last executing test programs: 2m3.309069477s ago: executing program 3 (id=474): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40015) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) close_range(r0, r4, 0x0) 2m1.723343579s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) userfaultfd(0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x800}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201f9a197c3fa22d1991014000000000001090224000100000501090400003992118456f68f4e44575cb0fc18c36201030000000921000000012207000905810300dfffffff"], 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x21a6002, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESOCT=r4, @ANYBLOB="5563157801086e567bd6b5012e09d67a5df5c1885768e81a17880d3daad942640f1790784d720206204f9a4a04b4", @ANYRESDEC, @ANYRES16]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000001c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x100010}}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) dup3(r5, r6, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000620000006206e6f9000000ebccef229eefbad344f417a2a5e9691b1605c0f09cf9891fe6a9f4131f10b1284084cc266092cc45bf67d11362b3594c73669798e0c986ad2d6851002aef76948d3efaa064e2a2bcd64aed54b0"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0xf3a, 0x0) read$char_usb(r11, &(0x7f00000004c0)=""/206, 0xce) vmsplice(r12, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) write(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) 1m58.61209977s ago: executing program 3 (id=488): connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000010000000000000000"], 0x48) splice(r2, &(0x7f0000000000), r0, &(0x7f0000000080)=0x3, 0x7, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1m56.308870491s ago: executing program 3 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000006000000008600000008000300", @ANYRES32=r7], 0x24}}, 0x0) 1m56.002771352s ago: executing program 3 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080002400000000808000140000000140900010073797a30000000000900020073797a320000000014000000"], 0x84}}, 0x0) 1m55.620264477s ago: executing program 3 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) 1m54.911557832s ago: executing program 32 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) 17.059879529s ago: executing program 0 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x9c9ff000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x300}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20080040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x18, 0x800, 0xfa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16.044670742s ago: executing program 0 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1000000d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd, 0x200}, 0x90) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8001, 0x8, 0x4}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r10, 0xc01c64a3, &(0x7f0000000100)={0x3, r12, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x4aa13d13, 0x0, 0x1, "f1b1a0017d32eb41de85b1737a872a061f30b7b731d7ae660e2514e7e0f42b6e", 0x32314d48}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r14, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 15.588244389s ago: executing program 0 (id=796): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0xb4}], 0x1}}], 0x1, 0x10002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e24, @private=0xa010100}, @ib={0x1b, 0x0, 0x2, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x2}}, 0x18) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x2}) 15.233734619s ago: executing program 0 (id=798): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, r3, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x20, r3, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r3, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r3, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLL', 0xe, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000340)={0x18, r3, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000380)=0x4, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0xec, 0x0, 0x0, 0xb3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0xa, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xba]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2000, 0x0, 0x0, 0x9, 0x2000002, 0x2], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffff52, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x3]}, 0x45c) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000003c0)={0x18, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r3, 0x1c, 0x3, 0x2}) 15.052141423s ago: executing program 0 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x200052, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) io_setup(0x10001, &(0x7f0000000180)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x80c0, 0x0) 14.003557377s ago: executing program 0 (id=805): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x29) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x2, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf3}}}, 0x3a) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 10.587441679s ago: executing program 5 (id=818): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9", 0x24, 0x2000000000000000, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.600219555s ago: executing program 4 (id=824): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x2000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x53, 0x100, 0xffff0000, 0x0, 0xc6, 0x4, 0xffff5416, 0x80, 0x10001, 0x401, 0x8, 0x6, 0x8, 0x100, 0x7346, 0x0, 0x8, 0x1ff, 0x7, 0x0, 0x7, 0x3, 0x4311, 0x1, 0x3, 0x10000, 0x2, 0x5, 0x8, 0x10, 0x9c, 0xf88a, 0x9, 0xc, 0x9, 0x0, 0x4, 0xab09, 0x3, 0x9, 0x9, 0xfffffffe, 0xa, 0xc, 0xffff, 0x7, 0x989f, 0x0, 0x7, 0x10001, 0x81, 0x3ff, 0x7fffffff, 0x8, 0xf, 0x8001, 0xfa, 0x7, 0x100, 0x9, 0x3, 0x8, 0x3, 0x401, 0x407, 0x1, 0x100, 0xe7c, 0xfffffffa, 0x38b1f242, 0x7, 0x8, 0x7, 0xfffffff8, 0xe, 0x5, 0x1, 0x10000, 0xdb, 0x4512, 0x2, 0x5, 0x2, 0x101, 0x4, 0x5, 0x40, 0x23bb, 0x58, 0x200, 0x1, 0x5, 0x1, 0x6, 0x96d, 0x7, 0x0, 0x3, 0x2f34, 0x1, 0xc, 0x1, 0xe2, 0x3, 0x6, 0x5, 0x800, 0x8d, 0x5, 0x2000000, 0x6, 0x8, 0x368, 0x8, 0x1, 0x8, 0xffffffff, 0x5, 0x7, 0x1, 0x6, 0x101, 0xe216, 0x3, 0x40, 0x0, 0xf7, 0x1, 0x81, 0x1000, 0x3, 0x1ff, 0x1, 0xdc, 0x4, 0x5, 0xc2, 0x100, 0x6, 0xfffffffa, 0x5, 0xffff0001, 0x2000, 0x7, 0xe69, 0x98, 0x3, 0x6, 0x9, 0x7, 0x7, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7, 0x1, 0x8000, 0x9, 0x1ff, 0x4, 0xa, 0x3, 0x7, 0x4, 0x9, 0xf9b4, 0xfff, 0x2, 0x7fff, 0x0, 0x200, 0x7f, 0x7ae, 0x81, 0x9, 0x8, 0x7, 0x100, 0x40, 0x37, 0x0, 0x1, 0x1, 0x8, 0xfffffffa, 0x6, 0x1, 0xda0, 0x7, 0x7f, 0x53e, 0xd, 0x7, 0x8, 0x9, 0x5, 0x4, 0x5, 0x805, 0x49, 0x9bc, 0x9, 0x7, 0x7, 0x56768, 0x2, 0x61, 0x2, 0x8, 0xa, 0x5, 0x1, 0x5, 0x0, 0x1, 0x400000, 0x1, 0x81, 0x6, 0x10, 0x7, 0x4, 0x2, 0x1, 0x101, 0x65f228b, 0xd, 0x2, 0x1, 0x5, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x8, 0x7, 0x3, 0x3, 0x0, 0x4, 0x1, 0x9, 0x7d0, 0x5, 0x10001, 0x80000001, 0xffffff01, 0x2, 0x2d7, 0x6, 0x6, 0xfffffeff, 0x1400]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8c20}, 0x3, 0xc}}]}}]}, 0x45c}}, 0x0) 9.502299312s ago: executing program 5 (id=826): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffa, 0x400600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x101480, 0x100) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.479613915s ago: executing program 4 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x400c094) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x9, 0x3}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r5 = memfd_secret(0x0) utimensat(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000002340)={0x1, 0x0, @pic={0x4, 0x2, 0x8, 0x4, 0x10, 0x80, 0x9, 0xf4, 0x5, 0xa, 0x4, 0x2, 0xfc, 0x4, 0x2, 0x65}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100013070000000000000000e0000002000000000000010000000000e0000002000000000000000000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000ff01000004d432000000ac14140000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680c0000000000000000000000000000053500000a00010000000000000000004c00120061656769733132382d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000010}, 0xa0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 9.296109426s ago: executing program 4 (id=828): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="a71800080010000000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x49) r5 = epoll_create1(0x0) r6 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)={0x20000006}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1c}}, 0x40000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000080000000800000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000002300008f13dbdc7ba5cc0943", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000100"/28], 0x50) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 8.364242987s ago: executing program 4 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000040)="b9ff03076844268cb89e14f088a847e0ffff00124000632177fbac141416e000030a94029f03032f87e589ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.285232321s ago: executing program 4 (id=832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x17f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x1, 0x1, 0x1, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "c7200f06"}, {0x5, 0x24, 0x0, 0xff46}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x4, 0x1000, 0x78}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x86, 0x24, 0x13, 0x6, "52fef37d7444321d0e63278d95ae99bcd087226f43e938259dee3e5d37f25c4dea2d4dfe0fa6d75e4f53eecd6884fd11c43056aa9a9da66a2bd0e6f39836121649b3c999559aac8ed5ffe9726c26fcd8852ecec4f1fa093bbd2c4aa18540909d3fbeb9c80a8f68f475b2462a366d5d2eef05e7f6bed43d34c45d8b502c56bc6c59c5"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x0, 0x2}, @mdlm_detail={0x97, 0x24, 0x13, 0x7, "35f4b7011ac78ca3015ddea9dad4a59a4762e5b7934a0db0c3a777889bb608a50fb8333d15073e44407b8f739203e2315d1639e2ac78c6fe722fa20a4e711628586583eaf3012e2206d8842ed70cf742b02c5fae21e2037c8ed21c9359cb3ec624391df536d914bad563f33732673aaea9120fc39134c5657963ea13851701ad67b551017367e99da379bb5ab133a98913b3ab"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xfd, 0xd, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x11c67dcbd5d725ed, 0xf, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x2, 0x25, 0xa9, 0x20, 0x8}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x3, [{0xfb, &(0x7f0000000300)=@string={0xfb, 0x3, "88ba7653c6b4d6517c98e6c093bd13cfb02a6a9dee34576471b537cac0ff7f3d148085e91af36796949dc1afb85937387631ef50a1a95edd14c6af5dfd70a6a6f75811cbdab429c537ccbc5737fb45e04c175c1850cbfcbdf200034e4fc42e65417e6a80a0856707c6f191613f8980db4ca8963a1fabecdc3cac848874779894e27b28f289c381e4ba07042b2e1572a16838b8e05a89de22bd6e9e0d053930799a7d74c8b2cc51a8718b81d6e0c5b6fd38ff15e9fcf29c0ff46ae763c8a2eaa3583e70c0d0707c438cbb2eade69f25fcd4ad7905da24101ac8c3a56b6478492231010b1f9afafe015e80b540aaa527247d0ad1737a13407441"}}, {0xec, &(0x7f0000000400)=@string={0xec, 0x3, "0475fe5f06bd8d69a1c2ee70fb2ae98917b90922670529c59e49bda294be46c18bd8c0aa34a55a1b7ff8eab245d4097fb94847a4e87a5ecd3a91cd02fbef9ebd412ef64b6f2415ff35af0a6b821cb6c2d6721f6c47d81c546ec097bc4e50b0185ae8d61ab15c26963131b1a9011e16dc6730c31f2844554620ae6aaca924ac4d3a4383c33032f12750fc9570ea9990b2bbd91071eebbf66bf5dffbf3e9b1a4f514e4d10a43075270b237874059910f345c37511eab4bd5a90f01d5d139a2b9e34145cf55936fb53bb9c148125f1d3cdc5cbf074c76a3280a1f26569b7ebfe1ab049f60bec1ff1ddcd278"}}, {0x34, &(0x7f0000000500)=@string={0x34, 0x3, "4d16ed9bed5bbc52438311b40a8d0fda648e9e21719524f9d2f9a9fbad4efe918175666e275eb560765cae946f049c5c68e8"}}]}) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB='\b']) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.144858984s ago: executing program 2 (id=833): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x8, 0x7c5, 0x1, 0x2, 0xd59f84, 0x4, 0x9, 0xb, 0x8, 0x5, 0xa, 0x200, 0x7, 0x9, 0x2b, 0x1, {0xffff945a, 0x1}, 0x3, 0xf1}}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000000000)) 7.564116482s ago: executing program 2 (id=834): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9000300fa"], 0xe) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/48, 0x30}], 0x1, 0x70000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x31, [0xbfc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') lseek(r8, 0xae7e, 0x0) preadv(r2, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x87f, 0xff, 0x1, 0x9, 0x80000000, 0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x2, 0x95, &(0x7f0000000000)=ANY=[@ANYBLOB="120110b0029970402505a1a440000102030109028300010108800f09040001020206000706240600003505240003000d240f0101010000090007008c1524120800a317a88b045e4f01000000000000000008241cfeff04010007241485460300152412f8ffa317a88b045e4f01a607c0ffcb7e392a052415e00009058107"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.058550778s ago: executing program 1 (id=836): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) dup2(r1, r0) sendto$inet6(r0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 4.964296065s ago: executing program 1 (id=837): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f0000000080)) 4.92600849s ago: executing program 1 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f00000000c0)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) close(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4.588091826s ago: executing program 5 (id=839): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000d50d000000006203000601e1dd661b58df"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r2, &(0x7f0000000040)="1c0031001a009b8a14e5f40704000000000000000001000300000000", 0x1c) 2.987695939s ago: executing program 5 (id=840): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000060052000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}) 2.972507119s ago: executing program 2 (id=841): fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x3f) syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000c800, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}], 0x1, 0x4000bb8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0xec}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14a456745bb6d4c07992bd001400010600000000"], 0x14}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x0, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x36}}, 0x74}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.802630464s ago: executing program 1 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000040)="b9ff03076844268cb89e14f088a847e0ffff00124000632177fbac141416e000030a94029f03032f87e589ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.632174397s ago: executing program 1 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004280)=@newlink={0x3c, 0x10, 0x401, 0x8000, 0xe4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24480}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 2.614705623s ago: executing program 1 (id=844): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x93, 0xdb, 0x40, 0x2013, 0x246, 0x6074, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x1, 0x1f, 0x88, 0x6c, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}]}}]}}]}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r2, 0x0, 0x880, 0xd) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r8}) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000180)={r8, 0x0, 0x9, 0x10, 0x0, [], [0x2, 0x7fff, 0x5, 0x6], [0x1, 0xc00, 0x3, 0x56de], [0x10001, 0x2]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x400, 0x2, &(0x7f0000000080)=[r3, r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x10000, 0x0, 0x5, 0x5], 0x0, 0x80000000}) 2.05587519s ago: executing program 5 (id=845): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010002eb700b2d62f7c88162f8ba06457", 0x14}], 0x1}, 0x8014) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) syz_usbip_server_init(0x2) 1.915848785s ago: executing program 2 (id=846): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000000300)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x80080400) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @val={0x6, 0x2, 0x1}, @void, @void, @void}, 0x37) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000088021100010000ff01aa6de0cffaf21705e59d879dc8ab93000108820c12182400"/46], 0x28) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) getpgid(0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x7) connect$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 1.059857237s ago: executing program 5 (id=847): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB='6'], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0xe, 0x8, 0xf, 0x18, @local, @empty, 0x0, 0x8, 0x5}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r4}) syz_usb_connect(0x5, 0x3d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x2, 0x6f, 0xda, 0xd, 0x0, [@generic={0x7, 0x5, "f71f22810b"}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r2) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x1492ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.024509161s ago: executing program 4 (id=848): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x1, 0xed9, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x6c, 0xa5, 0x3b, 0xff, 0x33f8, 0x104, 0xe684, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec7, 0x4, 0x7, 0x5, 0x40, 0x82, [{{0x9, 0x4, 0x4, 0x2, 0x5, 0x97, 0x29, 0x4, 0xaa, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x5, 0x4, "4da0b4"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0xd9, 0x3, 0x4, 0x2}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x4, 0x7, "6e1888b7e60f"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x3, 0x40, "ecba76b2735e"}]}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x8, 0x1, 0x10, [@generic={0x29, 0x10, "2b64b2bfbedbc6ff9a0bbc0c581764445d68cd08c4837f5e9e4e728cbf860a67673611e3fe4629"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x6, 0xa, [@generic={0xf8, 0x9, "36b50c1a49ed726d2cfd43504463e52068cfcf5dd7e172bbceb3a162927ba751771e78356eb229dc764ae931c4d27e1c957965cadae79ddbac5680a2386ea48f8cdf1eedcc34a1952d293b8751231e78b5cec5f971e2e6db162f12f06e0ba3c07a9985ddfb1447ef0b4390b95bbc152a9b776b99ab206c32397363690f3c703c0b2c8ab14e67bffe365afee46dd02f019d4e777ab17c68e443fbb913acc3201dd420bd28e54ad91312fc97a050c76f9d394f2ae4cf11c9073615aacc308487d9cee507ea6e2c34ba88d53afdcbeaf651e37eee235a9503275009fde946cfb6c0ba9c9810106e0fe6ef978b97742089decb4c5d2f2356"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2, 0x7, 0x1, [@generic={0x3f, 0x22, "a82dfa98365d223701700e28c3ebfb57ff386be954da5ef916af63f0c02539ed38ea8901e54e513eb71e930dc43355fb8b706290a54cda38ad7cbbca45"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xe4, 0x0, 0x4, [@generic={0xc9, 0xa, "8379f390d870cbf514f9c1210f11b8b591b62101a2b26c7a9a83b0f3a7be731953721cc03d6215fbecb54a2b3a943af9af0bf3f968484915e3935b3d7254b6e261001730513fbd436d86f7d952adf1f31834875452088c1d5d1192b3c745b27b4640f8e30c59316282b21e84303adfcd3045ce4d85777cb88272d92faf246cf978149eebe3c3d4b229e21c5f521f03dc82adc16374f29a007aff36f74ac2773304dfeac77c4aa7ff0e4ed08e2e3862ff6d6e0636479ab6086504bf7fc4309418f9ae1cd42424c3"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x10, 0x9, 0x6, [@generic={0x54, 0x9, "2e0346f10cd596fabfd329cd1615983791fd1860d468ea217b7d87362f7add5c58925fe0244ed0029688093e3ba6ddb2d56d778fb3f1243646aee1c09f38af3b19dd1de345c53d72ead28f035c87ddd39060"}]}}]}}, {{0x9, 0x4, 0x10, 0x0, 0x5, 0xff, 0xff, 0xff, 0xe, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x5, "1c10c90e"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xa31, 0x7, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@acm={0x4, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0x6, 0x2, 0x40, 0x0, 0x4, 0x2, [@generic={0x20, 0xa, "21a8cf232fc0d2e0abc77775ebaf164fc70938838de8208254e61923dd4a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xcc, 0x6, 0xe, [@generic={0x66, 0x9, "73a00fb9b51b17026efbd93d45cf073500cb5de4c26aab06bff88684c79aad165a64a8cce98bceba205c0c384fd231bcffd40bbc8a689f1859c14640795a0a00928b9207022373b3ed6225fbc742056ba8b8508a1345ed57545e340fb88882de7d926937"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0x40, 0x5, 0x0, [@generic={0x51, 0x10, "17f951152abbcb3bff66f00367e85ed997d4993a1bbf6281047f00068316de3d2777ccf0b5b397a65b78fa51ee9d70b5384e982d3950a49bd48349401ed76f70abf5347dc835822f6ab54a6460a686"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x10, 0xb, [@generic={0x89, 0xb, "06d06efbf9fe1aae5de3b75d4fa43ba9b054f55208d3434418f5a6a93cd03aa71f54a2b8908d64fa020fcc464b40bf39512689cbb9a782ad54237cf6b7a2e45257ee0a50afa699a621508844c1971af6b519d8a05a7e59d194211b11415f19909f38937257f6f68fdffeff6bd4e525079078122d9bce471bef7d3bc78254ce5d922889721f7b64"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x1f7, 0x4, 0x7, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x93, 0x2, 0xb, 0x7e, 0x59, 0xcb, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "55e8ab6e"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x5, 0x1, 0xf6}, [@dmm={0x7, 0x24, 0x14, 0x727, 0x389}]}], [{{0x9, 0x5, 0x3, 0x8, 0x268, 0x2, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6}]}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x7f, 0x6, 0x7, [@generic={0x5c, 0x2, "dc7d637a8df7c1ecc3c06916daa51d8d1540addbb228acc4bb67c6953d752b69cb785ba3db7a39f50dec5b7dd16bbecaeef11f24fbe17f5ba5eaaf3374ddc5dbeaaa2e1d5cbe207015ebc1cc0ea60e5267e311f325ac31b5b344"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x7f, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4b, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x6, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x2c69}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x1, 0x1, 0x5, [@generic={0x60, 0x4, "89b2726c12b34342b6cb0df8629e23b79c65c7446409ef88f8120763eaed690c950ef0de87f9d1b90a0caad514f74417e0f9545e5f7cd040b11f697990cd19741b27023d829c897e51aef397c820d8a28e4c9e7dcd76a176b62b0e4d057d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xfff7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x6f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xd}, @generic={0xfd, 0x1, "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"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x208, 0x4, 0x8, 0x7, [@generic={0x100, 0x21, "64b79f082b7c514d0fda937cad467f6bcca0efa93328becff39ba509b9954b8a8ed26103c56f17429e93b393f70af00a08e27502f8603559882c971ed1e57f5aae2f7e7039f296bc2c993f68759fe9e4fa85e8a992ecd77feacdbb689f333cbb6b4e084be68bf4fb1ef7c231e6584d9b686824e48d912b1c7adb8512534f525d5e43969da7b83483e5835ad99d0be04faccff506c97e8a41079b5ed4d1996636bd8bb4425ac9cc7bef89c2b51715a7936aeb846dae4354ba2dc066ce9184b74609362089953b6a7b34bbbd459c9df9d1599752e16fcb2a43875a7edc7a23c8a6b9fc2a821111cad0a052f38628fb061e7cd3796a9cfde89fde80ba21dfbd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfffc}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xd, 0x82, 0x4, [@generic={0xce, 0x5, "f2eac6d52d00205d014078a4888622a7f84128ffb191652d4411c2bca86d0ce5fcb31208a67447844189b513d9ef12525679babaf7d499e1aaef6a413f8e53f9aa4da064ebac429efacc98b4d0822d30b84128900e1037610b97d2808c2159fec71a59b79ccca76e50dce5039d2ef768973c63a14615e3a993feba67ff3347f93560da17c70e5428e84054986b07e5806b45a278e20f5c015be6f8146dc57a404aaeb24eb2c209e5141e5cf81373a2c23a4949f3d9b794d4f82691ace1a1867e2da8f2e86d545f810ffc08a2"}]}}, {{0x9, 0x5, 0xb, 0x14, 0x0, 0x8, 0x0, 0x1, [@generic={0x58, 0xe, "671292c2036d29d118b35bcf301934cf840b63641e7d847773f4e5856cdfe7956be89013d9a74ef639ea96d4dc93a99b55374cf338bfa0cd423e84e0a926785ac7dff0b8348312e2a90f8313f9226d7382c6a47453eb"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x6, 0xa7, 0x7, [@generic={0xc9, 0x21, "f6dec9ef1cf9cbaf1f7ba145e72cec7dc0be7be421c4f93fcdaf6ec8b2d23b3cfb39ec98a7bb5fa5cc08dbc6d0b2fc5bce652ef9250495c6d17d811c09cffb776e191c4446c12b1e547d82a9af0d3e6f04063976558ea651bee48d506cb1c2b40371c5e8772728c8f9332582fe8c6070701e1c35925a1417a5a61a2ab6ffc5cf0f783c94e838ea0862695bc0f36e1afd073d83d863b89975ccb9374b5e6a2b3c1c766a6a40fc7178c7bc14ad1045d118b7bfd8268653c71e96058f92f6831b1eadddb6245ba8ad"}, @generic={0x7b, 0x4, "b1ba5be560f388d24255b78a4a782e9ead209a82280d0a46f678c5a1a0f66e163e6a485cece8e1bed10aa327225f056354d6e97c2722ad95bf30a86570ffaf382d4a9c5210745d8381c3f86bb3983ea5a638b89214c6cbb364810d3ec2c15d1fdca1e6e62e37a287f8599c8b09f688f324ebdd75655a309c68"}]}}]}}, {{0x9, 0x4, 0x3f, 0x2, 0xc, 0x78, 0x5a, 0xa7, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x2}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x4, 0xa, 0x4, 0x8], 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xf2, 0xa9, "17"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x7, 0x5, "a8d6"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6d, 0x2}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x84, 0x3, "a73fd9231113"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, "dd39"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x0, "71d2abb2"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0xfc, "3d3418d6"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0x2, 0x7, [@generic={0x20, 0x9, "982b225f2c0facd3dfea57a49c5fab78525f3513df32f8fa01bd7d47bd8c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x0, 0xf7, [@generic={0x85, 0x24, "fec5a068164c537dcdb5118aad30756467781c903a068107a51baac3841f8c0cc19dbc692b574ba653ac9d0faffdc7708c41168fe97242f11518f2ad3fbaa6639e51d41ccbfbe9863038cc9be84f75a57cb7215176f6f01f54845d7a7cf8b47dc23de06194ec3119627ce64e7d0d3fc68f68a6e448a40f4e1e90356629a45a5ee5020b"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xff, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0xd}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x3, 0x3, 0xc0, [@generic={0x22, 0x23, "d444c51c770297625d7c85096f5f40ff0bb6f776cfd04ca4fcc3f3a0f608947d"}]}}, {{0x9, 0x5, 0x5, 0x3, 0xe17e99f439446796, 0x5, 0x1, 0x0, [@generic={0x70, 0x31, "fb702a884a464dbba72776feb919a5b63d9c6ffe31d35664ad088548773432b3655a2785486982290de00f0383a35a927957e74abd1134a139264a4433d7c73d64e0077dba7653f4d5e48bbc70ed759a86d3577a7ce235262fc156ac998cf88d9e93a93bd7cbd9ad8d31af12905e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x78, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0xa8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe7, 0x523}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x40, 0x9e, 0x5, [@generic={0x10, 0x2, "8fffc64336d8f4a98f18b683f208"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x8a, 0x7f, [@generic={0xac, 0xe, "cc9b37bd0f38b0a57c0b867886d6a218a20eed4def1ab70e5df0d976f37ed395ee7237fc8b358d587314638517ad4d7bbf31c350dbb4eec18391d006c187fba71868ccd31b231548081d814f6485dc8e3098657bc1b4835bd003bc1ea42723f59f9a668b585170f5e445c1cdcb735968db1c09150661aa8e221a31daf976842e48c02c008ce243c335d74900bb2af3bf31474ae615fdfa5ac35f7f80e2b6aa73a990d8fc366c193b77a3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x4, 0xb7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0x8, 0x75, [@generic={0x78, 0xb, "1ad04b7a27955e38f0922d34e5c79822c5bd49c00073fefa7418b8223782da6c5cba2ed413fb63e876ee0e89d9d20e9c2340294188ff2f8a2ac937944be03c32a5defc8d4f900be88522fdc165cc93e97259ad57a43f38e8d850ac2905ec36a00632f95c290421b75318bfb783b95a90a42a651339a9"}, @generic={0xb4, 0xc, "c736fe8e7cdd0d67879d9d40e10043d9ad7a1d1e37b5fcec473e9aa779a20dd384c662cb9c648297d2ef23c288529214b7301b853ca58a538679ebbeda804b1a65f719ec0fb012b1427a431c3a1a4ca932f5ccb6ea404308d0335fc385d46eea799612e5a5a633184a92cb2f316f82da1d5ccb36b973c9db87cb104790cfae534f3f676732d8cc213111622bd0b600a923bd8ce11482521b3eee51a6151f3ca19d6e2d1630e78200ffd7c38528350358714a"}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xf0, 0x3, 0xc, 0x8, 0x2}, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="050f160003071002087204000a1003021b000e090800bef4dbebc116e34a0a5e368820b61f83fa323608e1ed7a496200f64b41148a05a9edba7ffb4221e9a01813d6b4ec4b35826d3c07fdba96a9"], 0x1, [{0x3f, &(0x7f0000000080)=@string={0x3f, 0x3, "1124d60c16acd7eae1a3204218e6d95081c82bba27b7a325d23f544b27a3a97afbffaa6d4395b37722f85c1d6fa5a48ad216ecf1192e488c25f291ef02"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 307.293293ms ago: executing program 2 (id=849): r0 = socket(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000bc0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffecd, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 2 (id=850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0xc2) openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000140012a93f6b43c17530000a00a51b6fae959740"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={r2, 0x0, 0xee01}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x4) kernel console output (not intermixed with test programs): dv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.842959][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.890198][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.948609][ T6479] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 171.981196][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.994631][ T6479] em28xx 1-1:0.0: board has no eeprom [ 172.015951][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.054351][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.070841][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.082913][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.093156][ T6479] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.240021][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.249362][ T6479] em28xx 1-1:0.0: dvb set to bulk mode. [ 172.257363][ T4956] em28xx 1-1:0.0: Binding DVB extension [ 172.264009][ T6902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.284597][ T6479] usb 1-1: USB disconnect, device number 8 [ 172.315269][ T6479] em28xx 1-1:0.0: Disconnecting em28xx [ 172.336762][ T6902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.373570][ T6902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.579891][ T6902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.605737][ T9] gspca_cpia1: usb_control_msg 02, error -110 [ 172.619870][ T9] gspca_cpia1: usb_control_msg 05, error -32 [ 172.630454][ T9] gspca_cpia1: usb_control_msg 05, error -32 [ 172.638770][ T9] gspca_cpia1: usb_control_msg 05, error -32 [ 172.836251][ T9] gspca_cpia1: usb_control_msg 05, error -32 [ 172.849256][ T9] gspca_cpia1: usb_control_msg 04, error -32 [ 172.855042][ T4956] em28xx 1-1:0.0: Registering input extension [ 172.971806][ T6479] em28xx 1-1:0.0: Closing input extension [ 172.995473][ T6479] em28xx 1-1:0.0: Freeing device [ 173.007873][ T9] gspca_cpia1: usb_control_msg 04, error -32 [ 173.589319][ T29] audit: type=1400 audit(1731307963.429:500): avc: denied { execute_no_trans } for pid=7294 comm="syz.3.350" path="/67/file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.589454][ T9] gspca_cpia1: usb_control_msg 04, error -32 [ 173.632722][ T9] gspca_cpia1: usb_control_msg 04, error -32 [ 173.639457][ T9] cpia1 2-1:0.0: probe with driver cpia1 failed with error -32 [ 173.713312][ T7293] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 173.871338][ T5924] usb 2-1: USB disconnect, device number 14 [ 174.020546][ T7313] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 174.040100][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.141038][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.208113][ T7319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7319 comm=syz.3.354 [ 174.229745][ T2113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.243308][ T2113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.259859][ T29] audit: type=1400 audit(1731307964.419:501): avc: denied { read write } for pid=7317 comm="syz.3.354" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 174.283459][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.396724][ T29] audit: type=1400 audit(1731307964.419:502): avc: denied { open } for pid=7317 comm="syz.3.354" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 174.464160][ T29] audit: type=1400 audit(1731307964.629:503): avc: denied { mount } for pid=6902 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.006005][ T29] audit: type=1400 audit(1731307964.629:504): avc: denied { mounton } for pid=6902 comm="syz-executor" path="/root/syzkaller.FrLVq4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 175.032675][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.412199][ T29] audit: type=1400 audit(1731307965.579:505): avc: denied { ioctl } for pid=7345 comm="syz.2.360" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.437532][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.601448][ T7360] Bluetooth: MGMT ver 1.23 [ 176.439235][ T29] audit: type=1400 audit(1731307966.569:506): avc: denied { write } for pid=7355 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.150261][ T7371] syz.0.362: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.168869][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.0.362 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 177.179582][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 177.189733][ T7371] Call Trace: [ 177.193028][ T7371] [ 177.195941][ T7371] dump_stack_lvl+0x16c/0x1f0 [ 177.200959][ T7371] warn_alloc+0x24d/0x3a0 [ 177.205301][ T7371] ? __pfx_warn_alloc+0x10/0x10 [ 177.210156][ T7371] ? __get_vm_area_node+0x190/0x2d0 [ 177.215355][ T7371] ? __get_vm_area_node+0x1bc/0x2d0 [ 177.220554][ T7371] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 177.226545][ T7371] ? xt_alloc_entry_offsets+0x3a/0x60 [ 177.231932][ T7371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.238246][ T7371] ? trace_kmalloc+0x2d/0xe0 [ 177.242821][ T7371] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 177.248541][ T7371] ? xt_alloc_entry_offsets+0x3a/0x60 [ 177.254116][ T7371] __kvmalloc_node_noprof+0x14f/0x1a0 [ 177.259512][ T7371] ? xt_alloc_entry_offsets+0x3a/0x60 [ 177.264894][ T7371] xt_alloc_entry_offsets+0x3a/0x60 [ 177.270103][ T7371] translate_table+0x22e/0x1710 [ 177.275045][ T7371] ? __might_fault+0x13b/0x190 [ 177.279820][ T7371] ? __pfx_lock_release+0x10/0x10 [ 177.284841][ T7371] ? trace_lock_acquire+0x14a/0x1d0 [ 177.290067][ T7371] ? __pfx_translate_table+0x10/0x10 [ 177.295371][ T7371] ? __might_fault+0xe3/0x190 [ 177.300088][ T7371] do_ipt_set_ctl+0x605/0xc30 [ 177.304769][ T7371] ? trace_contention_end+0xea/0x140 [ 177.310072][ T7371] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 177.315309][ T7371] ? __pfx___mutex_lock+0x10/0x10 [ 177.320359][ T7371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.326548][ T7371] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 177.332644][ T7371] nf_setsockopt+0x8a/0xf0 [ 177.339161][ T7371] ip_setsockopt+0xcb/0xf0 [ 177.343589][ T7371] tcp_setsockopt+0xa4/0x100 [ 177.348177][ T7371] smc_setsockopt+0x1b4/0xa00 [ 177.352938][ T7371] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.358906][ T7371] ? __pfx_smc_setsockopt+0x10/0x10 [ 177.364090][ T7371] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 177.369899][ T7371] ? selinux_socket_setsockopt+0x6a/0x80 [ 177.375527][ T7371] ? __pfx_smc_setsockopt+0x10/0x10 [ 177.380725][ T7371] do_sock_setsockopt+0x222/0x480 [ 177.385745][ T7371] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 177.391369][ T7371] ? __rcu_read_unlock+0x2b4/0x580 [ 177.396564][ T7371] ? fdget+0x176/0x210 [ 177.400723][ T7371] __sys_setsockopt+0x1a4/0x270 [ 177.405582][ T7371] ? __pfx___sys_setsockopt+0x10/0x10 [ 177.410941][ T7371] ? rcu_is_watching+0x12/0xc0 [ 177.415755][ T7371] __x64_sys_setsockopt+0xbd/0x160 [ 177.420846][ T7371] ? do_syscall_64+0x91/0x250 [ 177.425519][ T7371] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.430792][ T7371] do_syscall_64+0xcd/0x250 [ 177.435286][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.441513][ T7371] RIP: 0033:0x7fab7f77e719 [ 177.445911][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.465859][ T7371] RSP: 002b:00007fab805b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.474348][ T7371] RAX: ffffffffffffffda RBX: 00007fab7f936130 RCX: 00007fab7f77e719 [ 177.482494][ T7371] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 177.490448][ T7371] RBP: 00007fab7f7f139e R08: 00000000000002a0 R09: 0000000000000000 [ 177.498595][ T7371] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000000 [ 177.506565][ T7371] R13: 0000000000000000 R14: 00007fab7f936130 R15: 00007ffd981b01c8 [ 177.514534][ T7371] [ 177.518406][ T7371] Mem-Info: [ 177.521910][ T7371] active_anon:11326 inactive_anon:0 isolated_anon:0 [ 177.521910][ T7371] active_file:11365 inactive_file:38487 isolated_file:0 [ 177.521910][ T7371] unevictable:768 dirty:257 writeback:0 [ 177.521910][ T7371] slab_reclaimable:11084 slab_unreclaimable:99967 [ 177.521910][ T7371] mapped:25416 shmem:7160 pagetables:890 [ 177.521910][ T7371] sec_pagetables:0 bounce:0 [ 177.521910][ T7371] kernel_misc_reclaimable:0 [ 177.521910][ T7371] free:1284359 free_pcp:2883 free_cma:0 [ 177.567514][ T7371] Node 0 active_anon:45304kB inactive_anon:0kB active_file:45360kB inactive_file:153872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101616kB dirty:1024kB writeback:0kB shmem:27104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:3560kB sec_pagetables:0kB all_unreclaimable? no [ 177.600894][ T7371] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 177.632702][ T7371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.660839][ T7371] lowmem_reserve[]: 0 2461 2461 0 0 [ 177.666069][ T7371] Node 0 DMA32 free:1226024kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:45268kB inactive_anon:0kB active_file:45360kB inactive_file:153560kB unevictable:1536kB writepending:1024kB present:3129332kB managed:2549172kB mlocked:0kB bounce:0kB free_pcp:7420kB local_pcp:6956kB free_cma:0kB [ 177.751071][ T7371] lowmem_reserve[]: 0 0 0 0 0 [ 177.755811][ T7371] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 177.782610][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.790414][ T7371] lowmem_reserve[]: 0 0 0 0 0 [ 177.795185][ T7371] Node 1 Normal free:3896048kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:4100kB free_cma:0kB [ 177.824530][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.830942][ T7371] lowmem_reserve[]: 0 0 0 0 0 [ 177.835648][ T7371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.848333][ T7371] Node 0 DMA32: 105*4kB (UME) 1*8kB (E) 3*16kB (ME) 362*32kB (UME) 338*64kB (UME) 47*128kB (UME) 32*256kB (UME) 30*512kB (UME) 21*1024kB (UME) 5*2048kB (UME) 276*4096kB (UM) = 1225500kB [ 177.866759][ T7371] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 177.878591][ T7371] Node 1 Normal: 198*4kB (UME) 77*8kB (UME) 47*16kB (UE) 214*32kB (UE) 97*64kB (UME) 25*128kB (UME) 15*256kB (UME) 12*512kB (UME) 5*1024kB (UM) 6*2048kB (UE) 940*4096kB (M) = 3896048kB [ 177.897450][ T7371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.907025][ T7371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 177.916346][ T7371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.926114][ T7371] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 177.935727][ T7371] 57012 total pagecache pages [ 177.940384][ T7371] 0 pages in swap cache [ 177.944561][ T7371] Free swap = 124580kB [ 177.948725][ T7371] Total swap = 124996kB [ 177.952898][ T7371] 2097051 pages RAM [ 177.956687][ T7371] 0 pages HighMem/MovableOnly [ 177.961586][ T7371] 428036 pages reserved [ 177.965751][ T7371] 0 pages cma reserved [ 178.120021][ T7383] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "@" [ 178.883696][ T7385] netlink: 'syz.4.364': attribute type 10 has an invalid length. [ 180.695412][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 181.012252][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 181.018364][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 181.024480][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 182.033686][ T29] audit: type=1400 audit(1731307973.198:507): avc: denied { mounton } for pid=7420 comm="syz.2.374" path="/3/file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 182.057885][ T7421] kAFS: No cell specified [ 182.448323][ T7439] program syz.2.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.860857][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.617949][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 184.625740][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.637560][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.660800][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.786508][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.801431][ T9] usb 3-1: config 0 descriptor?? [ 185.513671][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 185.519800][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 185.618508][ T9] usb 3-1: USB disconnect, device number 7 [ 185.946002][ T7478] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 186.746415][ T29] audit: type=1400 audit(1731307978.908:508): avc: denied { mount } for pid=7497 comm="syz.2.392" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 186.782139][ T29] audit: type=1400 audit(1731307978.948:509): avc: denied { search } for pid=7497 comm="syz.2.392" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.805385][ T29] audit: type=1400 audit(1731307978.948:510): avc: denied { setattr } for pid=7497 comm="syz.2.392" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.827398][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.838281][ T29] audit: type=1400 audit(1731307978.958:511): avc: denied { name_connect } for pid=7497 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 186.988011][ T29] audit: type=1400 audit(1731307979.148:512): avc: denied { unmount } for pid=6902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 187.477731][ T7510] FAULT_INJECTION: forcing a failure. [ 187.477731][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 187.499529][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.2.395 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 187.510163][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.520236][ T7510] Call Trace: [ 187.523528][ T7510] [ 187.526469][ T7510] dump_stack_lvl+0x16c/0x1f0 [ 187.531174][ T7510] should_fail_ex+0x497/0x5b0 [ 187.535872][ T7510] ? fs_reclaim_acquire+0xae/0x150 [ 187.541005][ T7510] should_failslab+0xc2/0x120 [ 187.545801][ T7510] __kmalloc_node_noprof+0xd1/0x430 [ 187.551019][ T7510] ? qdisc_alloc+0xbb/0xc50 [ 187.555586][ T7510] qdisc_alloc+0xbb/0xc50 [ 187.559950][ T7510] ? _raw_read_unlock+0x28/0x50 [ 187.564846][ T7510] qdisc_create+0xcf/0x1100 [ 187.569455][ T7510] ? lock_acquire.part.0+0x11b/0x380 [ 187.574766][ T7510] ? __pfx_qdisc_create+0x10/0x10 [ 187.579815][ T7510] tc_modify_qdisc+0x4d8/0x1c40 [ 187.584687][ T7510] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.590021][ T7510] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.595342][ T7510] rtnetlink_rcv_msg+0x3c7/0xea0 [ 187.600314][ T7510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.605815][ T7510] netlink_rcv_skb+0x16b/0x440 [ 187.610606][ T7510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.616299][ T7510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.621662][ T7510] ? netlink_deliver_tap+0x1ae/0xd90 [ 187.627043][ T7510] netlink_unicast+0x53c/0x7f0 [ 187.631871][ T7510] ? __pfx_netlink_unicast+0x10/0x10 [ 187.637273][ T7510] netlink_sendmsg+0x8b8/0xd70 [ 187.642157][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.647477][ T7510] ____sys_sendmsg+0xaaf/0xc90 [ 187.652275][ T7510] ? copy_msghdr_from_user+0x10b/0x160 [ 187.657761][ T7510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.663081][ T7510] ? __pfx___lock_acquire+0x10/0x10 [ 187.668305][ T7510] ___sys_sendmsg+0x135/0x1e0 [ 187.673019][ T7510] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.678248][ T7510] ? lock_acquire+0x2f/0xb0 [ 187.682777][ T7510] ? __fget_files+0x40/0x3f0 [ 187.687405][ T7510] ? fdget+0x176/0x210 [ 187.691515][ T7510] __sys_sendmsg+0x117/0x1f0 [ 187.696123][ T7510] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.701342][ T7510] ? __fget_files+0x244/0x3f0 [ 187.706067][ T7510] do_syscall_64+0xcd/0x250 [ 187.710670][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.716587][ T7510] RIP: 0033:0x7fb79917e719 [ 187.721031][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.740657][ T7510] RSP: 002b:00007fb799f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.749203][ T7510] RAX: ffffffffffffffda RBX: 00007fb799335f80 RCX: 00007fb79917e719 [ 187.757291][ T7510] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 187.765287][ T7510] RBP: 00007fb799f43090 R08: 0000000000000000 R09: 0000000000000000 [ 187.773286][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.781277][ T7510] R13: 0000000000000000 R14: 00007fb799335f80 R15: 00007ffd9d94e378 [ 187.789358][ T7510] [ 188.665481][ T29] audit: type=1400 audit(1731307980.248:513): avc: denied { create } for pid=7524 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.696859][ T29] audit: type=1400 audit(1731307980.248:514): avc: denied { bind } for pid=7524 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.726161][ T29] audit: type=1400 audit(1731307980.248:515): avc: denied { write } for pid=7524 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.960876][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.175153][ T7546] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 189.492649][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 189.500446][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 189.512699][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 189.530889][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.547292][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 189.560003][ T8] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 189.570640][ T8] usb 4-1: Product: syz [ 189.574898][ T8] usb 4-1: Manufacturer: syz [ 189.579617][ T8] usb 4-1: SerialNumber: syz [ 189.596461][ T7534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.636042][ T8] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 189.972827][ T7545] dccp_close: ABORT with 4438 bytes unread [ 190.125944][ T29] audit: type=1400 audit(1731307982.915:516): avc: denied { accept } for pid=7545 comm="syz.4.402" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 190.838485][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.233655][ T7584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.407'. [ 191.255355][ T5908] usb 5-1: device descriptor read/64, error -71 [ 191.944500][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 191.955982][ T9] usb 4-1: USB disconnect, device number 11 [ 191.999632][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 192.097769][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.502584][ T5908] usb 5-1: device descriptor read/64, error -71 [ 192.618311][ T5908] usb usb5-port1: attempt power cycle [ 192.856135][ T7594] netlink: 'syz.1.411': attribute type 4 has an invalid length. [ 193.000389][ T29] audit: type=1400 audit(1731307986.165:517): avc: denied { create } for pid=7597 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 193.040894][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.111295][ T5908] usb 5-1: device descriptor read/8, error -71 [ 193.182063][ T6479] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.081061][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.092723][ T7611] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 194.141658][ T7614] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 194.210781][ T6479] usb 3-1: Using ep0 maxpacket: 16 [ 194.217766][ T6479] usb 3-1: config 0 has no interfaces? [ 194.294614][ T5908] usb 5-1: device not accepting address 12, error -71 [ 194.307489][ T5908] usb usb5-port1: unable to enumerate USB device [ 194.331382][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337816][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.421450][ T6479] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 194.431059][ T6479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.442150][ T6479] usb 3-1: config 0 descriptor?? [ 195.698573][ T6479] usb 3-1: string descriptor 0 read error: -71 [ 195.717624][ T6479] usb 3-1: USB disconnect, device number 8 [ 197.116353][ T29] audit: type=1400 audit(1731307990.285:518): avc: denied { ioctl } for pid=7644 comm="syz.1.427" path="socket:[14869]" dev="sockfs" ino=14869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.316809][ T7650] FAULT_INJECTION: forcing a failure. [ 197.316809][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 197.370867][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.1.429 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 197.381521][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 197.391602][ T7650] Call Trace: [ 197.394882][ T7650] [ 197.397827][ T7650] dump_stack_lvl+0x16c/0x1f0 [ 197.402553][ T7650] should_fail_ex+0x497/0x5b0 [ 197.407254][ T7650] ? fs_reclaim_acquire+0xae/0x150 [ 197.412392][ T7650] should_failslab+0xc2/0x120 [ 197.417119][ T7650] __kmalloc_node_noprof+0xd1/0x430 [ 197.422337][ T7650] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 197.427853][ T7650] __kvmalloc_node_noprof+0xad/0x1a0 [ 197.433180][ T7650] io_uring_setup+0x9b8/0x3750 [ 197.438083][ T7650] ? __pfx_io_uring_setup+0x10/0x10 [ 197.443315][ T7650] ? ksys_write+0x1ad/0x260 [ 197.447838][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 197.453112][ T7650] __x64_sys_io_uring_setup+0x98/0x140 [ 197.458613][ T7650] do_syscall_64+0xcd/0x250 [ 197.463139][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.469080][ T7650] RIP: 0033:0x7f3ea497e719 [ 197.473508][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.493136][ T7650] RSP: 002b:00007f3ea5841038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 197.501570][ T7650] RAX: ffffffffffffffda RBX: 00007f3ea4b35f80 RCX: 00007f3ea497e719 [ 197.509554][ T7650] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 00000000000075e5 [ 197.517540][ T7650] RBP: 00007f3ea5841090 R08: 0000000000000000 R09: 0000000000000000 [ 197.525519][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.533504][ T7650] R13: 0000000000000000 R14: 00007f3ea4b35f80 R15: 00007ffd0bdb89b8 [ 197.541511][ T7650] [ 198.423539][ T7661] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 198.435258][ T7661] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.431'. [ 198.445084][ T7661] netlink: 177 bytes leftover after parsing attributes in process `syz.0.431'. [ 198.512591][ T29] audit: type=1400 audit(1731307991.685:519): avc: denied { mounton } for pid=7655 comm="syz.0.431" path="/proc/321/task" dev="proc" ino=14971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.710811][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 198.789414][ T29] audit: type=1400 audit(1731307991.955:520): avc: denied { write } for pid=7655 comm="syz.0.431" name="task" dev="proc" ino=14971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.860855][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 198.868439][ T8] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 198.877890][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.886659][ T8] usb 4-1: SerialNumber: syz [ 198.889677][ T29] audit: type=1400 audit(1731307991.995:521): avc: denied { add_name } for pid=7655 comm="syz.0.431" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.925869][ T8] usb 4-1: config 0 descriptor?? [ 198.984522][ T29] audit: type=1400 audit(1731307991.995:522): avc: denied { create } for pid=7655 comm="syz.0.431" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 199.116956][ T29] audit: type=1400 audit(1731307991.995:523): avc: denied { associate } for pid=7655 comm="syz.0.431" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.157646][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.171124][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.556445][ T4956] usb 4-1: USB disconnect, device number 12 [ 200.603843][ T7684] hugetlbfs: syz.3.438 (7684): Using mlock ulimits for SHM_HUGETLB is obsolete [ 200.660790][ T29] audit: type=1400 audit(1731307993.815:524): avc: denied { ioctl } for pid=7685 comm="syz.4.439" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.888622][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.442'. [ 200.891319][ T7683] delete_channel: no stack [ 200.900881][ T29] audit: type=1400 audit(1731307994.055:525): avc: denied { setopt } for pid=7683 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.924237][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.441'. [ 201.770018][ T7709] netlink: 176 bytes leftover after parsing attributes in process `syz.0.446'. [ 201.838254][ T29] audit: type=1400 audit(1731307995.005:526): avc: denied { getopt } for pid=7711 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.026496][ T7715] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 203.699592][ T7730] binder: 7728:7730 ioctl c00c620f 20000240 returned -22 [ 204.117472][ T29] audit: type=1400 audit(1731307997.175:527): avc: denied { setopt } for pid=7731 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.137613][ T29] audit: type=1400 audit(1731307997.175:528): avc: denied { write } for pid=7731 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.263950][ T7735] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 205.468904][ T7715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 206.210974][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.481036][ T4956] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.492251][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.504049][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.531046][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.556295][ T9] usb 2-1: config 0 descriptor?? [ 206.651422][ T4956] usb 3-1: Using ep0 maxpacket: 16 [ 206.667541][ T4956] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 206.683701][ T4956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 206.737327][ T4956] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 206.757898][ T4956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.781276][ T4956] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 206.785740][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 206.805573][ T4956] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 206.813599][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input11 [ 206.820693][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.859280][ T4956] usb 3-1: Product: syz [ 206.867941][ T4956] usb 3-1: Manufacturer: syz [ 206.879336][ T4956] usb 3-1: SerialNumber: syz [ 206.899414][ T4956] usb 3-1: config 0 descriptor?? [ 206.914595][ T7759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 206.967800][ T4956] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 206.983220][ T4956] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 206.999736][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 207.121706][ T4956] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 207.228370][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 207.794531][ T5909] usb 2-1: USB disconnect, device number 15 [ 207.835482][ T29] audit: type=1400 audit(1731308000.995:529): avc: denied { mount } for pid=7757 comm="syz.2.460" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 209.209392][ T29] audit: type=1400 audit(1731308002.375:530): avc: denied { write } for pid=7793 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.069872][ T9] usb 3-1: USB disconnect, device number 9 [ 211.470287][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 211.751205][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 211.810776][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.890806][ T8] usb 4-1: device descriptor read/64, error -71 [ 211.940788][ T9] usb 2-1: device descriptor read/64, error -71 [ 212.130834][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.180993][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.270939][ T8] usb 4-1: device descriptor read/64, error -71 [ 212.310970][ T9] usb 2-1: device descriptor read/64, error -71 [ 212.393639][ T8] usb usb4-port1: attempt power cycle [ 212.421457][ T9] usb usb2-port1: attempt power cycle [ 212.440795][ T5879] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.602239][ T5879] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 212.614933][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.626614][ T5879] usb 3-1: config 0 descriptor?? [ 212.640122][ T5879] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 212.740925][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.762583][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 212.803329][ T8] usb 4-1: device descriptor read/8, error -71 [ 212.824245][ T9] usb 2-1: device descriptor read/8, error -71 [ 212.870833][ T4956] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.022578][ T4956] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 213.040180][ T4956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.055873][ T4956] usb 5-1: config 0 descriptor?? [ 213.063369][ T4956] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 213.203680][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.212087][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 213.435279][ T9] usb 2-1: device descriptor read/8, error -71 [ 213.446491][ T8] usb 4-1: device descriptor read/8, error -71 [ 213.661185][ T8] usb usb4-port1: unable to enumerate USB device [ 213.669542][ T9] usb usb2-port1: unable to enumerate USB device [ 213.833054][ T5879] gspca_cpia1: usb_control_msg 02, error -71 [ 213.849432][ T5879] gspca_cpia1: usb_control_msg 05, error -71 [ 213.857401][ T5879] gspca_cpia1: usb_control_msg 04, error -71 [ 213.863862][ T29] audit: type=1400 audit(1731308007.035:531): avc: denied { setopt } for pid=7836 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.883612][ T5879] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 213.895167][ T5879] usb 3-1: USB disconnect, device number 10 [ 213.963074][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 213.972380][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 214.230830][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.382714][ T4956] gspca_cpia1: usb_control_msg 02, error -71 [ 214.422372][ T4956] gspca_cpia1: usb_control_msg 05, error -71 [ 214.431042][ T5909] usb 1-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=b5.55 [ 214.452932][ T4956] gspca_cpia1: usb_control_msg 04, error -71 [ 214.459009][ T4956] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 214.467429][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.488226][ T5909] usb 1-1: Product: syz [ 214.620748][ T5909] usb 1-1: Manufacturer: syz [ 214.625536][ T5909] usb 1-1: SerialNumber: syz [ 214.630857][ T4956] usb 5-1: USB disconnect, device number 13 [ 214.650600][ T5909] usb 1-1: config 0 descriptor?? [ 214.671160][ T5909] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 215.423109][ T5909] sonixb 1-1:0.0: Error writing register 01: -71 [ 215.440128][ T5909] sonixb 1-1:0.0: probe with driver sonixb failed with error -71 [ 215.465246][ T5909] usb 1-1: USB disconnect, device number 9 [ 215.510104][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 216.200895][ T29] audit: type=1400 audit(1731308009.365:532): avc: denied { mount } for pid=7849 comm="syz.3.488" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 216.782029][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 216.792426][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 216.986843][ T7879] cgroup: Unknown subsys name 'cpuset' [ 217.044632][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 217.113933][ T29] audit: type=1400 audit(1731308010.285:533): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.141258][ T7882] random: crng reseeded on system resumption [ 217.149276][ T29] audit: type=1400 audit(1731308010.315:534): avc: denied { append } for pid=7881 comm="syz.1.498" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.201592][ T7884] IPv4: Oversized IP packet from 172.20.20.24 [ 217.205381][ T7874] netlink: 'syz.0.495': attribute type 3 has an invalid length. [ 217.210927][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 217.222305][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 217.250972][ T29] audit: type=1400 audit(1731308010.315:535): avc: denied { open } for pid=7881 comm="syz.1.498" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.017065][ T2113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.319305][ T2113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.951559][ T2113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.060123][ T2113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.208136][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.262311][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.277474][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.284827][ T2113] bridge_slave_1: left allmulticast mode [ 219.290496][ T2113] bridge_slave_1: left promiscuous mode [ 219.297783][ T2113] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.312038][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.321478][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.330563][ T2113] bridge_slave_0: left allmulticast mode [ 219.336531][ T2113] bridge_slave_0: left promiscuous mode [ 219.342631][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.350371][ T2113] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.597046][ T7927] FAULT_INJECTION: forcing a failure. [ 219.597046][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 219.610536][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.0.511 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 219.621156][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 219.631242][ T7927] Call Trace: [ 219.634572][ T7927] [ 219.637522][ T7927] dump_stack_lvl+0x16c/0x1f0 [ 219.642210][ T7927] should_fail_ex+0x497/0x5b0 [ 219.646875][ T7927] ? fs_reclaim_acquire+0xae/0x150 [ 219.651988][ T7927] should_failslab+0xc2/0x120 [ 219.656675][ T7927] __kmalloc_noprof+0xcb/0x400 [ 219.661474][ T7927] tomoyo_encode2+0x100/0x3e0 [ 219.666204][ T7927] tomoyo_encode+0x29/0x50 [ 219.670636][ T7927] tomoyo_realpath_from_path+0x19d/0x720 [ 219.676307][ T7927] ? tomoyo_path_number_perm+0x232/0x590 [ 219.681966][ T7927] tomoyo_path_number_perm+0x245/0x590 [ 219.687446][ T7927] ? tomoyo_path_number_perm+0x232/0x590 [ 219.693115][ T7927] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.699152][ T7927] ? trace_lock_acquire+0x14a/0x1d0 [ 219.704484][ T7927] ? lock_acquire+0x2f/0xb0 [ 219.709015][ T7927] ? __fget_files+0x40/0x3f0 [ 219.713641][ T7927] ? __fget_files+0x244/0x3f0 [ 219.718332][ T7927] security_file_ioctl+0x9b/0x240 [ 219.723356][ T7927] __x64_sys_ioctl+0xbb/0x220 [ 219.728034][ T7927] do_syscall_64+0xcd/0x250 [ 219.732532][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.738427][ T7927] RIP: 0033:0x7fab7f77e719 [ 219.742833][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.762448][ T7927] RSP: 002b:00007fab805d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.770867][ T7927] RAX: ffffffffffffffda RBX: 00007fab7f936058 RCX: 00007fab7f77e719 [ 219.778834][ T7927] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000006 [ 219.786817][ T7927] RBP: 00007fab805d7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.794783][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.802749][ T7927] R13: 0000000000000000 R14: 00007fab7f936058 R15: 00007ffd981b01c8 [ 219.810745][ T7927] [ 219.826414][ T7927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.061996][ T29] audit: type=1400 audit(1731308014.225:536): avc: denied { mount } for pid=7930 comm="syz.4.514" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 221.182538][ T29] audit: type=1400 audit(1731308014.355:537): avc: denied { shutdown } for pid=7939 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.260725][ T29] audit: type=1400 audit(1731308014.385:538): avc: denied { read } for pid=7939 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.324575][ T29] audit: type=1400 audit(1731308014.495:539): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 221.400916][ T53] Bluetooth: hci4: command tx timeout [ 221.428066][ T29] audit: type=1400 audit(1731308014.595:540): avc: denied { write } for pid=7937 comm="syz.1.515" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.462487][ T29] audit: type=1400 audit(1731308014.595:541): avc: denied { open } for pid=7937 comm="syz.1.515" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.500227][ T7942] openvswitch: netlink: Actions may not be safe on all matching packets [ 221.609426][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 221.639946][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.516'. [ 222.351717][ T2113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.383635][ T2113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.413467][ T2113] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 222.438719][ T2113] bond0 (unregistering): Released all slaves [ 222.472265][ T7921] FAULT_INJECTION: forcing a failure. [ 222.472265][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 222.490994][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.2.510 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 222.501624][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 222.511660][ T7921] Call Trace: [ 222.514915][ T7921] [ 222.517828][ T7921] dump_stack_lvl+0x16c/0x1f0 [ 222.522486][ T7921] should_fail_ex+0x497/0x5b0 [ 222.527142][ T7921] ? fs_reclaim_acquire+0xae/0x150 [ 222.532233][ T7921] should_failslab+0xc2/0x120 [ 222.536890][ T7921] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 222.542267][ T7921] ? alloc_empty_file+0x73/0x1e0 [ 222.547206][ T7921] alloc_empty_file+0x73/0x1e0 [ 222.551964][ T7921] alloc_file_pseudo+0x147/0x210 [ 222.556932][ T7921] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 222.562400][ T7921] ? __pfx_idr_alloc_u32+0x10/0x10 [ 222.567494][ T7921] ? find_held_lock+0x2d/0x110 [ 222.572240][ T7921] ? find_held_lock+0x2d/0x110 [ 222.576993][ T7921] __anon_inode_getfile+0x136/0x3d0 [ 222.582200][ T7921] ? __pfx___anon_inode_getfile+0x10/0x10 [ 222.587899][ T7921] ? bpf_link_prime+0x8a/0x4d0 [ 222.592642][ T7921] ? __local_bh_enable_ip+0xa4/0x120 [ 222.597908][ T7921] bpf_link_prime+0x202/0x4d0 [ 222.602581][ T7921] tcx_link_attach+0x21a/0x9f0 [ 222.607330][ T7921] ? __pfx_tcx_link_attach+0x10/0x10 [ 222.612616][ T7921] ? fput+0x30/0x390 [ 222.616488][ T7921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.622366][ T7921] __sys_bpf+0x3e76/0x49a0 [ 222.626759][ T7921] ? ksys_write+0x21e/0x260 [ 222.631239][ T7921] ? reacquire_held_locks+0x470/0x4c0 [ 222.636594][ T7921] ? __pfx___sys_bpf+0x10/0x10 [ 222.641348][ T7921] ? vfs_write+0x306/0x1150 [ 222.645845][ T7921] ? __mutex_unlock_slowpath+0x164/0x650 [ 222.651650][ T7921] ? fput+0x30/0x390 [ 222.655525][ T7921] ? ksys_write+0x1ad/0x260 [ 222.660016][ T7921] ? __pfx_ksys_write+0x10/0x10 [ 222.664867][ T7921] __x64_sys_bpf+0x78/0xc0 [ 222.669262][ T7921] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.674441][ T7921] do_syscall_64+0xcd/0x250 [ 222.678972][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.684869][ T7921] RIP: 0033:0x7fb79917e719 [ 222.689289][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.708915][ T7921] RSP: 002b:00007fb799f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.717332][ T7921] RAX: ffffffffffffffda RBX: 00007fb799335f80 RCX: 00007fb79917e719 [ 222.725284][ T7921] RDX: 0000000000000020 RSI: 0000000020000480 RDI: 000000000000001c [ 222.733239][ T7921] RBP: 00007fb799f43090 R08: 0000000000000000 R09: 0000000000000000 [ 222.741191][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.749163][ T7921] R13: 0000000000000000 R14: 00007fb799335f80 R15: 00007ffd9d94e378 [ 222.757153][ T7921] [ 222.760245][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.965540][ T29] audit: type=1400 audit(1731308016.135:542): avc: denied { getopt } for pid=7961 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.050482][ T29] audit: type=1400 audit(1731308016.135:543): avc: denied { module_request } for pid=7961 comm="syz.2.521" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D0781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 223.075850][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.492003][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.507302][ T7916] chnl_net:caif_netlink_parms(): no params data found [ 223.516806][ T53] Bluetooth: hci4: command tx timeout [ 223.671556][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 223.678160][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.693844][ T2113] hsr_slave_0: left promiscuous mode [ 223.702090][ T2113] hsr_slave_1: left promiscuous mode [ 223.716819][ T5879] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 223.733420][ T2113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.744692][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.750796][ T2113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.767411][ T5879] usb 5-1: Product: syz [ 223.777512][ T5879] usb 5-1: Manufacturer: syz [ 223.780356][ T2113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.787443][ T5879] usb 5-1: SerialNumber: syz [ 223.790626][ T2113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.838744][ T5879] usb 5-1: config 0 descriptor?? [ 223.862509][ T5879] usb 5-1: no audio or video endpoints found [ 223.947391][ T2113] veth1_macvtap: left promiscuous mode [ 223.977942][ T2113] veth0_macvtap: left promiscuous mode [ 224.007130][ T2113] veth1_vlan: left promiscuous mode [ 224.024307][ T2113] veth0_vlan: left promiscuous mode [ 225.997943][ T53] Bluetooth: hci4: command tx timeout [ 226.070841][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.251152][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 226.270839][ T5879] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.300897][ T5879] usb 1-1: config 0 has no interface number 0 [ 226.314094][ T5879] usb 1-1: config 0 interface 12 has no altsetting 0 [ 226.328508][ T5879] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 226.339370][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.354527][ T5879] usb 1-1: Product: syz [ 226.358827][ T5879] usb 1-1: Manufacturer: syz [ 226.367832][ T5879] usb 1-1: SerialNumber: syz [ 226.396806][ T5879] usb 1-1: config 0 descriptor?? [ 226.444174][ T2113] team0 (unregistering): Port device team_slave_1 removed [ 226.986040][ T2113] team0 (unregistering): Port device team_slave_0 removed [ 227.345011][ T8010] futex_wake_op: syz.0.526 tries to shift op by 36; fix this program [ 228.041660][ T5841] Bluetooth: hci4: command tx timeout [ 228.341350][ T5879] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 228.348998][ T5879] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 228.397108][ T5879] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 228.404854][ T5879] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 228.423152][ T5879] usb 1-1: USB disconnect, device number 10 [ 229.325853][ T8029] sctp: [Deprecated]: syz.1.530 (pid 8029) Use of int in max_burst socket option deprecated. [ 229.325853][ T8029] Use struct sctp_assoc_value instead [ 229.554803][ T8000] vlan2: entered promiscuous mode [ 229.681111][ T8040] block nbd1: Device being setup by another task [ 229.698937][ T8034] block nbd1: shutting down sockets [ 229.734071][ T4956] usb 5-1: USB disconnect, device number 14 [ 229.744956][ T8029] xt_nat: multiple ranges no longer supported [ 229.991202][ T7916] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.000118][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.014895][ T7916] bridge_slave_0: entered allmulticast mode [ 230.050533][ T7916] bridge_slave_0: entered promiscuous mode [ 230.062216][ T8052] team0: entered promiscuous mode [ 230.067286][ T8052] team_slave_0: entered promiscuous mode [ 230.082212][ T8052] team_slave_1: entered promiscuous mode [ 230.786395][ T8053] vlan2: entered promiscuous mode [ 230.800449][ T8053] team0: Port device vlan2 added [ 230.807101][ T7916] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.814423][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.823195][ T7916] bridge_slave_1: entered allmulticast mode [ 230.831093][ T7916] bridge_slave_1: entered promiscuous mode [ 230.999916][ T8050] team0: left promiscuous mode [ 231.005268][ T8050] team_slave_0: left promiscuous mode [ 231.011288][ T8050] team_slave_1: left promiscuous mode [ 231.016801][ T8050] vlan2: left promiscuous mode [ 231.030180][ T7916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.053098][ T7916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.238528][ T7916] team0: Port device team_slave_0 added [ 231.313676][ T7916] team0: Port device team_slave_1 added [ 232.378374][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 232.651691][ T8085] netlink: 'syz.4.537': attribute type 3 has an invalid length. [ 232.659511][ T8085] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.537'. [ 233.192480][ T7916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.216084][ T7916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.304477][ T7916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.327155][ T7916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.338196][ T7916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.376696][ T7916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.423677][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 233.532103][ T7916] hsr_slave_0: entered promiscuous mode [ 233.604386][ T7916] hsr_slave_1: entered promiscuous mode [ 234.799002][ T7916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.850851][ T7916] Cannot create hsr debugfs directory [ 234.880609][ T8098] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 234.939975][ T29] audit: type=1400 audit(1731308029.102:544): avc: denied { bind } for pid=8102 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.016455][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.346148][ T7916] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.404509][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 235.524632][ T7916] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.567352][ T7916] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.654962][ T29] audit: type=1400 audit(1731308029.812:545): avc: denied { write } for pid=8114 comm="syz.4.544" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 236.071643][ T7916] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.143419][ T29] audit: type=1400 audit(1731308029.822:546): avc: denied { setopt } for pid=8114 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.516333][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.768686][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.157619][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.164771][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.215027][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.222242][ T3937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.374031][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.382826][ T8140] bridge0: entered allmulticast mode [ 237.415508][ T7916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.449735][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.456933][ T8141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.517015][ T8141] bridge0: entered promiscuous mode [ 239.190381][ T7916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.216133][ T8173] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 239.330176][ T8176] netlink: 'syz.4.555': attribute type 3 has an invalid length. [ 239.379811][ T29] audit: type=1400 audit(1731308033.542:547): avc: denied { ioctl } for pid=8180 comm="syz.0.552" path="socket:[16977]" dev="sockfs" ino=16977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.642598][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 239.925064][ T7916] veth0_vlan: entered promiscuous mode [ 239.954509][ T7916] veth1_vlan: entered promiscuous mode [ 240.098190][ T7916] veth0_macvtap: entered promiscuous mode [ 240.107695][ T7916] veth1_macvtap: entered promiscuous mode [ 240.176828][ T8202] fuse: Bad value for 'fd' [ 240.666651][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.705780][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.002287][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.013017][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.023122][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.033788][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.043833][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.054497][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.066432][ T7916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.118282][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.130773][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.140717][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.151226][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.209847][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.130820][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.146460][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.224973][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.289998][ T7916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.563952][ T7916] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.627708][ T7916] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.655713][ T7916] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.708804][ T7916] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.139884][ T8236] vlan0: entered promiscuous mode [ 243.164343][ T8236] team0: Port device vlan0 added [ 243.723628][ T3937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.739389][ T3937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.842746][ T3937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.870587][ T3937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.944296][ T8242] FAULT_INJECTION: forcing a failure. [ 243.944296][ T8242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.001813][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.1.567 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 244.012451][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 244.022526][ T8242] Call Trace: [ 244.025812][ T8242] [ 244.028747][ T8242] dump_stack_lvl+0x16c/0x1f0 [ 244.033449][ T8242] should_fail_ex+0x497/0x5b0 [ 244.038142][ T8242] _copy_to_user+0x32/0xd0 [ 244.042585][ T8242] drm_getunique+0x13c/0x200 [ 244.047197][ T8242] drm_ioctl_kernel+0x1e6/0x3d0 [ 244.052067][ T8242] ? __pfx_drm_getunique+0x10/0x10 [ 244.057197][ T8242] ? __might_fault+0xe3/0x190 [ 244.061894][ T8242] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 244.067285][ T8242] ? __might_fault+0xe3/0x190 [ 244.071978][ T8242] drm_ioctl+0x5d6/0xc00 [ 244.076229][ T8242] ? __pfx_drm_getunique+0x10/0x10 [ 244.081341][ T8242] ? __pfx_drm_ioctl+0x10/0x10 [ 244.086124][ T8242] ? trace_lock_acquire+0x14a/0x1d0 [ 244.091348][ T8242] ? selinux_file_ioctl+0x180/0x270 [ 244.096550][ T8242] ? selinux_file_ioctl+0xb4/0x270 [ 244.101656][ T8242] ? __pfx_drm_ioctl+0x10/0x10 [ 244.106419][ T8242] __x64_sys_ioctl+0x18f/0x220 [ 244.111181][ T8242] do_syscall_64+0xcd/0x250 [ 244.115679][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.121573][ T8242] RIP: 0033:0x7f3ea497e719 [ 244.125977][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.145589][ T8242] RSP: 002b:00007f3ea5841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.154020][ T8242] RAX: ffffffffffffffda RBX: 00007f3ea4b35f80 RCX: 00007f3ea497e719 [ 244.161996][ T8242] RDX: 00000000200000c0 RSI: 00000000c0106401 RDI: 0000000000000003 [ 244.169963][ T8242] RBP: 00007f3ea5841090 R08: 0000000000000000 R09: 0000000000000000 [ 244.177929][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.185902][ T8242] R13: 0000000000000000 R14: 00007f3ea4b35f80 R15: 00007ffd0bdb89b8 [ 244.193880][ T8242] [ 245.051006][ T29] audit: type=1400 audit(1731308039.212:548): avc: denied { setopt } for pid=8267 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.486109][ T8275] No such timeout policy "syz0" [ 245.730831][ T29] audit: type=1400 audit(1731308039.752:549): avc: denied { listen } for pid=8272 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.090768][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.160946][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 252.348113][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 252.355223][ T9] usb 3-1: device descriptor read/all, error -71 [ 252.362522][ T8314] delete_channel: no stack [ 252.370575][ T8] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 252.423592][ T8] usb 2-1: config 0 has no interface number 0 [ 252.429739][ T8] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 252.440016][ T8] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 252.462810][ T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 252.472944][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.481279][ T8] usb 2-1: Product: syz [ 252.485753][ T8] usb 2-1: Manufacturer: syz [ 252.490372][ T8] usb 2-1: SerialNumber: syz [ 252.497185][ T8] usb 2-1: config 0 descriptor?? [ 252.503061][ T8319] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 252.511117][ T8319] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 252.564575][ T8] usb 2-1: can't set config #0, error -71 [ 252.587088][ T8] usb 2-1: USB disconnect, device number 20 [ 252.630880][ T5909] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.651623][ T29] audit: type=1400 audit(1731308046.822:550): avc: denied { sys_chroot } for pid=8337 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 252.712708][ T29] audit: type=1400 audit(1731308046.842:551): avc: denied { setgid } for pid=8337 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 252.762335][ T29] audit: type=1400 audit(1731308046.842:552): avc: denied { setrlimit } for pid=8337 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 252.812238][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 252.820342][ T5909] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 252.834693][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.892246][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.951246][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 252.969363][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.130445][ T29] audit: type=1400 audit(1731308047.182:553): avc: denied { ioctl } for pid=8339 comm="syz.1.587" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 253.155924][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.240502][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 253.291712][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.412339][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.415100][ T5924] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 253.447445][ T5909] usb 5-1: Product: syz [ 253.461708][ T5909] usb 5-1: Manufacturer: syz [ 253.467449][ T5924] usb 6-1: config 0 has no interface number 0 [ 253.483529][ T5909] usb 5-1: SerialNumber: syz [ 253.513104][ T5924] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 253.538527][ T5924] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 253.559522][ T5924] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 253.576143][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.584317][ T5924] usb 6-1: Product: syz [ 253.588600][ T5924] usb 6-1: Manufacturer: syz [ 253.594787][ T5924] usb 6-1: SerialNumber: syz [ 253.617328][ T5924] usb 6-1: config 0 descriptor?? [ 253.641339][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 253.653215][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.658071][ T8334] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 253.680789][ T9] usb 3-1: config 0 has no interfaces? [ 253.685954][ T8334] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 253.713005][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 253.733660][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.754751][ T9] usb 3-1: Product: syz [ 253.759060][ T29] audit: type=1400 audit(1731308047.922:554): avc: denied { read } for pid=8350 comm="syz.0.588" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 253.791296][ T9] usb 3-1: Manufacturer: syz [ 253.795965][ T9] usb 3-1: SerialNumber: syz [ 253.811437][ T29] audit: type=1400 audit(1731308047.922:555): avc: denied { open } for pid=8350 comm="syz.0.588" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 253.835762][ T9] usb 3-1: config 0 descriptor?? [ 253.928128][ T8334] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 253.935875][ T8334] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 253.949188][ T5909] usb 5-1: 0:2 : does not exist [ 253.970897][ T6479] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 254.131121][ T6479] usb 2-1: Using ep0 maxpacket: 16 [ 254.137891][ T6479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.149645][ T6479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.159985][ T6479] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 254.169171][ T6479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.179157][ T6479] usb 2-1: config 0 descriptor?? [ 254.366228][ T5909] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 254.399731][ T5909] usb 5-1: USB disconnect, device number 15 [ 254.551435][ T5924] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 254.573538][ T5924] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 254.584480][ T5924] asix 6-1:0.251: probe with driver asix failed with error -71 [ 254.596524][ T6479] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 254.605502][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.607212][ T5924] usb 6-1: USB disconnect, device number 2 [ 254.636713][ T6479] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 254.643789][ T6479] ntrig 0003:1B96:0008.0007: unbalanced collection at end of report description [ 254.654681][ T6479] ntrig 0003:1B96:0008.0007: parse failed [ 254.660841][ T6479] ntrig 0003:1B96:0008.0007: probe with driver ntrig failed with error -22 [ 254.810309][ T9] usb 2-1: USB disconnect, device number 21 [ 255.540354][ T8378] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.548577][ T8378] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 255.628178][ T8378] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.636255][ T8378] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 255.708626][ T5909] usb 3-1: USB disconnect, device number 12 [ 255.761584][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858616][ T8387] input: syz1 as /devices/virtual/input/input12 [ 256.013993][ T8390] fuse: Bad value for 'fd' [ 256.630846][ T29] audit: type=1400 audit(1731308050.772:556): avc: denied { listen } for pid=8389 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.149686][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 257.431171][ T8410] jfs: Unrecognized mount option "./file0" or missing value [ 257.659388][ T29] audit: type=1400 audit(1731308051.822:557): avc: denied { listen } for pid=8415 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.671736][ T8] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 257.693804][ T29] audit: type=1400 audit(1731308051.862:558): avc: denied { accept } for pid=8415 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.710840][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.760613][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 257.781926][ T8] usb 1-1: config 0 descriptor?? [ 257.805398][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 258.361030][ T29] audit: type=1400 audit(1731308052.522:559): avc: denied { read } for pid=8426 comm="syz.5.607" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.410342][ T8429] raw_sendmsg: syz.5.607 forgot to set AF_INET. Fix it! [ 258.550825][ T5908] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 258.660954][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 258.712253][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 258.723764][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.734788][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.746638][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.763818][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 258.775564][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.794343][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 258.804013][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 258.812453][ T5908] usb 2-1: Manufacturer: syz [ 258.828721][ T5908] usb 2-1: config 0 descriptor?? [ 258.849238][ T5909] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.864533][ T5909] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.880014][ T5909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.886964][ T5909] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 258.902423][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.918409][ T29] audit: type=1400 audit(1731308053.082:560): avc: denied { write } for pid=5182 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.923555][ T5909] usb 6-1: config 0 descriptor?? [ 258.948527][ T29] audit: type=1400 audit(1731308053.082:561): avc: denied { remove_name } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.971791][ T29] audit: type=1400 audit(1731308053.082:562): avc: denied { add_name } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.000864][ T5924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 259.171358][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 259.193215][ T5924] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 259.205785][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.231062][ T5908] rc_core: IR keymap rc-hauppauge not found [ 259.233040][ T5909] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 259.347453][ T5924] usb 5-1: config 0 descriptor?? [ 259.350388][ T5908] Registered IR keymap rc-empty [ 259.360249][ T5909] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 259.371240][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.382992][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 259.392572][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.398449][ T5909] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 259.438919][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 259.460741][ T5909] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 259.522858][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 259.533907][ T5909] usb 6-1: USB disconnect, device number 3 [ 259.590411][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.650830][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.721192][ T8] gspca_cpia1: usb_control_msg 02, error -110 [ 259.727850][ T8] gspca_cpia1: usb_control_msg 05, error -32 [ 259.734481][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.743818][ T8] gspca_cpia1: usb_control_msg 05, error -32 [ 259.758889][ T8] gspca_cpia1: usb_control_msg 05, error -32 [ 259.770851][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.778588][ T8] gspca_cpia1: usb_control_msg 05, error -32 [ 259.788081][ T8] gspca_cpia1: usb_control_msg 04, error -32 [ 259.804552][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.841458][ T8] gspca_cpia1: usb_control_msg 04, error -32 [ 259.862650][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.876440][ T8] gspca_cpia1: usb_control_msg 04, error -32 [ 259.896242][ T8] gspca_cpia1: usb_control_msg 04, error -32 [ 259.911500][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.929534][ T8] cpia1 1-1:0.0: probe with driver cpia1 failed with error -32 [ 259.952701][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.990949][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.020810][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.040931][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.081942][ T5908] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 260.110741][ T5908] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 260.151368][ T5908] usb 2-1: USB disconnect, device number 22 [ 260.202933][ T8] usb 1-1: USB disconnect, device number 11 [ 261.319815][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.328689][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.349993][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.393201][ T8470] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.450206][ T8470] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.613005][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.630874][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.647375][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.664302][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.679676][ T8470] ip6gretap0 speed is unknown, defaulting to 1000 [ 262.677463][ T5924] gspca_sonixj: i2c_w8 err -71 [ 263.021911][ T5924] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 263.081349][ T5924] usb 5-1: USB disconnect, device number 16 [ 263.110895][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.150788][ T5909] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 263.340858][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 263.374394][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 263.386204][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 263.413558][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 263.442120][ T8] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 263.966365][ T5909] usb 2-1: string descriptor 0 read error: -71 [ 263.972745][ T5909] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1c.48 [ 263.982932][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.992815][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.012411][ T5909] usb 2-1: config 0 descriptor?? [ 264.029040][ T5909] usb 2-1: can't set config #0, error -71 [ 264.108907][ T8] usb 3-1: Product: syz [ 264.117630][ T8] usb 3-1: Manufacturer: syz [ 264.126330][ T8] usb 3-1: SerialNumber: syz [ 264.149817][ T8] usb 3-1: config 0 descriptor?? [ 264.752556][ T8] usb 3-1: bad CDC descriptors [ 264.762050][ T8] usb 3-1: unsupported MDLM descriptors [ 265.232237][ T8] usb 3-1: USB disconnect, device number 13 [ 265.263893][ T8507] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.323360][ T5909] usb 2-1: USB disconnect, device number 23 [ 265.352191][ T8507] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 265.381394][ T8507] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.390588][ T8507] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 266.710824][ T8537] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.718725][ T8537] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 266.729321][ T8537] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.737652][ T8537] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 267.005288][ T8538] wg2: entered promiscuous mode [ 267.024309][ T8548] loop4: detected capacity change from 0 to 16384 [ 267.726366][ T8548] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.850760][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 267.871882][ T8548] Buffer I/O error on dev loop4, logical block 3, async page read [ 268.106733][ T8548] loop4: unable to read partition table [ 268.117473][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 268.191873][ T8548] loop_reread_partitions: partition scan of loop4 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 268.237965][ T8] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 268.257850][ T8] usb 6-1: config 0 has no interface number 0 [ 268.286569][ T8] usb 6-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 268.319028][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.337414][ T8] usb 6-1: Product: syz [ 268.342453][ T8] usb 6-1: Manufacturer: syz [ 268.347144][ T8] usb 6-1: SerialNumber: syz [ 268.362070][ T8] usb 6-1: config 0 descriptor?? [ 268.948396][ T8] mos7840 6-1:0.186: missing endpoints [ 268.994849][ T8] usb 6-1: USB disconnect, device number 4 [ 269.230925][ T29] audit: type=1400 audit(1731308063.377:563): avc: denied { remount } for pid=8568 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 270.640720][ T29] audit: type=1326 audit(1731308064.187:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 270.944452][ T29] audit: type=1326 audit(1731308064.187:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 271.221495][ T8590] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 271.307348][ T8589] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 271.477270][ T8596] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.532259][ T29] audit: type=1326 audit(1731308064.187:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 271.540851][ T8596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.568158][ T29] audit: type=1400 audit(1731308064.187:567): avc: denied { create } for pid=8578 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 272.270837][ T29] audit: type=1326 audit(1731308064.187:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 272.283004][ T8596] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 272.302082][ T8596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 272.322053][ T29] audit: type=1326 audit(1731308064.187:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 272.351932][ T29] audit: type=1326 audit(1731308064.187:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 272.500830][ T29] audit: type=1326 audit(1731308064.187:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 272.640791][ T29] audit: type=1326 audit(1731308064.187:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x7ffc0000 [ 273.019602][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 273.233953][ T8] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 273.245136][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.873577][ T8] usb 5-1: config 0 descriptor?? [ 273.891677][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 274.122087][ T8626] binder: BINDER_SET_CONTEXT_MGR already set [ 274.148257][ T8626] binder: 8624:8626 ioctl 4018620d 20000040 returned -16 [ 274.616093][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.781685][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 274.827467][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.838826][ T5879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.849154][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.077517][ T5879] usb 3-1: config 0 descriptor?? [ 275.344163][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 275.925208][ T8] gspca_cpia1: usb_control_msg 05, error -71 [ 275.936974][ T5879] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 275.962184][ T8] gspca_cpia1: usb_control_msg 04, error -71 [ 275.968371][ T8] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 276.004765][ T5924] usb 3-1: USB disconnect, device number 14 [ 276.031269][ T8] usb 5-1: USB disconnect, device number 17 [ 276.088278][ T5924] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 278.628622][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 278.628639][ T29] audit: type=1400 audit(1731308074.788:620): avc: denied { execute } for pid=8699 comm="syz.2.663" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.987012][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 279.346765][ T29] audit: type=1400 audit(1731308075.168:621): avc: denied { wake_alarm } for pid=8699 comm="syz.2.663" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.490826][ T8690] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 279.904928][ T8726] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 12, id = 0 [ 279.911767][ T8724] program syz.2.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.844546][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'. [ 281.806530][ T5879] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 282.088246][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.277060][ T5879] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.479568][ T8761] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 282.491267][ T5879] usb 1-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 282.540079][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.747421][ T5879] usb 1-1: config 0 descriptor?? [ 282.817437][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.871797][ T8761] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 282.902305][ T29] audit: type=1400 audit(1731308080.073:622): avc: denied { map } for pid=8766 comm="syz.1.681" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.945806][ T29] audit: type=1400 audit(1731308080.073:623): avc: denied { execute } for pid=8766 comm="syz.1.681" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.058901][ T8794] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.068647][ T8794] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 285.078782][ T8794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.180243][ T5879] usb 1-1: USB disconnect, device number 12 [ 288.601742][ T29] audit: type=1400 audit(1731308085.763:624): avc: denied { accept } for pid=8819 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.623730][ T8833] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 288.721367][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.928579][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 288.954066][ T5879] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 288.986197][ T5879] usb 1-1: config 0 has no interface number 0 [ 289.058472][ T5879] usb 1-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.116970][ T5879] usb 1-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.760055][ T5879] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.770970][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.815674][ T5879] usb 1-1: config 0 descriptor?? [ 290.266542][ T8870] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 290.274668][ T8870] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 290.285715][ T8870] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 290.293896][ T8870] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 290.537929][ T5879] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 291.261562][ T29] audit: type=1326 audit(1731308089.418:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.0.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7f77e719 code=0x0 [ 291.490737][ T8899] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 292.622820][ T8828] block nbd0: shutting down sockets [ 292.661514][ T5879] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 292.672914][ T5879] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -71 [ 293.213453][ T29] audit: type=1326 audit(1731308091.378:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.2.707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb79917e719 code=0x0 [ 294.359343][ T5879] usb 1-1: USB disconnect, device number 13 [ 294.559022][ T8934] xt_cgroup: invalid path, errno=-2 [ 295.045975][ T8937] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.053867][ T8937] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 295.062248][ T8937] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.070236][ T8937] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 295.410361][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 295.433416][ T8951] nbd: must specify an index to disconnect [ 296.348564][ T8965] netlink: 'syz.5.716': attribute type 4 has an invalid length. [ 296.356458][ T8965] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.716'. [ 296.372622][ T8965] netlink: 'syz.5.716': attribute type 4 has an invalid length. [ 296.380364][ T8965] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.716'. [ 296.503836][ T8965] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 296.511306][ T8965] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.521764][ T8965] vhci_hcd vhci_hcd.0: Device attached [ 296.906390][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 297.351762][ T5879] vhci_hcd: vhci_device speed not set [ 297.357588][ T8967] vhci_hcd: connection closed [ 297.435644][ T3937] vhci_hcd: stop threads [ 297.444810][ T5879] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 297.479376][ T3937] vhci_hcd: release socket [ 297.491341][ T3937] vhci_hcd: disconnect device [ 298.031668][ T8985] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 299.790780][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 299.860861][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 299.963429][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.196925][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.304211][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.326508][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 300.352706][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.368802][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.409517][ T8] usb 1-1: Product: syz [ 300.414129][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.424981][ T8] usb 1-1: Manufacturer: syz [ 300.429633][ T8] usb 1-1: SerialNumber: syz [ 300.451152][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.464938][ T8] usb 1-1: config 0 descriptor?? [ 300.485755][ T9] usb 6-1: config 0 descriptor?? [ 300.750975][ T8] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 300.757539][ T8] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 300.767502][ T8] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 300.870927][ T5908] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.884584][ T8] usb 1-1: USB disconnect, device number 14 [ 301.108128][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 301.139005][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 301.274998][ T5908] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 301.288427][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.311094][ T5908] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 301.325561][ T5908] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 301.333881][ T5908] usb 2-1: Manufacturer: syz [ 301.389857][ T5908] usb 2-1: config 0 descriptor?? [ 301.492555][ T5908] rc_core: IR keymap rc-hauppauge not found [ 301.513671][ T5908] Registered IR keymap rc-empty [ 301.526922][ T5908] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 301.599996][ T9025] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 301.607795][ T9025] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.733'. [ 301.623733][ T9025] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 301.631733][ T9025] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.733'. [ 302.031434][ T29] audit: type=1400 audit(1731308100.008:627): avc: denied { bind } for pid=9005 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 302.373806][ T9031] Illegal XDP return value 4294967274 on prog (id 181) dev N/A, expect packet loss! [ 302.866451][ T5877] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 302.876218][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 302.894410][ T5908] usb 2-1: USB disconnect, device number 24 [ 302.897338][ T9031] libceph: resolve ' [ 302.897338][ T9031] -&fYǝa2i [ 302.897338][ T9031] .?&*&' (ret=-3): failed [ 302.946976][ T9025] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 302.953627][ T9025] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 302.961816][ T9025] vhci_hcd vhci_hcd.0: Device attached [ 302.967518][ T5879] vhci_hcd: vhci_device speed not set [ 302.995741][ T9027] vhci_hcd: connection closed [ 303.002926][ T35] vhci_hcd: stop threads [ 303.012209][ T35] vhci_hcd: release socket [ 303.016647][ T35] vhci_hcd: disconnect device [ 303.925208][ T5864] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 304.421924][ T9036] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.429990][ T9036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 304.438282][ T9036] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.446164][ T9036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 304.590776][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 304.633993][ T5909] usb 6-1: USB disconnect, device number 5 [ 304.652630][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.668146][ T5864] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 304.678670][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.732119][ T5864] usb 5-1: Product: syz [ 304.736386][ T5864] usb 5-1: Manufacturer: syz [ 304.796148][ T5864] usb 5-1: SerialNumber: syz [ 304.898477][ T29] audit: type=1400 audit(1731308102.888:628): avc: denied { create } for pid=9055 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 305.247231][ T5864] usb 5-1: config 0 descriptor?? [ 305.273885][ T5864] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 305.322891][ T29] audit: type=1400 audit(1731308103.488:629): avc: denied { setopt } for pid=9063 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 305.405397][ T9071] bridge_slave_1: left allmulticast mode [ 305.413386][ T9071] bridge_slave_1: left promiscuous mode [ 305.421852][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.533058][ T29] audit: type=1400 audit(1731308103.678:630): avc: denied { setopt } for pid=9046 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.572351][ T9071] bridge_slave_0: left allmulticast mode [ 305.578033][ T9071] bridge_slave_0: left promiscuous mode [ 305.598116][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.700960][ T9083] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.749'. [ 306.616464][ T9079] input: syz0 as /devices/virtual/input/input15 [ 306.926740][ T5864] gspca_sunplus: reg_r err -110 [ 309.350985][ T5877] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 309.512686][ T5877] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 309.538040][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.571982][ T5877] usb 2-1: config 0 descriptor?? [ 309.598387][ T5877] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 309.600801][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 309.711070][ T5864] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 310.011931][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 310.172227][ T5879] usb 3-1: config 0 has an invalid interface number: 134 but max is 0 [ 310.216757][ T5864] usb 5-1: USB disconnect, device number 18 [ 310.224409][ T5879] usb 3-1: config 0 has no interface number 0 [ 310.370149][ T5879] usb 3-1: New USB device found, idVendor=10b8, idProduct=1fa0, bcdDevice=cd.3b [ 310.381131][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.410832][ T5879] usb 3-1: Product: syz [ 310.415407][ T5879] usb 3-1: Manufacturer: syz [ 310.420038][ T5879] usb 3-1: SerialNumber: syz [ 310.511360][ T9138] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 310.519130][ T9138] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.765'. [ 310.552277][ T9138] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 310.560058][ T9138] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.765'. [ 310.643941][ T5879] usb 3-1: config 0 descriptor?? [ 310.739242][ T9138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 310.745816][ T9138] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 310.753966][ T9138] vhci_hcd vhci_hcd.0: Device attached [ 311.016993][ T9140] vhci_hcd: connection closed [ 311.017352][ T5908] vhci_hcd: vhci_device speed not set [ 311.032541][ T73] vhci_hcd: stop threads [ 311.036849][ T73] vhci_hcd: release socket [ 311.043218][ T73] vhci_hcd: disconnect device [ 311.072811][ T9142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.766'. [ 311.110859][ T5908] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 311.125081][ T5908] usb 33-1: enqueue for inactive port 0 [ 311.136642][ T29] audit: type=1400 audit(1731308109.298:631): avc: denied { bind } for pid=9122 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.157039][ T29] audit: type=1400 audit(1731308109.298:632): avc: denied { map } for pid=9122 comm="syz.2.763" path="socket:[20124]" dev="sockfs" ino=20124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.180094][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.186953][ T29] audit: type=1400 audit(1731308109.298:633): avc: denied { read } for pid=9122 comm="syz.2.763" path="socket:[20124]" dev="sockfs" ino=20124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.210135][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.218331][ T5908] vhci_hcd: vhci_device speed not set [ 311.224142][ T5879] dvb-usb: found a 'DiBcom STK8096GP reference design' in warm state. [ 311.245029][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.262216][ T5879] dvbdev: DVB: registering new adapter (DiBcom STK8096GP reference design) [ 311.271032][ T5879] usb 3-1: media controller created [ 311.299557][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.401302][ T5879] DVB: Unable to find symbol dib8000_attach() [ 311.407541][ T5879] dvb-usb: no frontend was attached by 'DiBcom STK8096GP reference design' [ 311.511637][ T29] audit: type=1400 audit(1731308109.658:634): avc: denied { accept } for pid=9122 comm="syz.2.763" lport=35879 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.536002][ T5879] rc_core: IR keymap rc-dib0700-rc5 not found [ 311.600552][ T5879] Registered IR keymap rc-empty [ 311.602064][ T9123] sctp: failed to load transform for md5: -2 [ 311.605691][ T5879] dvb-usb: could not initialize remote control. [ 311.617869][ T5879] dvb-usb: DiBcom STK8096GP reference design successfully initialized and connected. [ 311.723111][ T5879] usb 3-1: USB disconnect, device number 15 [ 311.782141][ T5879] dvb-usb: DiBcom STK8096GP reference design successfully deinitialized and disconnected. [ 311.846094][ T5877] gspca_cpia1: usb_control_msg 02, error -71 [ 311.853222][ T5877] gspca_cpia1: usb_control_msg 05, error -71 [ 311.865456][ T5877] gspca_cpia1: usb_control_msg 04, error -71 [ 311.874711][ T5877] cpia1 2-1:0.0: probe with driver cpia1 failed with error -71 [ 311.915777][ T5877] usb 2-1: USB disconnect, device number 25 [ 312.459269][ T9171] ALSA: mixer_oss: invalid OSS volume 'DIIT' [ 312.801072][ T5877] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 312.986278][ T9176] vlan2: entered promiscuous mode [ 313.094390][ T5877] usb 3-1: device descriptor read/64, error -71 [ 314.061038][ T5877] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 314.251228][ T5877] usb 3-1: device descriptor read/64, error -71 [ 314.276918][ T29] audit: type=1400 audit(1731308112.428:635): avc: denied { write } for pid=9188 comm="syz.5.780" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.492300][ T5877] usb usb3-port1: attempt power cycle [ 314.961077][ T5877] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 315.044615][ T5877] usb 3-1: device descriptor read/8, error -71 [ 315.071067][ T4956] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.621402][ T4956] usb 5-1: Using ep0 maxpacket: 16 [ 315.765627][ T5877] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.980810][ T5877] usb 3-1: device not accepting address 19, error -71 [ 316.015012][ T5877] usb usb3-port1: unable to enumerate USB device [ 316.223907][ T29] audit: type=1400 audit(1731308114.388:636): avc: denied { write } for pid=9221 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 317.220873][ T5877] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 317.237720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250236][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.331932][ T4956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.576539][ T4956] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 317.634373][ T9227] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 317.634373][ T9227] program syz.1.792 not setting count and/or reply_len properly [ 317.660808][ T4956] usb 5-1: can't read configurations, error -71 [ 317.794248][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.812108][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.884249][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.959434][ T9246] input: syz1 as /devices/virtual/input/input17 [ 317.964661][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.985900][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.172319][ T5877] usb 3-1: config 0 descriptor?? [ 318.178838][ T29] audit: type=1400 audit(1731308116.308:637): avc: denied { mount } for pid=9251 comm="syz.0.800" name="/" dev="autofs" ino=20365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 318.273498][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 318.550088][ T29] audit: type=1400 audit(1731308116.368:638): avc: denied { mounton } for pid=9251 comm="syz.0.800" path="/163/file1/file0" dev="autofs" ino=21034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 318.745032][ T29] audit: type=1400 audit(1731308116.378:639): avc: denied { mount } for pid=9251 comm="syz.0.800" name="/" dev="ramfs" ino=21035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 318.779688][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.800953][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.884875][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.897345][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.904904][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.912470][ T5877] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 318.920365][ T5877] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 318.948816][ T29] audit: type=1400 audit(1731308117.108:640): avc: denied { mounton } for pid=9251 comm="syz.0.800" path="/163/file1/file0" dev="ramfs" ino=21035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 318.961244][ T5877] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 319.003237][ T9259] netlink: 'syz.4.802': attribute type 10 has an invalid length. [ 319.013783][ T9259] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 319.041491][ T9259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.067742][ T9264] syz.1.799 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 319.167277][ T29] audit: type=1400 audit(1731308117.328:641): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 319.215316][ T29] audit: type=1400 audit(1731308117.358:642): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 319.460052][ T5877] usb 3-1: USB disconnect, device number 20 [ 319.479442][ T29] audit: type=1400 audit(1731308117.608:643): avc: denied { create } for pid=9215 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 319.657905][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 320.139216][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 320.148445][ T29] audit: type=1400 audit(1731308118.298:644): avc: denied { ioctl } for pid=9283 comm="syz.1.808" path="socket:[20413]" dev="sockfs" ino=20413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.155499][ T9286] pim6reg1: entered promiscuous mode [ 320.179960][ T9286] pim6reg1: entered allmulticast mode [ 320.528246][ T4956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 320.690979][ T4956] usb 2-1: device descriptor read/64, error -71 [ 320.936662][ T4956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 321.081423][ T4956] usb 2-1: device descriptor read/64, error -71 [ 321.103616][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 321.155125][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 321.421868][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 321.512612][ T5909] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.527490][ T4956] usb usb2-port1: attempt power cycle [ 321.545341][ T5909] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 321.567774][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.582486][ T29] audit: type=1400 audit(1731308119.748:645): avc: denied { recv } for pid=5812 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.184 dest=41594 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.607985][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.614425][ T9302] block nbd2: Device being setup by another task [ 321.631105][ T5909] usb 5-1: config 0 descriptor?? [ 321.803073][ T53] block nbd2: Receive control failed (result -32) [ 321.810216][ T5841] block nbd2: Receive control failed (result -32) [ 321.823467][ T9300] block nbd2: shutting down sockets [ 321.857720][ T5877] usb 5-1: USB disconnect, device number 21 [ 321.920986][ T4956] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.943067][ T4956] usb 2-1: device descriptor read/8, error -71 [ 321.985926][ T9311] FAULT_INJECTION: forcing a failure. [ 321.985926][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 321.999255][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.5.815 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 322.009868][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 322.019949][ T9311] Call Trace: [ 322.023236][ T9311] [ 322.026205][ T9311] dump_stack_lvl+0x16c/0x1f0 [ 322.030915][ T9311] should_fail_ex+0x497/0x5b0 [ 322.035609][ T9311] ? fs_reclaim_acquire+0xae/0x150 [ 322.040745][ T9311] should_failslab+0xc2/0x120 [ 322.045520][ T9311] __kmalloc_cache_noprof+0x6b/0x300 [ 322.050818][ T9311] ? inode_doinit_use_xattr+0x54/0x410 [ 322.056284][ T9311] inode_doinit_use_xattr+0x54/0x410 [ 322.061578][ T9311] inode_doinit_with_dentry+0x51f/0x12c0 [ 322.067227][ T9311] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 322.073308][ T9311] ? mark_held_locks+0x9f/0xe0 [ 322.078083][ T9311] selinux_d_instantiate+0x26/0x30 [ 322.083222][ T9311] security_d_instantiate+0x142/0x1a0 [ 322.088633][ T9311] d_splice_alias+0x94/0xdf0 [ 322.093270][ T9311] ovl_lookup+0xe8c/0x21f0 [ 322.097793][ T9311] ? __pfx_ovl_lookup+0x10/0x10 [ 322.102673][ T9311] ? __pfx_d_alloc_parallel+0x10/0x10 [ 322.108066][ T9311] ? __d_lookup+0x266/0x4a0 [ 322.112595][ T9311] ? __pfx_ovl_lookup+0x10/0x10 [ 322.117539][ T9311] lookup_open.isra.0+0x92d/0x14c0 [ 322.122705][ T9311] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 322.128286][ T9311] ? path_openat+0x88a/0x2d60 [ 322.132983][ T9311] ? lookup_fast+0x155/0x540 [ 322.137715][ T9311] path_openat+0x904/0x2d60 [ 322.142238][ T9311] ? __pfx_path_openat+0x10/0x10 [ 322.147271][ T9311] ? __pfx___lock_acquire+0x10/0x10 [ 322.152484][ T9311] do_filp_open+0x1dc/0x430 [ 322.156992][ T9311] ? __pfx_do_filp_open+0x10/0x10 [ 322.162052][ T9311] ? _raw_spin_unlock+0x3e/0x50 [ 322.166916][ T9311] ? alloc_fd+0x2d7/0x6c0 [ 322.171290][ T9311] do_sys_openat2+0x17a/0x1e0 [ 322.175989][ T9311] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.181203][ T9311] ? ksys_write+0x19e/0x260 [ 322.185710][ T9311] __x64_sys_open+0x154/0x1e0 [ 322.190394][ T9311] ? __pfx___x64_sys_open+0x10/0x10 [ 322.195617][ T9311] do_syscall_64+0xcd/0x250 [ 322.200124][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.206051][ T9311] RIP: 0033:0x7faa3017e719 [ 322.210451][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.230053][ T9311] RSP: 002b:00007faa30fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 322.238481][ T9311] RAX: ffffffffffffffda RBX: 00007faa30336130 RCX: 00007faa3017e719 [ 322.246449][ T9311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000209e1000 [ 322.254411][ T9311] RBP: 00007faa30fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 322.262370][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.270331][ T9311] R13: 0000000000000000 R14: 00007faa30336130 R15: 00007ffe7db6a908 [ 322.278332][ T9311] [ 322.980863][ T4956] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 323.003482][ T4956] usb 2-1: device descriptor read/8, error -71 [ 323.111644][ T4956] usb usb2-port1: unable to enumerate USB device [ 323.589146][ T29] audit: type=1400 audit(1731308121.748:646): avc: denied { read } for pid=9331 comm="syz.2.823" laddr=::1 lport=20003 faddr=::1 fport=36200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 323.612128][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.626097][ T9336] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.744707][ T29] audit: type=1400 audit(1731308121.888:647): avc: denied { mount } for pid=9339 comm="syz.4.827" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 323.803569][ T29] audit: type=1400 audit(1731308121.968:648): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 323.839375][ T9334] dccp_close: ABORT with 32 bytes unread [ 324.195508][ T9349] serio: Serial port ptm0 [ 324.236904][ T29] audit: type=1400 audit(1731308122.348:649): avc: denied { block_suspend } for pid=9344 comm="syz.4.828" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.520715][ T29] audit: type=1400 audit(1731308122.668:650): avc: denied { connect } for pid=9346 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.948057][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 325.086374][ T9368] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 325.094247][ T9368] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.830'. [ 325.110975][ T9368] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 325.118697][ T9368] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.830'. [ 325.161255][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 325.215177][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.232563][ T9368] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 325.239131][ T9368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.247307][ T9368] vhci_hcd vhci_hcd.0: Device attached [ 325.277724][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.470929][ T5864] vhci_hcd: vhci_device speed not set [ 325.486444][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.498077][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.531147][ T5864] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 325.543208][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.562011][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.591097][ T5879] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 325.622780][ T9370] vhci_hcd: connection reset by peer [ 325.630264][ T7896] vhci_hcd: stop threads [ 325.635115][ T7896] vhci_hcd: release socket [ 325.644659][ T7896] vhci_hcd: disconnect device [ 325.740881][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 325.753850][ T5879] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.767260][ T5879] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.793535][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.010220][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 326.018649][ T5879] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 326.027919][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.039717][ T5879] usb 5-1: config 0 descriptor?? [ 327.046837][ T9362] cgroup: fork rejected by pids controller in /syz4 [ 327.067273][ T5908] usb 6-1: GET_CAPABILITIES returned 0 [ 327.072922][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 327.568286][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.579481][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.601187][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 327.610796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.691274][ T9531] zonefs (nullb0) ERROR: Not a zoned block device [ 327.707528][ T29] audit: type=1400 audit(1731308125.848:651): avc: denied { mounton } for pid=9424 comm="syz.1.835" path="/178/file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 327.918943][ T9] usb 3-1: config 0 descriptor?? [ 328.534496][ T5909] usb 6-1: USB disconnect, device number 6 [ 328.700988][ T5908] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 328.774619][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.784927][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.864693][ T9] sony 0003:054C:024B.000C: Fixing up Sony RF Receiver report descriptor [ 328.881208][ T9] sony 0003:054C:024B.000C: unexpected long global item [ 328.891914][ T9] sony 0003:054C:024B.000C: parse failed [ 328.898180][ T9] sony 0003:054C:024B.000C: probe with driver sony failed with error -22 [ 329.288571][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.308854][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.319406][ T5908] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 329.332603][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.350429][ T5908] usb 2-1: config 0 descriptor?? [ 329.780619][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 329.791094][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.807881][ T5908] usb 2-1: USB disconnect, device number 30 [ 330.179775][ T9] usb 3-1: USB disconnect, device number 21 [ 330.459556][ T9546] input: syz1 as /devices/virtual/input/input18 [ 330.670928][ T5864] vhci_hcd: vhci_device speed not set [ 330.810850][ T5877] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 330.973548][ T5877] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 330.983455][ T5877] usb 2-1: config 0 has no interface number 0 [ 330.990408][ T5877] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 331.004468][ T5877] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 331.014284][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.023567][ T5877] usb 2-1: Product: syz [ 331.028244][ T5877] usb 2-1: Manufacturer: syz [ 331.033220][ T5877] usb 2-1: SerialNumber: syz [ 331.040112][ T5877] usb 2-1: config 0 descriptor?? [ 331.045931][ T9554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.059554][ T5877] as10x_usb: device has been detected [ 331.068670][ T5877] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 331.089056][ T5877] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 331.188961][ T5877] as10x_usb: error during firmware upload part1 [ 331.368856][ T9556] netlink: 'syz.5.845': attribute type 4 has an invalid length. [ 331.376565][ T9556] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.845'. [ 331.387410][ T9556] netlink: 'syz.5.845': attribute type 4 has an invalid length. [ 331.395438][ T9556] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.845'. [ 331.411748][ T5877] Registered device PCTV Systems picoStick (74e) [ 331.432143][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 331.454550][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.466242][ T9556] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 331.472795][ T9556] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.476627][ T5879] usb 5-1: USB disconnect, device number 22 [ 331.480555][ T9556] vhci_hcd vhci_hcd.0: Device attached [ 331.499044][ T9562] vhci_hcd: connection closed [ 331.501808][ T7896] vhci_hcd: stop threads [ 331.610500][ T7896] vhci_hcd: release socket [ 331.681143][ T5877] vhci_hcd: vhci_device speed not set [ 331.725007][ T9566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.741659][ T5877] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 331.745593][ T7896] vhci_hcd: disconnect device [ 331.873929][ T9566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.314272][ T9558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.400805][ T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 332.409368][ T5909] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 332.570748][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 332.575982][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 332.584076][ T5909] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 332.592452][ T5909] usb 6-1: config 8 has no interface number 0 [ 332.598582][ T5909] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 332.610318][ T5909] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 332.622174][ T5909] usb 6-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 332.633108][ T5909] usb 6-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.646224][ T5909] usb 6-1: config 8 interface 206 has no altsetting 0 [ 332.655733][ T45] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 332.664929][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.673163][ T45] usb 5-1: Product: syz [ 332.677401][ T45] usb 5-1: Manufacturer: syz [ 332.682400][ T45] usb 5-1: SerialNumber: syz [ 332.687297][ T5909] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 332.696456][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.704514][ T5909] usb 6-1: Product: syz [ 332.708679][ T5909] usb 6-1: Manufacturer: syz [ 332.713928][ T5909] usb 6-1: SerialNumber: syz [ 332.719363][ T45] usb 5-1: config 0 descriptor?? [ 332.728576][ T45] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 332.878242][ T9574] netlink: 80 bytes leftover after parsing attributes in process `syz.2.849'. [ 438.160664][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 438.167677][ C1] rcu: 0-...!: (1 GPs behind) idle=349c/1/0x4000000000000000 softirq=31583/31584 fqs=0 [ 438.178729][ C1] rcu: (detected by 1, t=10506 jiffies, g=25309, q=126 ncpus=2) [ 438.186474][ C1] Sending NMI from CPU 1 to CPUs 0: [ 438.186509][ C0] NMI backtrace for cpu 0 [ 438.186523][ C0] CPU: 0 UID: 0 PID: 9569 Comm: syz.5.847 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 438.186546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 438.186557][ C0] RIP: 0010:__lock_acquire+0xd5f/0x3ce0 [ 438.186583][ C0] Code: 00 0f 85 63 2f 00 00 48 8b 44 24 08 48 8b 54 24 28 49 89 87 d0 0a 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 <84> c0 74 0e 3c 03 7f 0a 48 8b 7c 24 28 e8 8f a6 84 00 41 8b 87 d8 [ 438.186601][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00000802 [ 438.186616][ C0] RAX: 0000000000000000 RBX: ffff8880283dd472 RCX: 0000000000000001 [ 438.186628][ C0] RDX: 1ffff1100507ba6b RSI: 00000000541afa23 RDI: ffffffff96e30b30 [ 438.186641][ C0] RBP: ffffffff96eae6a8 R08: 0000000000000000 R09: fffffbfff2dc5d88 [ 438.186654][ C0] R10: ffffffff96e2ec47 R11: 0000000000000000 R12: ffff8880283dd449 [ 438.186666][ C0] R13: ffff8880283dd450 R14: 0000000000000002 R15: ffff8880283dc880 [ 438.186679][ C0] FS: 00007faa3100f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 438.186698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.186711][ C0] CR2: 0000001b31ce8ff8 CR3: 00000000559d6000 CR4: 00000000003526f0 [ 438.186723][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.186734][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.186746][ C0] Call Trace: [ 438.186753][ C0] [ 438.186761][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 438.186789][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 438.186818][ C0] ? nmi_handle+0x1a9/0x5c0 [ 438.186838][ C0] ? __lock_acquire+0xd5f/0x3ce0 [ 438.186855][ C0] ? default_do_nmi+0x6a/0x160 [ 438.186878][ C0] ? exc_nmi+0x170/0x1e0 [ 438.186900][ C0] ? end_repeat_nmi+0xf/0x53 [ 438.186921][ C0] ? __lock_acquire+0xd5f/0x3ce0 [ 438.186938][ C0] ? __lock_acquire+0xd5f/0x3ce0 [ 438.186955][ C0] ? __lock_acquire+0xd5f/0x3ce0 [ 438.186973][ C0] [ 438.186978][ C0] [ 438.186988][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 438.187011][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 438.187029][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 438.187049][ C0] lock_acquire.part.0+0x11b/0x380 [ 438.187066][ C0] ? advance_sched+0x679/0xc60 [ 438.187089][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 438.187108][ C0] ? rcu_is_watching+0x12/0xc0 [ 438.187130][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 438.187154][ C0] ? advance_sched+0x679/0xc60 [ 438.187176][ C0] ? lock_acquire+0x2f/0xb0 [ 438.187192][ C0] ? advance_sched+0x679/0xc60 [ 438.187215][ C0] advance_sched+0x67f/0xc60 [ 438.187236][ C0] ? advance_sched+0x679/0xc60 [ 438.187262][ C0] ? __pfx_advance_sched+0x10/0x10 [ 438.187283][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 438.187306][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 438.187327][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 438.187356][ C0] hrtimer_interrupt+0x31b/0x800 [ 438.187381][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 438.187402][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 438.187431][ C0] [ 438.187436][ C0] [ 438.187442][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.187472][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 438.187492][ C0] Code: b8 ff ff ff ff 65 0f c1 05 70 de 97 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 438.187510][ C0] RSP: 0018:ffffc9000b7078c0 EFLAGS: 00000206 [ 438.187524][ C0] RAX: 0000000000000046 RBX: 1ffff920016e0f19 RCX: 0000000000000001 [ 438.187536][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cd340 RDI: ffffffff8bd1b440 [ 438.187549][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc5d93 [ 438.187560][ C0] R10: ffffffff96e2ec9f R11: 000000000000012e R12: 0000000000000000 [ 438.187572][ C0] R13: ffff88805cd517d8 R14: 0000000000000000 R15: 0000000000000000 [ 438.187591][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 438.187610][ C0] ? rcu_is_watching+0x12/0xc0 [ 438.187632][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 438.187655][ C0] ? find_inode+0xae/0x5e0 [ 438.187675][ C0] ? inode_insert5+0x198/0x760 [ 438.187696][ C0] ? lock_acquire+0x2f/0xb0 [ 438.187712][ C0] ? inode_insert5+0x198/0x760 [ 438.187734][ C0] _raw_spin_lock+0x2e/0x40 [ 438.187758][ C0] ? inode_insert5+0x198/0x760 [ 438.187778][ C0] inode_insert5+0x198/0x760 [ 438.187799][ C0] ? __pfx_ovl_inode_set+0x10/0x10 [ 438.187826][ C0] ? __pfx_ovl_inode_test+0x10/0x10 [ 438.187855][ C0] ? __pfx_inode_insert5+0x10/0x10 [ 438.187879][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 438.187899][ C0] ovl_get_inode+0x602/0x13c0 [ 438.187919][ C0] ? __pfx_ovl_get_inode+0x10/0x10 [ 438.187936][ C0] ? ovl_dentry_init_flags+0x133/0x200 [ 438.187961][ C0] ovl_instantiate+0x10b/0x2d0 [ 438.187982][ C0] ? __pfx_ovl_instantiate+0x10/0x10 [ 438.188002][ C0] ? __pfx_ovl_copyattr+0x10/0x10 [ 438.188039][ C0] ovl_create_or_link+0x4dc/0x760 [ 438.188064][ C0] ovl_create_object+0x268/0x300 [ 438.188086][ C0] ? __pfx_ovl_create_object+0x10/0x10 [ 438.188108][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 438.188136][ C0] ? security_inode_permission+0xbf/0x260 [ 438.188161][ C0] vfs_mkdir+0x57d/0x860 [ 438.188188][ C0] do_mkdirat+0x301/0x3a0 [ 438.188207][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 438.188225][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 438.188251][ C0] __x64_sys_mkdirat+0x83/0xb0 [ 438.188269][ C0] do_syscall_64+0xcd/0x250 [ 438.188288][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.188316][ C0] RIP: 0033:0x7faa3017e719 [ 438.188331][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.188349][ C0] RSP: 002b:00007faa3100f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 438.188366][ C0] RAX: ffffffffffffffda RBX: 00007faa30335f80 RCX: 00007faa3017e719 [ 438.188379][ C0] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 438.188391][ C0] RBP: 00007faa301f139e R08: 0000000000000000 R09: 0000000000000000 [ 438.188403][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.188414][ C0] R13: 0000000000000000 R14: 00007faa30335f80 R15: 00007ffe7db6a908 [ 438.188432][ C0] [ 438.188502][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g25309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 438.821693][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 438.831752][ C1] rcu: RCU grace-period kthread stack dump: [ 438.837635][ C1] task:rcu_preempt state:R running task stack:27504 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 438.849513][ C1] Call Trace: [ 438.852795][ C1] [ 438.855728][ C1] __schedule+0xe55/0x5740 [ 438.860339][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 438.865556][ C1] ? __pfx___schedule+0x10/0x10 [ 438.870422][ C1] ? schedule+0x298/0x350 [ 438.874773][ C1] ? __pfx_lock_release+0x10/0x10 [ 438.879801][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 438.885016][ C1] ? lock_acquire+0x2f/0xb0 [ 438.889553][ C1] ? schedule+0x1fd/0x350 [ 438.893901][ C1] schedule+0xe7/0x350 [ 438.898075][ C1] schedule_timeout+0x136/0x2a0 [ 438.902946][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 438.908329][ C1] ? __pfx_process_timeout+0x10/0x10 [ 438.913630][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.919457][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 438.924927][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 438.929786][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 438.935089][ C1] ? rcu_gp_init+0xc82/0x1630 [ 438.939793][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 438.945189][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 438.951021][ C1] rcu_gp_kthread+0x271/0x380 [ 438.955708][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.960914][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 438.966141][ C1] ? __kthread_parkme+0x148/0x220 [ 438.971175][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.976382][ C1] kthread+0x2c1/0x3a0 [ 438.980469][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.985681][ C1] ? __pfx_kthread+0x10/0x10 [ 438.990281][ C1] ret_from_fork+0x45/0x80 [ 438.994700][ C1] ? __pfx_kthread+0x10/0x10 [ 438.999300][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.004090][ C1] [ 439.007107][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 439.013442][ C1] CPU: 1 UID: 0 PID: 9577 Comm: syz.2.850 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 439.024289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 439.034525][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 439.041575][ C1] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 439.061370][ C1] RSP: 0018:ffffc9000beefb28 EFLAGS: 00000202 [ 439.067443][ C1] RAX: 0000000000000001 RBX: ffff8880b8646b80 RCX: ffffffff81815ffc [ 439.076030][ C1] RDX: 0000000000040000 RSI: 0000000000000001 RDI: 0000000000000000 [ 439.084000][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 439.091971][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d71 [ 439.099948][ C1] R13: 0000000000000001 R14: ffff8880b8646b88 R15: ffff8880b8740100 [ 439.107926][ C1] FS: 00007fb799f436c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 439.116859][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.123447][ C1] CR2: 00007fb799f42f98 CR3: 0000000069e2a000 CR4: 00000000003526f0 [ 439.131537][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.139519][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.147583][ C1] Call Trace: [ 439.150950][ C1] [ 439.153802][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 439.160144][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 439.165354][ C1] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 439.170836][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 439.176566][ C1] ? __asan_memcpy+0x3c/0x60 [ 439.181169][ C1] ? __asan_memcpy+0x3c/0x60 [ 439.185767][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 439.191072][ C1] ? update_process_times+0x178/0x220 [ 439.196460][ C1] ? __pfx_update_process_times+0x10/0x10 [ 439.202195][ C1] ? update_wall_time+0x1c/0x40 [ 439.207145][ C1] ? tick_nohz_handler+0x376/0x530 [ 439.212266][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 439.217732][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 439.223117][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 439.228851][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 439.234936][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 439.240079][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 439.246269][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 439.252207][ C1] [ 439.255169][ C1] [ 439.258110][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.264303][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 439.270378][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 439.276814][ C1] smp_call_function_many_cond+0x47c/0x1300 [ 439.282736][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 439.287775][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 439.292807][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 439.297928][ C1] text_poke_bp_batch+0x22b/0x760 [ 439.302968][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 439.309153][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 439.314719][ C1] ? __jump_label_patch+0x1db/0x400 [ 439.319931][ C1] ? text_poke_queue+0xef/0x180 [ 439.324794][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 439.331052][ C1] text_poke_finish+0x30/0x40 [ 439.335739][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 439.341819][ C1] jump_label_update+0x1d7/0x400 [ 439.346849][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 439.352752][ C1] static_key_enable+0x1a/0x20 [ 439.357520][ C1] sched_core_get+0x8a/0xa0 [ 439.362026][ C1] sched_core_share_pid+0x41f/0xa00 [ 439.367236][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.373146][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 439.378887][ C1] ? static_key_count+0x5a/0x70 [ 439.383740][ C1] ? security_task_prctl+0x11c/0x160 [ 439.389047][ C1] __do_sys_prctl+0xeee/0x1eb0 [ 439.393820][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 439.399023][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 439.404326][ C1] do_syscall_64+0xcd/0x250 [ 439.408835][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.414747][ C1] RIP: 0033:0x7fb79917e719 [ 439.419163][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.438879][ C1] RSP: 002b:00007fb799f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 439.447304][ C1] RAX: ffffffffffffffda RBX: 00007fb799335f80 RCX: 00007fb79917e719 [ 439.455365][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 439.463336][ C1] RBP: 00007fb7991f139e R08: 0000000000000000 R09: 0000000000000000 [ 439.471311][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 439.479376][ C1] R13: 0000000000000001 R14: 00007fb799335f80 R15: 00007ffd9d94e378 [ 439.487367][ C1]