ T5868] Registered IR keymap rc-empty [ 736.098905][ T5868] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 736.127540][ T5868] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 736.150889][T13652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.173840][ T5867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 736.187317][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.191959][T13652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.214339][ T5867] usb 1-1: Product: syz [ 736.228689][ T5867] usb 1-1: Manufacturer: syz [ 736.237961][ T5867] usb 1-1: SerialNumber: syz [ 736.243427][ T5868] usb 3-1: USB disconnect, device number 83 [ 736.249990][ T5896] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 736.279269][ T5896] usb 2-1: device descriptor read/8, error -71 [ 736.279980][ T5867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 736.469777][T13661] dccp_v4_rcv: dropped packet with invalid checksum [ 736.470570][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 736.548599][ T5896] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 736.573950][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 736.602895][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 736.667226][ T5896] usb 2-1: device descriptor read/8, error -71 [ 736.716399][ T8] usb 4-1: USB disconnect, device number 77 [ 736.819761][ T5896] usb usb2-port1: unable to enumerate USB device [ 737.510207][ T5896] usb 1-1: USB disconnect, device number 73 [ 737.629821][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 737.667071][ T25] ath9k_htc: Failed to initialize the device [ 737.698851][ T5896] usb 1-1: ath9k_htc: USB layer deinitialized [ 738.166630][T13678] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 738.174474][T13678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2090'. [ 738.243723][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2093'. [ 740.118826][ T5896] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 740.142242][T13708] dns_resolver: Unsupported server list version (35) [ 740.358551][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 740.377285][T13710] atomic_op ffff888024427198 conn xmit_atomic 0000000000000000 [ 740.404597][ T8] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 740.421080][ T5896] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 740.430591][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.447054][ T5896] usb 2-1: config 0 descriptor?? [ 740.456676][ T5896] gspca_main: sq930x-2.14.0 probing 041e:403c [ 740.548795][ T8] usb 1-1: device descriptor read/64, error -71 [ 740.672743][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.683609][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.697337][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.707316][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.725126][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.737052][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.769682][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.779679][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.788842][ T8] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 740.799092][ T5869] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 740.801702][ T5896] gspca_sq930x: reg_r 001f failed -32 [ 740.812901][ T5896] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 740.836540][ T5896] usb 2-1: USB disconnect, device number 92 [ 740.928690][ T5869] usb 3-1: device descriptor read/64, error -71 [ 740.938724][ T8] usb 1-1: device descriptor read/64, error -71 [ 741.062978][ T8] usb usb1-port1: attempt power cycle [ 741.173428][ T5869] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 741.309086][ T5869] usb 3-1: device descriptor read/64, error -71 [ 741.419011][ T5869] usb usb3-port1: attempt power cycle [ 741.448733][ T8] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 741.489340][ T8] usb 1-1: device descriptor read/8, error -71 [ 741.628695][ T25] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 741.741910][ T8] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 741.759210][ T5869] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 741.769165][ T8] usb 1-1: device descriptor read/8, error -71 [ 741.779355][ T5869] usb 3-1: device descriptor read/8, error -71 [ 741.787267][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.799684][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 741.806816][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 741.816125][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.826324][ T25] usb 2-1: config 0 descriptor?? [ 741.888894][ T8] usb usb1-port1: unable to enumerate USB device [ 742.018751][ T5869] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 742.054226][ T5869] usb 3-1: device descriptor read/8, error -71 [ 742.178886][ T5869] usb usb3-port1: unable to enumerate USB device [ 742.283840][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.294305][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.302891][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.322899][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.334103][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.344964][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.356424][ T25] wacom 0003:056A:0003.0027: unknown main item tag 0x0 [ 742.373520][ T25] wacom 0003:056A:0003.0027: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 742.392006][ T25] wacom 0003:056A:0003.0027: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 742.412362][ T25] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0027/input/input46 [ 742.436706][T13721] syz.5.2106: attempt to access beyond end of device [ 742.436706][T13721] nbd5: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 743.320629][T13742] netlink: 'syz.5.2108': attribute type 1 has an invalid length. [ 743.329069][T13742] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2108'. [ 744.291814][T13748] FAULT_INJECTION: forcing a failure. [ 744.291814][T13748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.305102][T13748] CPU: 1 UID: 0 PID: 13748 Comm: syz.5.2112 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 744.315935][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 744.326006][T13748] Call Trace: [ 744.329272][T13748] [ 744.332208][T13748] dump_stack_lvl+0x16c/0x1f0 [ 744.336874][T13748] should_fail_ex+0x497/0x5b0 [ 744.341541][T13748] _copy_from_iter+0x2a1/0x1560 [ 744.346380][T13748] ? __pfx__copy_from_iter+0x10/0x10 [ 744.351651][T13748] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 744.357614][T13748] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 744.363517][T13748] ? __pfx_lock_release+0x10/0x10 [ 744.368573][T13748] ? trace_lock_acquire+0x14e/0x1f0 [ 744.373808][T13748] copy_page_from_iter+0xa5/0x120 [ 744.378871][T13748] tun_build_skb.constprop.0+0x294/0x1120 [ 744.384631][T13748] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 744.390828][T13748] ? avc_has_perm_noaudit+0x119/0x3a0 [ 744.396250][T13748] ? __pfx_lock_release+0x10/0x10 [ 744.401310][T13748] ? trace_lock_acquire+0x14e/0x1f0 [ 744.406537][T13748] ? __pfx___lock_acquire+0x10/0x10 [ 744.411755][T13748] ? register_lock_class+0xb1/0x1240 [ 744.417069][T13748] ? __lock_acquire+0xcc5/0x3c40 [ 744.422114][T13748] tun_get_user+0x870/0x3e50 [ 744.426767][T13748] ? __pfx_tun_get_user+0x10/0x10 [ 744.431808][T13748] ? find_held_lock+0x2d/0x110 [ 744.436594][T13748] ? __pfx_lock_release+0x10/0x10 [ 744.441644][T13748] tun_chr_write_iter+0xdc/0x210 [ 744.446600][T13748] vfs_write+0x5ae/0x1150 [ 744.450941][T13748] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 744.456504][T13748] ? __pfx_vfs_write+0x10/0x10 [ 744.461283][T13748] ? __fget_files+0x40/0x3a0 [ 744.465901][T13748] ksys_write+0x12b/0x250 [ 744.470246][T13748] ? __pfx_ksys_write+0x10/0x10 [ 744.475115][T13748] do_syscall_64+0xcd/0x250 [ 744.479635][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.485545][T13748] RIP: 0033:0x7ffb709847df [ 744.489971][T13748] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 744.509597][T13748] RSP: 002b:00007ffb716de000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 744.518026][T13748] RAX: ffffffffffffffda RBX: 00007ffb70b75fa0 RCX: 00007ffb709847df [ 744.526009][T13748] RDX: 000000000000003e RSI: 00000000200001c0 RDI: 00000000000000c8 [ 744.533994][T13748] RBP: 00007ffb716de090 R08: 0000000000000000 R09: 0000000000000000 [ 744.541974][T13748] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 744.549938][T13748] R13: 0000000000000001 R14: 00007ffb70b75fa0 R15: 00007ffd3528f578 [ 744.557915][T13748] [ 744.632040][ T5896] usb 2-1: USB disconnect, device number 93 [ 744.930629][T13770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.038810][T13773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 745.428334][ T29] audit: type=1400 audit(1735544158.028:1659): avc: denied { listen } for pid=13779 comm="syz.5.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.520133][T13783] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 745.528416][T13783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2122'. [ 747.556566][ T5896] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 747.596323][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.821516][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 747.826356][T13798] FAULT_INJECTION: forcing a failure. [ 747.826356][T13798] name failslab, interval 1, probability 0, space 0, times 0 [ 747.836845][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.850842][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.861099][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.874337][ T5896] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 747.883551][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.894034][ T5896] usb 1-1: config 0 descriptor?? [ 747.901298][T13798] CPU: 1 UID: 0 PID: 13798 Comm: syz.5.2125 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 747.912102][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 747.922172][T13798] Call Trace: [ 747.925457][T13798] [ 747.928395][T13798] dump_stack_lvl+0x16c/0x1f0 [ 747.933095][T13798] should_fail_ex+0x497/0x5b0 [ 747.937794][T13798] ? fs_reclaim_acquire+0xae/0x150 [ 747.942933][T13798] should_failslab+0xc2/0x120 [ 747.947650][T13798] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 747.953059][T13798] ? sk_prot_alloc+0x60/0x2a0 [ 747.957768][T13798] sk_prot_alloc+0x60/0x2a0 [ 747.962300][T13798] sk_alloc+0x36/0xb90 [ 747.966400][T13798] inet_create+0x3a1/0x10a0 [ 747.970933][T13798] ? inet_create+0x90/0x10a0 [ 747.975564][T13798] __sock_create+0x335/0x8d0 [ 747.980186][T13798] start_sync_thread+0xa0c/0x28e0 [ 747.985239][T13798] ? __pfx_sync_thread_master+0x10/0x10 [ 747.990818][T13798] ? __pfx_start_sync_thread+0x10/0x10 [ 747.996309][T13798] ? __pfx_lock_release+0x10/0x10 [ 747.998723][ T9399] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 748.001430][T13798] ? trace_lock_acquire+0x14e/0x1f0 [ 748.014227][T13798] ? __might_fault+0xe3/0x190 [ 748.018941][T13798] ? do_ip_vs_set_ctl+0x452/0x11c0 [ 748.024080][T13798] do_ip_vs_set_ctl+0x452/0x11c0 [ 748.029053][T13798] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 748.034467][T13798] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 748.040474][T13798] ? __pfx_lock_release+0x10/0x10 [ 748.045520][T13798] ? rcu_is_watching+0x12/0xc0 [ 748.050324][T13798] ? __mutex_lock+0x1cc/0xa60 [ 748.055036][T13798] ? __mutex_unlock_slowpath+0x164/0x690 [ 748.060740][T13798] ? nf_setsockopt+0x8a/0xf0 [ 748.065358][T13798] nf_setsockopt+0x8a/0xf0 [ 748.069803][T13798] ip_setsockopt+0xcb/0xf0 [ 748.074254][T13798] udp_setsockopt+0x7d/0xd0 [ 748.078782][T13798] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 748.084703][T13798] do_sock_setsockopt+0x222/0x480 [ 748.089754][T13798] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 748.095431][T13798] ? lock_acquire+0x2f/0xb0 [ 748.099978][T13798] __sys_setsockopt+0x1a0/0x230 [ 748.104864][T13798] __x64_sys_setsockopt+0xbd/0x160 [ 748.110007][T13798] ? do_syscall_64+0x91/0x250 [ 748.114710][T13798] ? lockdep_hardirqs_on+0x7c/0x110 [ 748.119938][T13798] do_syscall_64+0xcd/0x250 [ 748.124472][T13798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.130394][T13798] RIP: 0033:0x7ffb70985d29 [ 748.134831][T13798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.154473][T13798] RSP: 002b:00007ffb716de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 748.162883][T13798] RAX: ffffffffffffffda RBX: 00007ffb70b75fa0 RCX: 00007ffb70985d29 [ 748.170853][T13798] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 748.178826][T13798] RBP: 00007ffb716de090 R08: 0000000000000018 R09: 0000000000000000 [ 748.186797][T13798] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 748.194770][T13798] R13: 0000000000000000 R14: 00007ffb70b75fa0 R15: 00007ffd3528f578 [ 748.202772][T13798] [ 748.205920][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.239384][T13798] IPVS: Error during creation of socket; terminating [ 748.241074][ T9399] usb 3-1: New USB device found, idVendor=0007, idProduct=0000, bcdDevice= 0.ef [ 748.270048][ T9399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 748.278113][ T9399] usb 3-1: SerialNumber: syz [ 748.286260][ T9399] usb 3-1: config 0 descriptor?? [ 748.518741][ T9399] usb 3-1: USB disconnect, device number 88 [ 748.663376][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 748.670201][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 748.703946][ T5896] usb 1-1: USB disconnect, device number 78 [ 748.805103][T13818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.917633][T13819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2131'. [ 751.998547][ T29] audit: type=1400 audit(1735544164.188:1660): avc: denied { ioctl } for pid=13850 comm="syz.3.2140" path="socket:[44232]" dev="sockfs" ino=44232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 753.905261][T13891] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 753.913367][T13891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2150'. [ 754.152123][ T29] audit: type=1400 audit(1735544166.588:1661): avc: denied { read } for pid=13890 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.256531][ T29] audit: type=1400 audit(1735544166.858:1662): avc: denied { append } for pid=13888 comm="syz.3.2151" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 755.941604][T13926] binder: 13917:13926 ioctl c018620c 20000000 returned -22 [ 756.492051][T13938] kvm: MWAIT instruction emulated as NOP! [ 756.731116][T13943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 756.861804][T13947] 9pnet_fd: Insufficient options for proto=fd [ 757.221994][T13955] syz.5.2167[13955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 757.222090][T13955] syz.5.2167[13955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 757.238829][ T9399] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 757.258745][T13955] syz.5.2167[13955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 757.408698][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'. [ 757.447779][ T9399] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 757.457191][ T9399] usb 3-1: config 0 has no interface number 0 [ 757.477130][ T9399] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 757.500664][ T9399] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 757.510181][ T9399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.518199][ T9399] usb 3-1: Product: syz [ 757.537695][ T9399] usb 3-1: Manufacturer: syz [ 757.553781][ T9399] usb 3-1: SerialNumber: syz [ 757.595213][ T9399] usb 3-1: config 0 descriptor?? [ 757.607376][T13943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 757.617970][ T9399] usb-storage 3-1:0.20: USB Mass Storage device detected [ 757.637799][T13962] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 757.649496][T13962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2162'. [ 757.684139][ T9399] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 757.792181][T13974] program syz.1.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.818738][ T9399] scsi host1: usb-storage 3-1:0.20 [ 758.530680][ T29] audit: type=1326 audit(1735544171.138:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 758.910270][ T29] audit: type=1326 audit(1735544171.138:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 758.934646][ T29] audit: type=1326 audit(1735544171.138:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 758.958314][ T29] audit: type=1326 audit(1735544171.138:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 758.982081][ T29] audit: type=1326 audit(1735544171.138:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.006410][ T29] audit: type=1326 audit(1735544171.158:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.029752][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.036888][ T29] audit: type=1326 audit(1735544171.158:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.060325][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.067000][ T29] audit: type=1326 audit(1735544171.158:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.091502][ T29] audit: type=1326 audit(1735544171.158:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.114958][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.199985][ T29] audit: type=1326 audit(1735544171.158:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13986 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 759.208198][T13975] usb 3-1: reset full-speed USB device number 89 using dummy_hcd [ 759.683502][T14019] tipc: Enabling of bearer rejected, failed to enable media [ 759.715133][T14019] FAULT_INJECTION: forcing a failure. [ 759.715133][T14019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.732714][T14019] CPU: 0 UID: 0 PID: 14019 Comm: syz.0.2187 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 759.743536][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 759.753614][T14019] Call Trace: [ 759.756905][T14019] [ 759.759852][T14019] dump_stack_lvl+0x16c/0x1f0 [ 759.764560][T14019] should_fail_ex+0x497/0x5b0 [ 759.769268][T14019] _copy_from_user+0x2e/0xd0 [ 759.773894][T14019] get_user_ifreq+0xf1/0x250 [ 759.778497][T14019] sock_do_ioctl+0x16c/0x280 [ 759.783111][T14019] ? __pfx_sock_do_ioctl+0x10/0x10 [ 759.788255][T14019] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 759.794771][T14019] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 759.801315][T14019] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 759.808181][T14019] sock_ioctl+0x228/0x6c0 [ 759.812543][T14019] ? __pfx_sock_ioctl+0x10/0x10 [ 759.817405][T14019] ? selinux_file_ioctl+0x180/0x270 [ 759.822610][T14019] ? selinux_file_ioctl+0xb4/0x270 [ 759.827733][T14019] ? __pfx_sock_ioctl+0x10/0x10 [ 759.832596][T14019] __x64_sys_ioctl+0x190/0x200 [ 759.837360][T14019] do_syscall_64+0xcd/0x250 [ 759.841863][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.847750][T14019] RIP: 0033:0x7f0165785d29 [ 759.852155][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.871757][T14019] RSP: 002b:00007f01665ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.880210][T14019] RAX: ffffffffffffffda RBX: 00007f0165975fa0 RCX: 00007f0165785d29 [ 759.888170][T14019] RDX: 0000000020002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 759.896130][T14019] RBP: 00007f01665ed090 R08: 0000000000000000 R09: 0000000000000000 [ 759.904091][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.912053][T14019] R13: 0000000000000000 R14: 00007f0165975fa0 R15: 00007ffd1e4e2638 [ 759.920028][T14019] [ 761.789960][ T9399] usb 3-1: USB disconnect, device number 89 [ 761.811517][ T5896] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 761.977180][T14053] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 761.986935][T14053] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 762.005627][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 762.134952][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.710850][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.720713][ T5896] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 762.729856][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.750166][ T5896] usb 4-1: config 0 descriptor?? [ 763.545342][ T5896] elan 0003:04F3:0755.0028: failed to start in urb: -90 [ 763.640024][ T5896] elan 0003:04F3:0755.0028: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 764.720713][ T81] usb 4-1: USB disconnect, device number 78 [ 765.768423][T14083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.856729][T14086] FAULT_INJECTION: forcing a failure. [ 765.856729][T14086] name failslab, interval 1, probability 0, space 0, times 0 [ 765.874454][T14086] CPU: 0 UID: 0 PID: 14086 Comm: syz.1.2204 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 765.885254][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 765.895293][T14086] Call Trace: [ 765.898559][T14086] [ 765.901475][T14086] dump_stack_lvl+0x16c/0x1f0 [ 765.906140][T14086] should_fail_ex+0x497/0x5b0 [ 765.910807][T14086] ? fs_reclaim_acquire+0xae/0x150 [ 765.915899][T14086] should_failslab+0xc2/0x120 [ 765.920558][T14086] __kmalloc_noprof+0xcb/0x510 [ 765.925301][T14086] ? d_absolute_path+0x137/0x1b0 [ 765.930222][T14086] ? rcu_is_watching+0x12/0xc0 [ 765.934971][T14086] tomoyo_encode2+0x100/0x3e0 [ 765.939635][T14086] tomoyo_encode+0x29/0x50 [ 765.944042][T14086] tomoyo_realpath_from_path+0x19d/0x720 [ 765.949663][T14086] tomoyo_path_number_perm+0x248/0x590 [ 765.955117][T14086] ? tomoyo_path_number_perm+0x235/0x590 [ 765.960733][T14086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 765.966702][T14086] ? __pfx_lock_release+0x10/0x10 [ 765.971728][T14086] ? trace_lock_acquire+0x14e/0x1f0 [ 765.976922][T14086] ? lock_acquire+0x2f/0xb0 [ 765.981431][T14086] ? __fget_files+0x40/0x3a0 [ 765.986011][T14086] ? __fget_files+0x206/0x3a0 [ 765.990685][T14086] security_file_ioctl+0x9b/0x240 [ 765.995703][T14086] __x64_sys_ioctl+0xb7/0x200 [ 766.000366][T14086] do_syscall_64+0xcd/0x250 [ 766.004856][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.010746][T14086] RIP: 0033:0x7efd83f85d29 [ 766.015153][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.034746][T14086] RSP: 002b:00007efd84d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.043147][T14086] RAX: ffffffffffffffda RBX: 00007efd84175fa0 RCX: 00007efd83f85d29 [ 766.051099][T14086] RDX: 0000000020000240 RSI: 00000000000007a0 RDI: 0000000000000003 [ 766.059052][T14086] RBP: 00007efd84d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 766.067005][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.074972][T14086] R13: 0000000000000000 R14: 00007efd84175fa0 R15: 00007ffe873e5098 [ 766.082938][T14086] [ 766.170878][T14086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.183913][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 766.799214][ T5896] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 766.951304][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.971885][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 766.999225][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.060011][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.096649][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.125047][ T5896] usb 4-1: Product: syz [ 767.158575][ T5896] usb 4-1: Manufacturer: syz [ 767.168834][ T5896] usb 4-1: SerialNumber: syz [ 767.236813][ T5896] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 767.274877][ T5896] cdc_ncm 4-1:1.0: bind() failure [ 767.473095][ T5869] usb 4-1: USB disconnect, device number 79 [ 770.385306][T14126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.506846][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2216'. [ 771.018751][ T5869] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 771.159517][ T5869] usb 4-1: device descriptor read/64, error -71 [ 771.479474][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 771.479484][ T29] audit: type=1326 audit(1735544184.088:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.5.2219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb70985d29 code=0x0 [ 771.508424][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.523706][ T29] audit: type=1400 audit(1735544184.128:1678): avc: denied { accept } for pid=14144 comm="syz.1.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 771.708931][ T5869] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 771.797979][T14153] FAULT_INJECTION: forcing a failure. [ 771.797979][T14153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.817153][T14153] CPU: 0 UID: 0 PID: 14153 Comm: syz.0.2223 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 771.827955][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.838030][T14153] Call Trace: [ 771.841331][T14153] [ 771.844277][T14153] dump_stack_lvl+0x16c/0x1f0 [ 771.848981][T14153] should_fail_ex+0x497/0x5b0 [ 771.853688][T14153] _copy_from_user+0x2e/0xd0 [ 771.858306][T14153] __do_sys_prlimit64+0x107/0xb50 [ 771.858670][ T5869] usb 4-1: device descriptor read/64, error -71 [ 771.863343][T14153] ? __pfx___do_sys_prlimit64+0x10/0x10 [ 771.863375][T14153] ? fput+0x67/0x440 [ 771.879044][T14153] ? ksys_write+0x1ba/0x250 [ 771.883571][T14153] ? __pfx_ksys_write+0x10/0x10 [ 771.888457][T14153] do_syscall_64+0xcd/0x250 [ 771.892987][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.898941][T14153] RIP: 0033:0x7f0165785d29 [ 771.903373][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.923004][T14153] RSP: 002b:00007f01665ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 771.931446][T14153] RAX: ffffffffffffffda RBX: 00007f0165975fa0 RCX: 00007f0165785d29 [ 771.939436][T14153] RDX: 0000000020000300 RSI: 000000000000000e RDI: 0000000000000000 [ 771.947426][T14153] RBP: 00007f01665ed090 R08: 0000000000000000 R09: 0000000000000000 [ 771.955421][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.963420][T14153] R13: 0000000000000000 R14: 00007f0165975fa0 R15: 00007ffd1e4e2638 [ 771.971432][T14153] [ 771.979402][ T5869] usb usb4-port1: attempt power cycle [ 772.666015][T14166] syz.2.2225: attempt to access beyond end of device [ 772.666015][T14166] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 772.907738][ T5869] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 772.999271][ T5869] usb 4-1: device descriptor read/8, error -71 [ 773.271949][ T29] audit: type=1326 audit(1735544185.858:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.2.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4956185d29 code=0x0 [ 773.368659][ T5867] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 773.433958][ T5869] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 773.460003][ T5869] usb 4-1: device descriptor read/8, error -71 [ 773.495668][T14189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.518630][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 773.526490][ T5867] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.537798][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.548700][ T5867] usb 1-1: Product: syz [ 773.557668][ T5867] usb 1-1: Manufacturer: syz [ 773.568367][ T5867] usb 1-1: SerialNumber: syz [ 773.568817][ T5869] usb usb4-port1: unable to enumerate USB device [ 773.586053][ T5867] usb 1-1: config 0 descriptor?? [ 773.664832][T14189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2233'. [ 773.878940][ T5867] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 775.127693][T14209] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 776.412715][T14183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 776.538682][T14183] overlayfs: failed to set xattr on upper [ 776.544431][T14183] overlayfs: ...falling back to redirect_dir=nofollow. [ 776.552010][T14183] overlayfs: ...falling back to metacopy=off. [ 776.558067][T14183] overlayfs: ...falling back to index=off. [ 776.584889][T14183] overlayfs: ...falling back to uuid=null. [ 776.656935][T14235] netlink: 'syz.5.2246': attribute type 1 has an invalid length. [ 776.665334][T14235] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2246'. [ 776.853566][ T5867] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 776.889641][ T5867] usb 1-1: USB disconnect, device number 79 [ 777.835325][ T29] audit: type=1400 audit(1735544190.438:1680): avc: denied { getopt } for pid=14247 comm="syz.5.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 778.497747][ T5868] hid-generic 0001:0007:0004.0029: item fetching failed at offset 0/42 [ 778.514671][ T5868] hid-generic 0001:0007:0004.0029: probe with driver hid-generic failed with error -22 [ 778.736117][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 780.156836][T14275] FAULT_INJECTION: forcing a failure. [ 780.156836][T14275] name failslab, interval 1, probability 0, space 0, times 0 [ 780.170095][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.0.2257 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 780.180897][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 780.190956][T14275] Call Trace: [ 780.194236][T14275] [ 780.197168][T14275] dump_stack_lvl+0x16c/0x1f0 [ 780.201860][T14275] should_fail_ex+0x497/0x5b0 [ 780.206548][T14275] ? fs_reclaim_acquire+0xae/0x150 [ 780.211675][T14275] should_failslab+0xc2/0x120 [ 780.216362][T14275] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 780.222175][T14275] ? __alloc_skb+0x2b1/0x380 [ 780.226782][T14275] __alloc_skb+0x2b1/0x380 [ 780.231210][T14275] ? __pfx___alloc_skb+0x10/0x10 [ 780.236160][T14275] ? rcu_is_watching+0x12/0xc0 [ 780.240939][T14275] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 780.246323][T14275] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 780.251960][T14275] ? __rcu_read_unlock+0x2b4/0x580 [ 780.257082][T14275] ? audit_log_start+0x2bc/0x7e0 [ 780.262031][T14275] audit_log_start+0x2e1/0x7e0 [ 780.266799][T14275] ? __pfx_audit_log_start+0x10/0x10 [ 780.272099][T14275] ? __pfx_lock_release+0x10/0x10 [ 780.277131][T14275] ? vfs_write+0xa9b/0x1150 [ 780.281640][T14275] ? vfs_write+0xaa8/0x1150 [ 780.286147][T14275] ? migrate_enable+0x1ef/0x260 [ 780.290999][T14275] ? __pfx_migrate_enable+0x10/0x10 [ 780.296208][T14275] audit_seccomp+0x61/0x280 [ 780.300727][T14275] __seccomp_filter+0x816/0xf40 [ 780.305596][T14275] ? __pfx___seccomp_filter+0x10/0x10 [ 780.310989][T14275] ? fput+0x67/0x440 [ 780.314894][T14275] ? ksys_write+0x1ba/0x250 [ 780.319406][T14275] __secure_computing+0x26c/0x3f0 [ 780.324436][T14275] syscall_trace_enter+0x8b/0x260 [ 780.329487][T14275] do_syscall_64+0x1ee/0x250 [ 780.334092][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.339995][T14275] RIP: 0033:0x7f0165785d29 [ 780.344420][T14275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.364048][T14275] RSP: 002b:00007f01665ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 780.372477][T14275] RAX: ffffffffffffffda RBX: 00007f0165976160 RCX: 00007f0165785d29 [ 780.380459][T14275] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 780.388431][T14275] RBP: 00007f01665ab090 R08: 00000000000002b0 R09: 0000000000000000 [ 780.396580][T14275] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 780.402354][ T29] audit: type=1326 audit(1735544192.748:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 780.404548][T14275] R13: 0000000000000000 R14: 00007f0165976160 R15: 00007ffd1e4e2638 [ 780.427979][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.435909][T14275] [ 780.446020][T14275] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 780.454096][T14275] audit: out of memory in audit_log_start [ 780.490354][ T29] audit: type=1326 audit(1735544192.748:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 780.514243][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.557401][ T29] audit: type=1326 audit(1735544192.758:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 780.643923][ T29] audit: type=1326 audit(1735544192.758:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 780.728563][ T29] audit: type=1326 audit(1735544192.758:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x7ffc0000 [ 780.752830][T12926] Bluetooth: hci4: command 0x0406 tx timeout [ 780.889835][ T29] audit: type=1326 audit(1735544192.758:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0165784690 code=0x7ffc0000 [ 780.957924][ T29] audit: type=1326 audit(1735544192.758:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01657847df code=0x7ffc0000 [ 781.268671][ T81] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 781.278688][ T5896] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 781.476150][ T5896] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 781.506279][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.564529][ T5896] usb 3-1: config 0 has no interface number 0 [ 781.598556][ T5896] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 781.655890][ T5896] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 781.732301][ T5896] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 781.783527][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.840097][ T5896] usb 3-1: config 0 descriptor?? [ 781.847649][T14283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 781.872555][ T5896] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 781.910403][ T81] usb 4-1: config 0 has no interfaces? [ 781.915933][ T81] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 781.925173][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.943483][ T81] usb 4-1: config 0 descriptor?? [ 782.078890][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 782.088094][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 782.097802][T14283] netlink: 'syz.2.2260': attribute type 18 has an invalid length. [ 782.119798][T14296] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 782.172642][T14283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.247742][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.260661][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.273250][ T5896] usb 4-1: USB disconnect, device number 84 [ 782.327988][T14282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.353355][ T5963] usb 3-1: Failed to submit usb control message: -71 [ 782.353554][ T5867] usb 3-1: USB disconnect, device number 90 [ 782.364843][ T5963] usb 3-1: unable to send the bmi data to the device: -71 [ 782.383291][T14305] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 782.394055][ T5963] usb 3-1: unable to get target info from device [ 782.441978][ T5963] usb 3-1: could not get target info (-71) [ 782.448207][ T5963] usb 3-1: could not probe fw (-71) [ 782.728683][ T81] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 782.879365][ T81] usb 4-1: Using ep0 maxpacket: 8 [ 782.893945][ T81] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 782.917973][ T81] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 782.983439][ T81] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 783.006605][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.015783][ T81] usb 4-1: Product: syz [ 783.023399][ T81] usb 4-1: Manufacturer: syz [ 783.033877][ T81] usb 4-1: SerialNumber: syz [ 783.564277][T14321] FAULT_INJECTION: forcing a failure. [ 783.564277][T14321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.623374][T14321] CPU: 0 UID: 0 PID: 14321 Comm: syz.1.2272 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 783.634183][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 783.644269][T14321] Call Trace: [ 783.647560][T14321] [ 783.650508][T14321] dump_stack_lvl+0x16c/0x1f0 [ 783.655235][T14321] should_fail_ex+0x497/0x5b0 [ 783.659942][T14321] _copy_to_user+0x32/0xd0 [ 783.664375][T14321] simple_read_from_buffer+0xd0/0x160 [ 783.669786][T14321] proc_fail_nth_read+0x198/0x270 [ 783.674833][T14321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.680434][T14321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.686009][T14321] vfs_read+0x1df/0xbe0 [ 783.690196][T14321] ? __fget_files+0x1fc/0x3a0 [ 783.694915][T14321] ? __pfx___mutex_lock+0x10/0x10 [ 783.699971][T14321] ? __pfx_vfs_read+0x10/0x10 [ 783.704678][T14321] ? __fget_files+0x206/0x3a0 [ 783.709387][T14321] ksys_read+0x12b/0x250 [ 783.713655][T14321] ? __pfx_ksys_read+0x10/0x10 [ 783.718489][T14321] do_syscall_64+0xcd/0x250 [ 783.723033][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.729146][T14321] RIP: 0033:0x7efd83f8473c [ 783.733586][T14321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 783.753221][T14321] RSP: 002b:00007efd84d7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.761741][T14321] RAX: ffffffffffffffda RBX: 00007efd84175fa0 RCX: 00007efd83f8473c [ 783.769782][T14321] RDX: 000000000000000f RSI: 00007efd84d7f0a0 RDI: 0000000000000008 [ 783.777780][T14321] RBP: 00007efd84d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 783.785766][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.793761][T14321] R13: 0000000000000000 R14: 00007efd84175fa0 R15: 00007ffe873e5098 [ 783.801775][T14321] [ 783.804872][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.061922][T14324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.173776][T14326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'. [ 784.775113][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2274'. [ 784.834816][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2274'. [ 784.954529][ T81] usb 4-1: USB disconnect, device number 85 [ 785.569734][T14343] syz.0.2278: attempt to access beyond end of device [ 785.569734][T14343] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 786.590297][T14355] syz.0.2279: attempt to access beyond end of device [ 786.590297][T14355] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 787.084136][T14363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.183322][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2281'. [ 787.586679][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 787.750325][T14371] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2280'. [ 788.318093][ T81] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 789.773834][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 789.800623][T14392] FAULT_INJECTION: forcing a failure. [ 789.800623][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.841518][T14392] CPU: 0 UID: 0 PID: 14392 Comm: syz.3.2287 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 789.852319][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 789.862360][T14392] Call Trace: [ 789.865620][T14392] [ 789.868548][T14392] dump_stack_lvl+0x16c/0x1f0 [ 789.873231][T14392] should_fail_ex+0x497/0x5b0 [ 789.877937][T14392] _copy_from_user+0x2e/0xd0 [ 789.882538][T14392] copy_msghdr_from_user+0x99/0x160 [ 789.887721][T14392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 789.893524][T14392] ___sys_sendmsg+0xff/0x1e0 [ 789.898122][T14392] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.903305][T14392] ? __pfx_lock_release+0x10/0x10 [ 789.908340][T14392] ? trace_lock_acquire+0x14e/0x1f0 [ 789.913526][T14392] ? __fget_files+0x206/0x3a0 [ 789.918200][T14392] __sys_sendmsg+0x16e/0x220 [ 789.922783][T14392] ? __pfx___sys_sendmsg+0x10/0x10 [ 789.927877][T14392] do_syscall_64+0xcd/0x250 [ 789.932380][T14392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.938262][T14392] RIP: 0033:0x7f9848b85d29 [ 789.942658][T14392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.962256][T14392] RSP: 002b:00007f9849a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.970648][T14392] RAX: ffffffffffffffda RBX: 00007f9848d76080 RCX: 00007f9848b85d29 [ 789.978615][T14392] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 789.986585][T14392] RBP: 00007f9849a05090 R08: 0000000000000000 R09: 0000000000000000 [ 789.994550][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.002499][T14392] R13: 0000000000000000 R14: 00007f9848d76080 R15: 00007ffe8b504f98 [ 790.010468][T14392] [ 790.013640][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.112205][T14394] xt_TCPMSS: Only works on TCP SYN packets [ 790.328084][T14397] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.978413][T14406] random: crng reseeded on system resumption [ 792.907570][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 792.907585][ T29] audit: type=1400 audit(1735544204.578:1693): avc: denied { append } for pid=14403 comm="syz.1.2290" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 793.033245][ T29] audit: type=1400 audit(1735544205.548:1694): avc: denied { watch } for pid=14403 comm="syz.1.2290" path="/465" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 793.326930][ T29] audit: type=1400 audit(1735544205.548:1695): avc: denied { watch_sb } for pid=14403 comm="syz.1.2290" path="/465" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 793.687598][T14411] syzkaller1: entered promiscuous mode [ 793.698723][T14411] syzkaller1: entered allmulticast mode [ 796.798736][ T5896] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 796.970549][ T5896] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 796.989314][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.001589][ T5868] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 797.014891][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.025571][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 797.051334][ T5896] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 797.067736][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.082899][ T5896] usb 1-1: config 0 descriptor?? [ 797.168691][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 797.184091][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.210504][ T5868] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 797.229097][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.237297][ T5868] usb 2-1: Product: syz [ 797.252347][ T5868] usb 2-1: Manufacturer: syz [ 797.257590][ T5868] usb 2-1: SerialNumber: syz [ 797.305584][ T5868] usb 2-1: config 0 descriptor?? [ 797.325002][ T5868] usb 2-1: bad CDC descriptors [ 797.341924][ T5868] usb 2-1: unsupported MDLM descriptors [ 797.624827][T14451] FAULT_INJECTION: forcing a failure. [ 797.624827][T14451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.638080][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.5.2303 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 797.648856][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 797.658917][T14451] Call Trace: [ 797.662212][T14451] [ 797.665147][T14451] dump_stack_lvl+0x16c/0x1f0 [ 797.669840][T14451] should_fail_ex+0x497/0x5b0 [ 797.674535][T14451] _copy_from_user+0x2e/0xd0 [ 797.679139][T14451] __sys_bpf+0x21c/0x49c0 [ 797.683490][T14451] ? reacquire_held_locks+0x491/0x4c0 [ 797.688877][T14451] ? __pfx___sys_bpf+0x10/0x10 [ 797.693655][T14451] ? vfs_write+0x306/0x1150 [ 797.698164][T14451] ? __pfx___schedule+0x10/0x10 [ 797.703020][T14451] ? __mutex_unlock_slowpath+0x164/0x690 [ 797.708688][T14451] __x64_sys_bpf+0x78/0xc0 [ 797.713135][T14451] do_syscall_64+0xcd/0x250 [ 797.717653][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.723573][T14451] RIP: 0033:0x7ffb70985d29 [ 797.727996][T14451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.747629][T14451] RSP: 002b:00007ffb6e7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.756061][T14451] RAX: ffffffffffffffda RBX: 00007ffb70b76160 RCX: 00007ffb70985d29 [ 797.764041][T14451] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 797.772026][T14451] RBP: 00007ffb6e7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 797.779999][T14451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.787985][T14451] R13: 0000000000000000 R14: 00007ffb70b76160 R15: 00007ffd3528f578 [ 797.795980][T14451] [ 797.799086][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.131762][ T81] usb 2-1: USB disconnect, device number 94 [ 798.742809][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 798.749046][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 798.762010][T14458] 9pnet_fd: Insufficient options for proto=fd [ 798.768671][ T5896] usb 1-1: USB disconnect, device number 80 [ 798.860684][T14459] syz.5.2304: attempt to access beyond end of device [ 798.860684][T14459] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 798.874028][T14459] EXT4-fs (nbd5): unable to read superblock [ 799.385331][ T29] audit: type=1400 audit(1735544211.988:1696): avc: denied { accept } for pid=14464 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 799.543131][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2305'. [ 799.575086][T14463] netlink: 'syz.5.2305': attribute type 10 has an invalid length. [ 799.603702][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.610941][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.659233][T14327] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 799.818685][T14327] usb 2-1: device descriptor read/64, error -71 [ 800.179241][T14327] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 800.346495][T14327] usb 2-1: device descriptor read/64, error -71 [ 800.978422][T14483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.985553][T14327] usb usb2-port1: attempt power cycle [ 801.148851][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2312'. [ 801.546588][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 801.556260][T14485] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 801.564191][T14485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2308'. [ 801.828927][T14327] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 801.850957][T14327] usb 2-1: device descriptor read/8, error -71 [ 801.868839][ T81] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 802.119274][T14327] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 802.237888][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 802.248509][T14327] usb 2-1: device descriptor read/8, error -71 [ 802.260766][ T81] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 802.280563][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 802.359549][T14327] usb usb2-port1: unable to enumerate USB device [ 802.568763][ T81] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 802.583938][ T81] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 802.595784][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.613076][ T81] usb 4-1: Product: syz [ 802.617377][ T81] usb 4-1: Manufacturer: syz [ 802.622694][ T81] usb 4-1: SerialNumber: syz [ 802.638412][ T81] usb 4-1: config 0 descriptor?? [ 802.676223][ T81] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 802.726883][T14504] input: syz0 as /devices/virtual/input/input50 [ 803.062472][ T81] scsi host1: usb-storage 4-1:0.0 [ 803.075394][ T81] usb 4-1: USB disconnect, device number 87 [ 803.361348][ T29] audit: type=1800 audit(1735544215.968:1697): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2322" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 803.617578][T14523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.706486][T14524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2323'. [ 804.791474][T14539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.887859][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2328'. [ 805.189055][ T5868] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 805.540061][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.551075][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.569182][ T5868] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 805.579252][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.596884][ T5868] usb 1-1: config 0 descriptor?? [ 805.889936][ T29] audit: type=1400 audit(1735544218.498:1698): avc: denied { write } for pid=14555 comm="syz.3.2335" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 805.947734][ T5896] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 806.029024][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.140415][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.246049][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.280924][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.286537][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.296515][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.322193][ T5896] usb 2-1: config 0 has no interface number 0 [ 806.324909][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.336209][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 806.515626][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.532230][ T5896] usb 2-1: Product: syz [ 807.231623][ T5896] usb 2-1: Manufacturer: syz [ 807.236717][ T5896] usb 2-1: SerialNumber: syz [ 807.243983][ T5896] usb 2-1: config 0 descriptor?? [ 807.251903][ T5896] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 807.261083][ T5896] usb 2-1: selecting invalid altsetting 1 [ 807.266879][ T5896] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 807.287354][ T5896] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 807.324733][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2339'. [ 807.397026][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 807.406579][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 807.432150][ T5868] usb 1-1: USB disconnect, device number 81 [ 807.462059][T14575] fuse: Bad value for 'fd' [ 807.510479][T14548] vlan2: entered promiscuous mode [ 807.563460][T14576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.600949][T14576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.685541][ T5896] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 807.731744][ T5896] usb 2-1: USB disconnect, device number 99 [ 808.043830][ T29] audit: type=1400 audit(1735544220.648:1699): avc: denied { getopt } for pid=14587 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 808.303819][T14592] sp0: Synchronizing with TNC [ 808.371611][ T29] audit: type=1400 audit(1735544220.978:1700): avc: denied { ioctl } for pid=14589 comm="syz.3.2347" path="socket:[46307]" dev="sockfs" ino=46307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 808.716496][ T29] audit: type=1400 audit(1735544221.318:1701): avc: denied { map } for pid=14605 comm="syz.3.2353" path="socket:[46342]" dev="sockfs" ino=46342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 808.807526][ T29] audit: type=1400 audit(1735544221.348:1702): avc: denied { mounton } for pid=14601 comm="syz.1.2352" path="/479/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 808.844474][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.973562][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 809.638670][ T5867] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 809.878836][ T5869] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 809.921897][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 809.933644][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 810.333298][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 810.351313][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 810.364144][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 810.375542][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 810.383810][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 810.394462][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 810.406329][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 810.421137][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 810.433120][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 810.445195][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 810.452892][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.468295][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 810.479015][ T5869] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 810.488930][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 810.498901][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.507716][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 810.519689][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 810.532619][ T5867] usb 4-1: string descriptor 0 read error: -22 [ 810.550407][ T5869] usb 1-1: config 0 descriptor?? [ 810.588834][ T5867] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 810.607122][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.627096][T14631] syz.1.2360: attempt to access beyond end of device [ 810.627096][T14631] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 810.628352][ T5867] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 810.977757][ T5869] isku 0003:1E7D:319C.002A: item fetching failed at offset 5/7 [ 810.999482][ T5869] isku 0003:1E7D:319C.002A: parse failed [ 811.009880][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.017246][ T5869] isku 0003:1E7D:319C.002A: probe with driver isku failed with error -22 [ 811.020422][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.060786][ T29] audit: type=1400 audit(1735544223.668:1703): avc: denied { read } for pid=14633 comm="syz.5.2361" lport=59766 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 811.113985][ T5896] usb 4-1: USB disconnect, device number 88 [ 811.320666][ T9399] usb 1-1: USB disconnect, device number 82 [ 812.188700][ T5867] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 812.319138][ T5867] usb 1-1: device descriptor read/64, error -71 [ 812.558941][ T5867] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 812.566881][ T5869] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 812.709125][ T5867] usb 1-1: device descriptor read/64, error -71 [ 812.730032][ T5869] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 812.742379][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.769159][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.787722][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 812.806417][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 812.817068][ T5869] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 812.826451][ T5869] usb 3-1: Manufacturer: syz [ 812.832279][ T5867] usb usb1-port1: attempt power cycle [ 812.852857][ T5869] usb 3-1: config 0 descriptor?? [ 812.992886][T12926] Bluetooth: hci6: sending frame failed (-49) [ 813.006188][T12945] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 813.021026][T14672] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2375'. [ 813.178905][ T5867] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 813.199303][ T5867] usb 1-1: device descriptor read/8, error -71 [ 813.308412][ T5869] appleir 0003:05AC:8243.002B: item fetching failed at offset 0/1 [ 813.323335][ T5869] appleir 0003:05AC:8243.002B: parse failed [ 813.329891][ T5869] appleir 0003:05AC:8243.002B: probe with driver appleir failed with error -22 [ 813.438657][ T5867] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 813.459467][ T5867] usb 1-1: device descriptor read/8, error -71 [ 813.569704][ T5867] usb usb1-port1: unable to enumerate USB device [ 813.574282][T14675] overlayfs: disabling nfs_export due to verity=on [ 813.715203][ T9399] usb 3-1: USB disconnect, device number 91 [ 815.202101][ T29] audit: type=1400 audit(1735544227.658:1704): avc: denied { read } for pid=14690 comm="syz.3.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 815.219812][T14699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2382'. [ 815.252683][T14699] netlink: 'syz.0.2382': attribute type 7 has an invalid length. [ 815.268603][T14699] netlink: 'syz.0.2382': attribute type 8 has an invalid length. [ 815.282899][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 815.364237][ T29] audit: type=1400 audit(1735544227.968:1705): avc: denied { module_load } for pid=14697 comm="syz.1.2383" path="/sys/power/wakeup_count" dev="sysfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 815.388598][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.063980][ T29] audit: type=1400 audit(1735544228.668:1706): avc: denied { watch_sb } for pid=14709 comm="syz.0.2386" path="/499/net_prio.prioidx" dev="tmpfs" ino=2663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 816.087796][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.115739][T14713] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 816.124161][T14713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.208723][T14718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.282723][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 816.312316][ T29] audit: type=1400 audit(1735544228.918:1707): avc: denied { getopt } for pid=14720 comm="syz.0.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.861660][T14737] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 817.869910][T14737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2391'. [ 818.338667][ T29] audit: type=1400 audit(1735544230.938:1708): avc: denied { accept } for pid=14746 comm="syz.5.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 819.064646][ T29] audit: type=1400 audit(1735544231.218:1709): avc: denied { map } for pid=14744 comm="syz.0.2398" path="socket:[47509]" dev="sockfs" ino=47509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 819.088405][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.088827][ T5896] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 819.743680][T12926] Bluetooth: hci4: command 0x0406 tx timeout [ 820.039872][ T9399] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 820.119197][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 820.125845][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.137129][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 820.148531][ T5896] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 820.157678][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.174741][ T5896] usb 3-1: config 0 descriptor?? [ 820.179928][ T9399] usb 1-1: device descriptor read/64, error -71 [ 820.468666][ T9399] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 820.601622][ T5896] hid (null): unknown global tag 0x3e [ 820.608751][ T9399] usb 1-1: device descriptor read/64, error -71 [ 820.686712][ T5896] cougar 0003:060B:500A.002C: usage count exceeds max: fixing up report descriptor [ 820.697796][ T5896] cougar 0003:060B:500A.002C: unexpected long global item [ 820.705738][ T5896] cougar 0003:060B:500A.002C: parse failed [ 820.712259][ T5896] cougar 0003:060B:500A.002C: probe with driver cougar failed with error -22 [ 820.788895][ T9399] usb usb1-port1: attempt power cycle [ 820.845517][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2400'. [ 820.866204][ T5896] usb 3-1: USB disconnect, device number 92 [ 821.158785][ T9399] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 821.192039][ T9399] usb 1-1: device descriptor read/8, error -71 [ 821.489250][ T29] audit: type=1400 audit(1735544234.088:1710): avc: denied { ioctl } for pid=14779 comm="syz.2.2408" path="/dev/usbmon9" dev="devtmpfs" ino=743 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 821.517323][T14776] fuse: Bad value for 'group_id' [ 821.523786][T14776] fuse: Bad value for 'group_id' [ 821.574278][ T5896] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 821.740223][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 821.752886][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.764732][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.779850][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 821.793509][ T5896] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 821.803213][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.814648][ T5896] usb 4-1: config 0 descriptor?? [ 821.927985][T14783] 9pnet_virtio: no channels available for device syz [ 822.439262][T14788] dccp_v4_rcv: dropped packet with invalid checksum [ 822.794950][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 822.801280][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 822.820468][ T5896] usb 4-1: USB disconnect, device number 89 [ 824.141504][ T29] audit: type=1400 audit(1735544236.358:1711): avc: denied { append } for pid=14789 comm="syz.0.2411" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 824.323358][ T29] audit: type=1400 audit(1735544236.358:1712): avc: denied { setopt } for pid=14789 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 824.343398][ T29] audit: type=1400 audit(1735544236.888:1713): avc: denied { nlmsg_tty_audit } for pid=14800 comm="syz.1.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 824.370022][ T29] audit: type=1400 audit(1735544236.978:1714): avc: denied { nlmsg_write } for pid=14802 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 825.048564][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2417'. [ 825.133015][T14820] 9pnet_fd: Insufficient options for proto=fd [ 825.389112][ T5896] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 825.442010][ T5867] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 825.618862][ T5867] usb 4-1: Invalid ep0 maxpacket: 64 [ 825.809401][ T5867] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 825.838648][T14831] autofs: Unknown parameter '0x0000000000000000' [ 825.943590][ T5896] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 825.978984][ T5867] usb 4-1: Invalid ep0 maxpacket: 64 [ 825.979136][ T5896] usb 1-1: config 0 has no interface number 0 [ 825.994376][ T5867] usb usb4-port1: attempt power cycle [ 826.039492][ T5896] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 826.181193][ T5896] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 826.199158][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.228672][ T5896] usb 1-1: Product: syz [ 826.264280][ T5896] usb 1-1: Manufacturer: syz [ 826.281760][ T5896] usb 1-1: SerialNumber: syz [ 826.315386][ T5896] usb 1-1: config 0 descriptor?? [ 826.321253][T14813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.330026][ T5896] usb-storage 1-1:0.20: USB Mass Storage device detected [ 826.348150][ T5896] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 826.684140][ T29] audit: type=1800 audit(1735544238.988:1715): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2425" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 826.737959][ T5896] scsi host1: usb-storage 1-1:0.20 [ 826.775513][T14847] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 826.785407][T14847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2427'. [ 826.808566][ T5867] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 826.875982][T14851] devtmpfs: Unknown parameter 'quotattynull' [ 826.998573][ T5867] usb 4-1: Invalid ep0 maxpacket: 64 [ 828.036177][T14863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.068613][ T5867] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 828.078725][T14842] usb 1-1: reset full-speed USB device number 91 using dummy_hcd [ 828.089465][ T5867] usb 4-1: Invalid ep0 maxpacket: 64 [ 828.095000][ T5867] usb usb4-port1: unable to enumerate USB device [ 828.317256][T14864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2430'. [ 828.762994][T14870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.218994][ T29] audit: type=1326 audit(1735544242.038:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.582080][ T29] audit: type=1326 audit(1735544242.038:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.605719][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.612986][ T29] audit: type=1326 audit(1735544242.118:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.636357][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.643793][ T29] audit: type=1326 audit(1735544242.128:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.667334][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.674135][ T29] audit: type=1326 audit(1735544242.128:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.698220][ T29] audit: type=1326 audit(1735544242.158:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.721628][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.727969][ T29] audit: type=1326 audit(1735544242.168:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 830.751440][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.759003][ T29] audit: type=1326 audit(1735544242.168:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd83f85d29 code=0x7ffc0000 [ 832.610404][ T9399] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 833.165295][ T5905] usb 1-1: USB disconnect, device number 91 [ 833.194498][ T29] audit: type=1400 audit(1735544245.458:1724): avc: denied { setopt } for pid=14896 comm="syz.1.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 833.266121][ T9399] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 833.307890][ T9399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.709976][ T5868] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 833.720775][ T9399] usb 3-1: config 0 descriptor?? [ 833.728381][ T9399] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 833.900459][ T5868] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 833.908372][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2444'. [ 833.912191][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.935873][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.947330][T14915] 9pnet_fd: Insufficient options for proto=fd [ 833.952037][ T9399] gp8psk: usb in 128 operation failed. [ 833.965695][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 833.979736][ T5868] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 833.992052][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.005840][ T5868] usb 4-1: config 0 descriptor?? [ 834.028877][ T5905] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 834.188614][ T9399] gp8psk: usb in 137 operation failed. [ 834.194138][ T9399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 834.204451][ T9399] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 834.213301][ T9399] usb 3-1: media controller created [ 834.227423][ T9399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 834.239060][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 834.600562][T14918] syz.1.2445: attempt to access beyond end of device [ 834.600562][T14918] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 834.696434][ T29] audit: type=1400 audit(1735544247.298:1725): avc: denied { read } for pid=14889 comm="syz.2.2437" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 834.770103][ T5905] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 834.779297][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 834.788103][ T5905] usb 1-1: Product: syz [ 834.792370][ T5905] usb 1-1: Manufacturer: syz [ 834.797052][ T5905] usb 1-1: SerialNumber: syz [ 834.832450][ T9399] gp8psk_fe: Frontend attached [ 834.837757][ T9399] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 834.856661][ T9399] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 834.982443][T14927] dccp_v4_rcv: dropped packet with invalid checksum [ 835.156655][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 835.162881][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 835.173865][ T5905] usb 1-1: config 0 descriptor?? [ 835.194449][ T5868] usb 4-1: USB disconnect, device number 94 [ 835.200592][ T9399] gp8psk: usb in 138 operation failed. [ 835.206184][ T9399] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 835.216609][ T9399] gp8psk: found Genpix USB device pID = 203 (hex) [ 835.426636][ T5905] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 835.436168][ T5905] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 835.478845][ T9399] usb 3-1: USB disconnect, device number 93 [ 835.529138][T14327] usb 1-1: USB disconnect, device number 92 [ 835.670912][ T9399] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 836.219006][ T5868] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 836.926476][ T5868] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 837.337533][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.378570][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.403306][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 837.527186][ T5868] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 837.538405][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.553216][T14955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.608951][ T5868] usb 2-1: config 0 descriptor?? [ 838.358629][T14327] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 838.384959][T14956] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd0": -EINTR [ 839.087101][T14939] dccp_v4_rcv: dropped packet with invalid checksum [ 839.122629][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 839.131570][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 839.169049][ T5868] usb 2-1: USB disconnect, device number 100 [ 839.217113][T14327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.245193][ T29] audit: type=1326 audit(1735544251.848:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.0.2459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0165785d29 code=0x0 [ 839.245325][T14327] usb 4-1: config 0 has no interfaces? [ 839.284056][T14327] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.297542][T14327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.314335][T14327] usb 4-1: config 0 descriptor?? [ 839.357983][T14981] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 839.366564][T14981] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2460'. [ 840.972733][ T5868] usb 4-1: USB disconnect, device number 95 [ 843.187497][T15005] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 843.306578][T15005] PKCS7: Only support pkcs7_signedData type [ 844.693887][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 844.700159][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 845.206214][T15036] binder: 15019:15036 ioctl c018620c 20000000 returned -22 [ 845.515206][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 845.521423][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 845.611072][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=15044 comm=syz.0.2468 [ 845.665402][T15022] ceph: No mds server is up or the cluster is laggy [ 845.702762][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=15044 comm=syz.0.2468 [ 846.049353][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 846.055471][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 846.239279][T15054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.437744][T15057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2477'. [ 846.468569][T15058] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2475'. [ 846.672518][T15059] 9pnet_fd: Insufficient options for proto=fd [ 846.889202][ T29] audit: type=1400 audit(1735544259.468:1727): avc: denied { map } for pid=15062 comm="syz.1.2479" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 846.940326][ T7548] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 846.953343][ T29] audit: type=1400 audit(1735544259.468:1728): avc: denied { execute } for pid=15062 comm="syz.1.2479" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 847.103937][ T7548] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 847.114471][ T7548] usb 1-1: config 0 has no interface number 0 [ 847.125692][ T7548] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 847.146051][ T7548] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 847.156685][ T7548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.165639][ T7548] usb 1-1: Product: syz [ 847.170046][ T7548] usb 1-1: Manufacturer: syz [ 847.175104][ T7548] usb 1-1: SerialNumber: syz [ 847.187138][ T7548] usb 1-1: config 0 descriptor?? [ 847.193855][T15059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 847.202630][ T7548] usb-storage 1-1:0.20: USB Mass Storage device detected [ 847.209154][ T5896] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 847.227295][ T7548] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 847.337425][T15076] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 847.400039][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.412492][ T7548] scsi host1: usb-storage 1-1:0.20 [ 847.423782][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.443712][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 847.498214][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.539584][ T5896] usb 3-1: config 0 descriptor?? [ 847.738835][T15079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.236686][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 848.244444][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 848.298757][ T5896] usb 3-1: USB disconnect, device number 94 [ 848.428613][ T5868] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 849.559411][ T5868] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 849.609415][T15077] usb 1-1: reset full-speed USB device number 93 using dummy_hcd [ 849.708209][T15095] dccp_close: ABORT with 32 bytes unread [ 849.720974][T15093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.748830][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.760155][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.770613][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 849.783940][ T5868] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 849.793173][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.805027][ T5868] usb 4-1: config 0 descriptor?? [ 849.980106][T15107] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 849.988030][T15107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2490'. [ 850.636405][T15114] dccp_v4_rcv: dropped packet with invalid checksum [ 851.084449][T15115] bridge0: port 3(erspan0) entered blocking state [ 851.093284][T15115] bridge0: port 3(erspan0) entered disabled state [ 851.103276][T15115] erspan0: entered allmulticast mode [ 851.119740][T15115] erspan0: entered promiscuous mode [ 851.194423][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 851.292193][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 851.364183][ T29] audit: type=1400 audit(1735544263.958:1729): avc: denied { watch_reads } for pid=15116 comm="syz.5.2492" path="/480/cpuacct.usage_percpu_user" dev="tmpfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 851.384564][ T5868] usb 4-1: USB disconnect, device number 96 [ 852.484927][T15126] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2496'. [ 852.617846][ T29] audit: type=1400 audit(1735544265.218:1730): avc: denied { watch_mount watch_reads } for pid=15138 comm="syz.0.2499" path="pipe:[5378]" dev="pipefs" ino=5378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 852.644434][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2499'. [ 852.750541][ T5905] usb 1-1: USB disconnect, device number 93 [ 853.048840][ T7548] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 853.250322][ T7548] usb 4-1: device descriptor read/64, error -71 [ 853.498847][ T7548] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 853.598696][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2504'. [ 853.629623][ T7548] usb 4-1: device descriptor read/64, error -71 [ 853.686701][T15161] 9pnet_fd: Insufficient options for proto=fd [ 853.739549][ T7548] usb usb4-port1: attempt power cycle [ 854.046301][T15163] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 854.061081][T15163] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2507'. [ 854.080686][T15166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.088663][ T7548] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 854.205180][ T7548] usb 4-1: device descriptor read/8, error -71 [ 854.205856][ T5905] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 854.453085][ T5905] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 854.474717][ T5905] usb 1-1: config 0 has no interface number 0 [ 854.488784][ T7548] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 854.915976][ T7548] usb 4-1: device descriptor read/8, error -71 [ 854.920012][ T5905] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 854.940144][T15171] input: syz1 as /devices/virtual/input/input51 [ 854.978045][ T5905] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 854.987869][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.995992][ T5905] usb 1-1: Product: syz [ 855.000446][ T5905] usb 1-1: Manufacturer: syz [ 855.005081][ T5905] usb 1-1: SerialNumber: syz [ 855.075603][ T7548] usb usb4-port1: unable to enumerate USB device [ 855.149860][ T5905] usb 1-1: config 0 descriptor?? [ 855.155686][T15159] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 855.176722][ T5905] usb-storage 1-1:0.20: USB Mass Storage device detected [ 855.191671][ T5905] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 855.387180][ T5905] scsi host1: usb-storage 1-1:0.20 [ 855.405096][T15182] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 856.956149][T15201] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd2": -EINTR [ 857.248737][T15183] usb 1-1: reset full-speed USB device number 94 using dummy_hcd [ 858.243559][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 859.972574][ T5905] usb 1-1: USB disconnect, device number 94 [ 860.261076][T15234] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 860.528874][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2529'. [ 860.989879][T15253] binder: 15236:15253 ioctl c018620c 20000000 returned -1 [ 863.414995][T15286] overlay: ./file0 is not a directory [ 863.459762][T15279] Process accounting resumed [ 863.698335][ T29] audit: type=1400 audit(1735544276.298:1731): avc: denied { transfer } for pid=15299 comm="syz.2.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 863.747387][T15300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.700050][T15310] syz.2.2545: attempt to access beyond end of device [ 864.700050][T15310] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 865.126488][T15323] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2548'. [ 865.256964][T15328] sg_write: data in/out 54732/14 bytes for SCSI command 0x0-- guessing data in; [ 865.256964][T15328] program syz.3.2551 not setting count and/or reply_len properly [ 865.409119][ T29] audit: type=1400 audit(1735544278.018:1732): avc: denied { bind } for pid=15324 comm="syz.1.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 865.732677][T15342] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 865.741463][T15342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2550'. [ 866.560659][T15360] binder: 15358:15360 ioctl c0306201 200001c0 returned -22 [ 866.619219][T15360] tmpfs: Unknown parameter 'indo64' [ 867.366698][T15383] : entered promiscuous mode [ 867.392066][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 868.063729][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2570'. [ 870.044334][T15418] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 870.356988][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.826842][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2579'. [ 871.688665][ T5905] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 871.759512][ T29] audit: type=1400 audit(1735544284.348:1733): avc: denied { ioctl } for pid=15447 comm="syz.1.2583" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 871.861005][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 871.882341][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 871.897892][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 871.968621][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 872.000539][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 872.021630][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 872.088012][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 872.146778][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 872.168223][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 872.198744][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12335, setting to 1024 [ 872.211096][T15394] syz.5.2563 (15394) used greatest stack depth: 21376 bytes left [ 872.218697][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 872.251082][ T5905] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 872.275945][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.303508][ T5905] usb 3-1: Product: syz [ 872.650828][ T5905] usb 3-1: Manufacturer: syz [ 872.669813][ T5905] usb 3-1: SerialNumber: syz [ 872.697407][ T5905] usb 3-1: config 0 descriptor?? [ 872.713516][T15430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.727723][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.672873][ T5905] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 875.145496][T15481] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2590'. [ 875.375395][T14933] udevd[14933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.411610][ T5905] usb 3-1: USB disconnect, device number 95 [ 875.822291][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 879.144200][T15506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.277264][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2597'. [ 879.672736][T15514] geneve0: entered allmulticast mode [ 880.403485][T15509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.448561][ T5905] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 881.538643][ T29] audit: type=1400 audit(1735544294.108:1734): avc: denied { mount } for pid=15544 comm="syz.3.2610" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 881.538700][ T29] audit: type=1400 audit(1735544294.108:1735): avc: denied { read } for pid=15544 comm="syz.3.2610" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 881.538735][ T29] audit: type=1400 audit(1735544294.108:1736): avc: denied { open } for pid=15544 comm="syz.3.2610" path="/525/file0" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 881.721481][ C0] vkms_vblank_simulate: vblank timer overrun [ 881.811438][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 882.267195][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 882.268779][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 882.268825][ T5905] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 882.268850][ T5905] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 882.268878][ T5905] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 882.268904][ T5905] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 882.268931][ T5905] usb 2-1: config 1 interface 0 has no altsetting 0 [ 882.268960][ T5905] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 882.268985][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.274322][ T5905] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 882.483321][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.483456][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.491905][ T5905] scsi host1: usb-storage 2-1:1.0 [ 883.106309][T15564] syz.2.2614: attempt to access beyond end of device [ 883.106309][T15564] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 883.458137][T15561] tmpfs: Unknown parameter 'czÝcA2¥y9<+/?:€8Õ$@a' [ 883.769211][ T3507] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 883.887472][ T29] audit: type=1400 audit(1735544296.488:1737): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 884.051239][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2616'. [ 884.056806][ T3507] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 884.135438][T15559] sddr09: could not read card info [ 884.159195][ T5905] usb 2-1: USB disconnect, device number 101 [ 884.182842][ T60] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 884.190133][ T60] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 884.198081][ T60] sd 1:0:0:0: [sdb] Write Protect is off [ 884.204491][ T60] sd 1:0:0:0: [sdb] Asking for cache data failed [ 884.210978][ T60] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 884.219971][ T60] [ 884.222328][ T60] ====================================================== [ 884.229349][ T60] WARNING: possible circular locking dependency detected [ 884.236370][ T60] 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Not tainted [ 884.243490][ T60] ------------------------------------------------------ [ 884.250485][ T60] kworker/u8:4/60 is trying to acquire lock: [ 884.256450][ T60] ffff8880292a0918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 884.266192][ T60] [ 884.266192][ T60] but task is already holding lock: [ 884.273546][ T60] ffff8880292a00e0 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 884.284149][ T60] [ 884.284149][ T60] which lock already depends on the new lock. [ 884.284149][ T60] [ 884.294543][ T60] [ 884.294543][ T60] the existing dependency chain (in reverse order) is: [ 884.303535][ T60] [ 884.303535][ T60] -> #5 (&q->q_usage_counter(queue)#55){++++}-{0:0}: [ 884.312390][ T60] blk_queue_enter+0x50f/0x640 [ 884.317688][ T60] blk_mq_alloc_request+0x59b/0x950 [ 884.323397][ T60] scsi_execute_cmd+0x1eb/0xf40 [ 884.328756][ T60] read_capacity_10+0x1d4/0x6d0 [ 884.334119][ T60] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 884.340434][ T60] sd_probe+0x904/0x1000 [ 884.345188][ T60] really_probe+0x23e/0xa90 [ 884.350199][ T60] __driver_probe_device+0x1de/0x440 [ 884.356000][ T60] driver_probe_device+0x4c/0x1b0 [ 884.361536][ T60] __device_attach_driver+0x1df/0x310 [ 884.367415][ T60] bus_for_each_drv+0x157/0x1e0 [ 884.372772][ T60] __device_attach_async_helper+0x1d3/0x290 [ 884.379171][ T60] async_run_entry_fn+0x9c/0x530 [ 884.384617][ T60] process_one_work+0x9c5/0x1ba0 [ 884.390058][ T60] worker_thread+0x6c8/0xf00 [ 884.395150][ T60] kthread+0x2c1/0x3a0 [ 884.399728][ T60] ret_from_fork+0x45/0x80 [ 884.404645][ T60] ret_from_fork_asm+0x1a/0x30 [ 884.409928][ T60] [ 884.409928][ T60] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 884.417553][ T60] __mutex_lock+0x19b/0xa60 [ 884.422564][ T60] __nbd_set_size+0x2c0/0x730 [ 884.427749][ T60] nbd_start_device+0x8fd/0xd70 [ 884.433104][ T60] nbd_ioctl+0x21a/0xfd0 [ 884.437851][ T60] blkdev_ioctl+0x276/0x6d0 [ 884.442880][ T60] __x64_sys_ioctl+0x190/0x200 [ 884.448155][ T60] do_syscall_64+0xcd/0x250 [ 884.453169][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.459579][ T60] [ 884.459579][ T60] -> #3 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 884.468167][ T60] blk_mq_submit_bio+0x1fb6/0x24c0 [ 884.473784][ T60] __submit_bio+0x384/0x540 [ 884.478806][ T60] submit_bio_noacct_nocheck+0x698/0xd70 [ 884.484944][ T60] submit_bio_noacct+0x93a/0x1e20 [ 884.490487][ T60] block_read_full_folio+0x812/0xa50 [ 884.496293][ T60] filemap_read_folio+0xc6/0x2a0 [ 884.501753][ T60] filemap_get_pages+0x155f/0x1be0 [ 884.507394][ T60] filemap_read+0x3ca/0xd70 [ 884.512416][ T60] blkdev_read_iter+0x187/0x480 [ 884.517778][ T60] vfs_read+0x87f/0xbe0 [ 884.522437][ T60] ksys_read+0x12b/0x250 [ 884.527181][ T60] do_syscall_64+0xcd/0x250 [ 884.532195][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.538602][ T60] [ 884.538602][ T60] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 884.547111][ T60] down_read+0x9a/0x330 [ 884.551781][ T60] filemap_fault+0x2e0/0x2820 [ 884.556968][ T60] __do_fault+0x10a/0x490 [ 884.561808][ T60] do_pte_missing+0xebd/0x3e00 [ 884.567079][ T60] __handle_mm_fault+0x103c/0x2a40 [ 884.572699][ T60] handle_mm_fault+0x3fa/0xaa0 [ 884.577967][ T60] do_user_addr_fault+0x7a3/0x13f0 [ 884.583593][ T60] exc_page_fault+0x5c/0xc0 [ 884.588602][ T60] asm_exc_page_fault+0x26/0x30 [ 884.594045][ T60] copy_iovec_from_user+0x84/0x170 [ 884.599669][ T60] iovec_from_user.part.0+0x65/0x130 [ 884.605463][ T60] __import_iovec+0xd6/0x6d0 [ 884.610558][ T60] import_iovec+0x108/0x140 [ 884.615564][ T60] vfs_readv+0x19b/0x890 [ 884.620318][ T60] do_readv+0x297/0x340 [ 884.624997][ T60] do_syscall_64+0xcd/0x250 [ 884.630016][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.636418][ T60] [ 884.636418][ T60] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 884.643961][ T60] __might_fault+0x11b/0x190 [ 884.649067][ T60] _copy_from_user+0x29/0xd0 [ 884.654175][ T60] __blk_trace_setup+0xa8/0x180 [ 884.659639][ T60] blk_trace_ioctl+0x163/0x290 [ 884.664906][ T60] blkdev_ioctl+0x109/0x6d0 [ 884.669920][ T60] __x64_sys_ioctl+0x190/0x200 [ 884.675195][ T60] do_syscall_64+0xcd/0x250 [ 884.680206][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.686609][ T60] [ 884.686609][ T60] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 884.694427][ T60] __lock_acquire+0x249e/0x3c40 [ 884.699789][ T60] lock_acquire.part.0+0x11b/0x380 [ 884.705402][ T60] __mutex_lock+0x19b/0xa60 [ 884.710411][ T60] blk_mq_init_sched+0x42b/0x640 [ 884.715876][ T60] elevator_init_mq+0x2cd/0x420 [ 884.721232][ T60] add_disk_fwnode+0x113/0x1300 [ 884.726673][ T60] sd_probe+0xa86/0x1000 [ 884.731427][ T60] really_probe+0x23e/0xa90 [ 884.736437][ T60] __driver_probe_device+0x1de/0x440 [ 884.742244][ T60] driver_probe_device+0x4c/0x1b0 [ 884.747775][ T60] __device_attach_driver+0x1df/0x310 [ 884.753670][ T60] bus_for_each_drv+0x157/0x1e0 [ 884.759043][ T60] __device_attach_async_helper+0x1d3/0x290 [ 884.765438][ T60] async_run_entry_fn+0x9c/0x530 [ 884.770882][ T60] process_one_work+0x9c5/0x1ba0 [ 884.776339][ T60] worker_thread+0x6c8/0xf00 [ 884.781450][ T60] kthread+0x2c1/0x3a0 [ 884.786044][ T60] ret_from_fork+0x45/0x80 [ 884.790971][ T60] ret_from_fork_asm+0x1a/0x30 [ 884.796259][ T60] [ 884.796259][ T60] other info that might help us debug this: [ 884.796259][ T60] [ 884.806471][ T60] Chain exists of: [ 884.806471][ T60] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#55 [ 884.806471][ T60] [ 884.820977][ T60] Possible unsafe locking scenario: [ 884.820977][ T60] [ 884.828400][ T60] CPU0 CPU1 [ 884.833744][ T60] ---- ---- [ 884.839118][ T60] lock(&q->q_usage_counter(queue)#55); [ 884.844749][ T60] lock(&q->limits_lock); [ 884.851676][ T60] lock(&q->q_usage_counter(queue)#55); [ 884.860252][ T60] lock(&q->debugfs_mutex); [ 884.864836][ T60] [ 884.864836][ T60] *** DEADLOCK *** [ 884.864836][ T60] [ 884.872962][ T60] 4 locks held by kworker/u8:4/60: [ 884.878051][ T60] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 884.888395][ T60] #1: ffffc9000211fd80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 884.899602][ T60] #2: ffff888030f58378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 884.909941][ T60] #3: ffff8880292a00e0 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 884.920915][ T60] [ 884.920915][ T60] stack backtrace: [ 884.926781][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 884.937435][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 884.947474][ T60] Workqueue: async async_run_entry_fn [ 884.952838][ T60] Call Trace: [ 884.956100][ T60] [ 884.959015][ T60] dump_stack_lvl+0x116/0x1f0 [ 884.963684][ T60] print_circular_bug+0x419/0x5d0 [ 884.968693][ T60] check_noncircular+0x31a/0x400 [ 884.973612][ T60] ? __pfx_check_noncircular+0x10/0x10 [ 884.979059][ T60] ? lockdep_lock+0xc6/0x200 [ 884.983641][ T60] ? __pfx_lockdep_lock+0x10/0x10 [ 884.988658][ T60] __lock_acquire+0x249e/0x3c40 [ 884.993500][ T60] ? __pfx___lock_acquire+0x10/0x10 [ 884.998686][ T60] lock_acquire.part.0+0x11b/0x380 [ 885.003784][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.008886][ T60] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 885.014522][ T60] ? rcu_is_watching+0x12/0xc0 [ 885.019276][ T60] ? trace_lock_acquire+0x14e/0x1f0 [ 885.024464][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.029563][ T60] ? lock_acquire+0x2f/0xb0 [ 885.034064][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.039167][ T60] __mutex_lock+0x19b/0xa60 [ 885.043663][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.048761][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.053860][ T60] ? __pfx___mutex_lock+0x10/0x10 [ 885.058876][ T60] ? blk_queue_flag_set+0x29/0x40 [ 885.063891][ T60] ? blk_mq_init_sched+0x42b/0x640 [ 885.069010][ T60] blk_mq_init_sched+0x42b/0x640 [ 885.073945][ T60] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 885.079393][ T60] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 885.085364][ T60] ? lock_acquire+0x2f/0xb0 [ 885.089867][ T60] ? add_disk_fwnode+0x113/0x1300 [ 885.094881][ T60] elevator_init_mq+0x2cd/0x420 [ 885.099715][ T60] ? add_disk_fwnode+0x113/0x1300 [ 885.104732][ T60] add_disk_fwnode+0x113/0x1300 [ 885.109568][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.114758][ T60] sd_probe+0xa86/0x1000 [ 885.118996][ T60] ? __pfx_sd_probe+0x10/0x10 [ 885.123662][ T60] really_probe+0x23e/0xa90 [ 885.128151][ T60] __driver_probe_device+0x1de/0x440 [ 885.133435][ T60] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 885.139228][ T60] driver_probe_device+0x4c/0x1b0 [ 885.144246][ T60] __device_attach_driver+0x1df/0x310 [ 885.149603][ T60] ? __pfx___device_attach_driver+0x10/0x10 [ 885.155482][ T60] bus_for_each_drv+0x157/0x1e0 [ 885.160313][ T60] ? __pfx_bus_for_each_drv+0x10/0x10 [ 885.165668][ T60] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.170857][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 885.176651][ T60] ? __pfx___device_attach_async_helper+0x10/0x10 [ 885.183059][ T60] __device_attach_async_helper+0x1d3/0x290 [ 885.188942][ T60] ? __pfx___device_attach_async_helper+0x10/0x10 [ 885.195348][ T60] ? ktime_get+0x206/0x300 [ 885.199747][ T60] ? read_tsc+0x9/0x20 [ 885.203813][ T60] ? ktime_get+0x1ac/0x300 [ 885.208214][ T60] async_run_entry_fn+0x9c/0x530 [ 885.213142][ T60] process_one_work+0x9c5/0x1ba0 [ 885.218070][ T60] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 885.223690][ T60] ? __pfx_process_one_work+0x10/0x10 [ 885.229051][ T60] ? rcu_is_watching+0x12/0xc0 [ 885.233806][ T60] ? assign_work+0x1a0/0x250 [ 885.238383][ T60] worker_thread+0x6c8/0xf00 [ 885.242959][ T60] ? __pfx_worker_thread+0x10/0x10 [ 885.248053][ T60] kthread+0x2c1/0x3a0 [ 885.252111][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.257298][ T60] ? __pfx_kthread+0x10/0x10 [ 885.261874][ T60] ret_from_fork+0x45/0x80 [ 885.266274][ T60] ? __pfx_kthread+0x10/0x10 [ 885.270859][ T60] ret_from_fork_asm+0x1a/0x30 [ 885.275632][ T60] [ 885.279015][ T5896] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 885.290791][ T60] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 885.640215][ T5896] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 885.651420][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.662403][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.672512][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 885.685840][ T5896] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 885.695138][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.709002][ T5896] usb 1-1: config 0 descriptor?? [ 885.795399][T14933] udevd[14933]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 885.835728][T14441] udevd[14441]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 886.288615][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 886.300805][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 886.374579][ T5896] usb 1-1: USB disconnect, device number 95