last executing test programs: 13.25547398s ago: executing program 2 (id=1348): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x19}, {0x6, [{0xc9, 0x3fc}, {0xc9, 0x80}, {0xc8, 0x9}, {0xc8, 0x37}, {0xc8, 0xa034}, {0xc9, 0x93}]}}}, 0x1c) 12.965477985s ago: executing program 2 (id=1351): mkdir(0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) eventfd(0x3) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$binder(0x0, 0x0, &(0x7f00000000c0), 0x800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x15}, 0xa) 11.587370906s ago: executing program 2 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="aada3f77dbd09a1a000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) fsopen(0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100001d122610d118af1e79070102030109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="df17c8000000"], 0x0, 0x0}) 10.98593612s ago: executing program 4 (id=1359): fsopen(&(0x7f0000000000)='vfat\x00', 0x0) getxattr(0x0, &(0x7f0000001040)=@random={'trusted.', '/de\x02\x00\x00\x00\x00\x00\x00\x00\xddQv\x13n5\xfeFz\xe6+\x894\xb6|\xabb|\xc90<^Az)\xcd\xc7*h\"\xd1@O\x1b\xce\x8a\xef_\x0f\xcdGs\x97\xfbS\xab\x96q\xa09\'\x87\x93\xac\x88o\xca\x89k\xe8'}, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x100}, 0x18) getdents64(r0, &(0x7f00000010c0)=""/4096, 0x1000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000000010d, 0x3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x100, 0x37f, 0x148, 0x100, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x89}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0xe1c8, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$inet6_sctp(0xa, 0x1, 0x84) accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x76}, 0x9c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x217}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 10.912007519s ago: executing program 3 (id=1361): ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000001000)={0xffffffff, 0x637, 0x2, 0x0, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) 10.619072157s ago: executing program 1 (id=1362): ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000001000)={0xffffffff, 0x637, 0x2, 0x0, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) (fail_nth: 1) 9.77513101s ago: executing program 3 (id=1363): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r0 = socket$kcm(0x29, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20080, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x7fff, 0x2, 0x5, 0xa054}, 0x10) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x148, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaca3, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x2, 0x4, 0x0, {0x9, 0x1, 0x0, 0x1ce, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x8, 0x24}}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0xb}, {0x1b}, {0x18, 0x1}, {0x16}, {0x5, 0x1}, {0x24}, {0x1, 0x1}, {0x3b}, {0x6f, 0x1}, {0x6c}, {0x24, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0xe, 0x1}, {0x20, 0x1}, {0x12, 0x1}, {0x5}, {0x3}, {0x36}, {0xb, 0x1}, {0x0, 0x1}]}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0eb2e28dded1cd357694b573b5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3ac3618cc36f7c345d94dafc1"}]}, {0x4}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c09aa71aa13ad22bc4d58314d4"}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x0, 0x6, 0x0, {0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x3, 0x7}}]}, 0x148}}, 0x8800) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '%:&'}, {}, {0x20, '\x00'}, {0x20, '\xf3)@.'}, {0x20, '\x00'}], 0xa, "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"}, 0x1019) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001500)=0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001580)={@initdev, @remote, 0x0}, &(0x7f00000015c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=@getchain={0x54, 0x66, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {0xc, 0xd}, {0x3, 0xffee}}, [{0x8, 0xb, 0xffff6c26}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x1409, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x4805) pipe2(&(0x7f0000001800)={0xffffffffffffffff}, 0x4880) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) sendmmsg$unix(r4, &(0x7f0000001b80)=[{{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000018c0)="ab7c0fd58cc9007300", 0x9}, {&(0x7f0000001900)="0430888d244450cfb253732fd8d509ba9160525d9c920c9557e04018e83b7576dca84a8465118bd8024548b82c782d827f5f5baa9b9a6cd9d946034896b290eefe00914cf2cbb13197a930842d8a780d21e7f2b3", 0x54}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r5, r2}}}], 0x20, 0x44024}}], 0x1, 0x20020000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r6, &(0x7f0000004180)=[{{&(0x7f0000001bc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/121, 0x79}, {&(0x7f0000002cc0)=""/133, 0x85}, {&(0x7f0000002d80)=""/163, 0xa3}], 0x4, &(0x7f0000002e80)=""/239, 0xef}, 0x5}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/233, 0xe9}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/203, 0xcb}], 0x3, &(0x7f0000003240)=""/225, 0xe1}, 0x6}, {{&(0x7f0000003340)=@x25, 0x80, &(0x7f0000003440)=[{&(0x7f00000033c0)=""/40, 0x28}, {&(0x7f0000003400)}], 0x2, &(0x7f0000003480)=""/100, 0x64}, 0x8}, {{&(0x7f0000003500)=@rc, 0x80, &(0x7f0000003740)=[{&(0x7f0000003580)=""/107, 0x6b}, {&(0x7f0000003600)=""/41, 0x29}, {&(0x7f0000003640)=""/42, 0x2a}, {&(0x7f0000003680)=""/67, 0x43}, {&(0x7f0000003700)=""/8, 0x8}], 0x5}, 0x1}, {{&(0x7f00000037c0)=@nl=@proc, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/152, 0x98}, {&(0x7f0000003900)=""/250, 0xfa}, {&(0x7f0000003a00)=""/47, 0x2f}, {&(0x7f0000003a40)=""/117, 0x75}, {&(0x7f0000003ac0)=""/23, 0x17}, {&(0x7f0000003b00)=""/172, 0xac}], 0x6, &(0x7f0000003c40)=""/7, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003c80)=""/26, 0x1a}, {&(0x7f0000003cc0)=""/231, 0xe7}, {&(0x7f0000003dc0)=""/112, 0x70}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/128, 0x80}, {&(0x7f0000003f00)=""/120, 0x78}, {&(0x7f0000003f80)=""/75, 0x4b}], 0x7, &(0x7f0000004080)=""/237, 0xed}, 0x2}], 0x6, 0x40000180, &(0x7f0000004300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000004380), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000043c0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000046c0)=@assoc_value={0x0, 0x1}, &(0x7f0000004700)=0x8) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000004880)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0xa850000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x2d}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) 9.237393577s ago: executing program 3 (id=1364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000380)=@deltclass={0x48, 0x29, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xa, 0x1}, {0x3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_red={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040810}, 0x8010) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x6, 0x0, &(0x7f00000006c0)=[r2, r0, r0, r0, r2, r2, r1, r2, r2]}, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 9.136482858s ago: executing program 4 (id=1365): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index, 0x9, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000005c0)="0182024a9682abc163693a20d7debace935a59bf1cd6e8a9a9be8d7b20", 0x1d}], 0x2, 0x0, 0x0, {0xfffc}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000019000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000f0ffff8e"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="17001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x700, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x476f, 0x10, 0x8000000000000000, 0x7}, &(0x7f0000000280)=0x18) ioctl$PPPIOCSFLAGS(r13, 0x40047459, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f00000002c0)={r14, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x3, 0x5, 0x10000, 0x6ba4, 0x1, 0xb2, 0x9}, 0x9c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001ffffff6e0000000800050003000000"], 0x30}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x64}}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 8.955351661s ago: executing program 1 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000003c0)={0x0, 0x4, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x78}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0x19) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_ringparam={0x10, 0x4, 0xf, 0xe, 0x124a, 0x8, 0x2, 0xa5c, 0x4a}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=0xe89, 0x8, 0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) 7.332880853s ago: executing program 1 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x10001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000003c0)={0x0, 0x4, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x78}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0x19) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_ringparam={0x10, 0x4, 0xf, 0xe, 0x124a, 0x8, 0x2, 0xa5c, 0x4a}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=0xe89, 0x8, 0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) 7.269486377s ago: executing program 4 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040010004400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) 7.266160379s ago: executing program 2 (id=1370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @local=@item_012={0x2, 0x2, 0x1, "40ef"}, @local=@item_4={0x3, 0x2, 0x2, "611d6f7d"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "09009215"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, 0x3ff, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_io_uring_setup(0x748d, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0, 0x0, 0x2}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r10, 0xfffffffffffffffc, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f0000000240)={0x80000, 0x0, [0x8, 0xc24c, 0x0, 0x8, 0xc, 0x4e4, 0xe30351e, 0x5]}) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x8040ae9f, &(0x7f0000000000)=@arm64) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a70700000008030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x234}]}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000600), 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xc) sched_setaffinity(r12, 0x8, &(0x7f00000005c0)=0x1) io_uring_setup(0x2c60, &(0x7f0000000500)={0x0, 0x2478, 0x40, 0x0, 0x2ad, 0x0, r7}) socket$nl_route(0x10, 0x3, 0x0) 6.918750919s ago: executing program 4 (id=1372): r0 = request_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000480)=""/21, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) chdir(&(0x7f0000000100)='./file0\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1b0, r5, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9da}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "815131a002bf34a19e5339962211fb2c5db640a83119e111cfa4522be216f37a2f40b2ae8398bd7884590e52d6c52234ee459e34072579a59365ebc36b8dfebe12d3adf0da9ee894883ac1bf209bd3443d1dba7ec4a79faea9c3232c93c61fe82e58ee69166113549ce00f8290a325dc44896d59a8b54f7a9c5014334b9a23f4a7589cd01380b5e267320339f0fed6ab02b7129feef8efe5185e5759d91be483c85cc2753aebda9afda17246f1f317d5d997a4cca79b07805c6414225a6aa7e6b35f9d918a1a0130cc246c"}, @NL80211_ATTR_VENDOR_DATA={0x9, 0xc5, "4bd3a67fa2"}, @NL80211_ATTR_VENDOR_DATA={0x97, 0xc5, "4de901b807ad79551dea03b1381b56e946ca67c57717476c37f9b5f4477e19b9320ff814ed628430e04f753a5ce7f438fcbbd04db02569a61529f9a91c978945463a746184b9352daab7bf0159573ed7516f2c6dc5c613613b12393e8933d1bfab3d6525f8469f012ed087ccdef0e873451e783d9162079bb35ba86d266a27579f3b3e09ba1b7c7088283089195710a5c9d2d9"}]}, 0x1b0}}, 0xc008) io_getevents(0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd) setresuid(0x0, 0xffffffffffffffff, 0xee00) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r8) 6.787639644s ago: executing program 3 (id=1373): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x70f, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x9}]}, 0x24}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x4b44, 0xfffffffffffffffc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="021400020e000000000000000000000005000700000000000a004e2100000004fe8000000000000000000000000000bbff00000000000004020001000000fff803000000000000a005000500000000000a004e24000005e3ff010000000000400000000000000001c1ad000000000000ffcde6aeefbc17077ccad661a212bdf690dd738d4f82d4df11fb2d296764dca3be19b65234ac3928173447c2fd2b519b9b5c0d14fa73e29093ad6f9fba3e922cc6762443de89ae74540928179375e73cbb6ad3f1457b2f425b08cf39bda0257627f5add7680b0999dc488cd306f35a279542b08e6ebafda6a02a996bca9d34ee8b767f095e3bfb"], 0x70}, 0x1, 0x7}, 0x404c080) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmdt(r5) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 6.03011352s ago: executing program 0 (id=1374): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r0 = socket$kcm(0x29, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20080, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x7fff, 0x2, 0x5, 0xa054}, 0x10) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x148, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaca3, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x2, 0x4, 0x0, {0x9, 0x1, 0x0, 0x1ce, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x8, 0x24}}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0xb}, {0x1b}, {0x18, 0x1}, {0x16}, {0x5, 0x1}, {0x24}, {0x1, 0x1}, {0x3b}, {0x6f, 0x1}, {0x6c}, {0x24, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0xe, 0x1}, {0x20, 0x1}, {0x12, 0x1}, {0x5}, {0x3}, {0x36}, {0xb, 0x1}, {0x0, 0x1}]}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0eb2e28dded1cd357694b573b5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3ac3618cc36f7c345d94dafc1"}]}, {0x4}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c09aa71aa13ad22bc4d58314d4"}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x0, 0x6, 0x0, {0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x3, 0x7}}]}, 0x148}}, 0x8800) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '%:&'}, {}, {0x20, '\x00'}, {0x20, '\xf3)@.'}, {0x20, '\x00'}], 0xa, "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"}, 0x1019) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001500)=0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001580)={@initdev, @remote, 0x0}, &(0x7f00000015c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=@getchain={0x54, 0x66, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {0xc, 0xd}, {0x3, 0xffee}}, [{0x8, 0xb, 0xffff6c26}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x1409, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x4805) pipe2(&(0x7f0000001800)={0xffffffffffffffff}, 0x4880) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) sendmmsg$unix(r4, &(0x7f0000001b80)=[{{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000018c0)="ab7c0fd58cc9007300", 0x9}, {&(0x7f0000001900)="0430888d244450cfb253732fd8d509ba9160525d9c920c9557e04018e83b7576dca84a8465118bd8024548b82c782d827f5f5baa9b9a6cd9d946034896b290eefe00914cf2cbb13197a930842d8a780d21e7f2b3", 0x54}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r5, r2}}}], 0x20, 0x44024}}], 0x1, 0x20020000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r6, &(0x7f0000004180)=[{{&(0x7f0000001bc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/121, 0x79}, {&(0x7f0000002cc0)=""/133, 0x85}, {&(0x7f0000002d80)=""/163, 0xa3}], 0x4, &(0x7f0000002e80)=""/239, 0xef}, 0x5}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/233, 0xe9}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/203, 0xcb}], 0x3, &(0x7f0000003240)=""/225, 0xe1}, 0x6}, {{&(0x7f0000003340)=@x25, 0x80, &(0x7f0000003440)=[{&(0x7f00000033c0)=""/40, 0x28}, {&(0x7f0000003400)}], 0x2, &(0x7f0000003480)=""/100, 0x64}, 0x8}, {{&(0x7f0000003500)=@rc, 0x80, &(0x7f0000003740)=[{&(0x7f0000003580)=""/107, 0x6b}, {&(0x7f0000003600)=""/41, 0x29}, {&(0x7f0000003640)=""/42, 0x2a}, {&(0x7f0000003680)=""/67, 0x43}, {&(0x7f0000003700)=""/8, 0x8}], 0x5}, 0x1}, {{&(0x7f00000037c0)=@nl=@proc, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/152, 0x98}, {&(0x7f0000003900)=""/250, 0xfa}, {&(0x7f0000003a00)=""/47, 0x2f}, {&(0x7f0000003a40)=""/117, 0x75}, {&(0x7f0000003ac0)=""/23, 0x17}, {&(0x7f0000003b00)=""/172, 0xac}], 0x6, &(0x7f0000003c40)=""/7, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003c80)=""/26, 0x1a}, {&(0x7f0000003cc0)=""/231, 0xe7}, {&(0x7f0000003dc0)=""/112, 0x70}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/128, 0x80}, {&(0x7f0000003f00)=""/120, 0x78}, {&(0x7f0000003f80)=""/75, 0x4b}], 0x7, &(0x7f0000004080)=""/237, 0xed}, 0x2}], 0x6, 0x40000180, &(0x7f0000004300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000004380), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000043c0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000046c0)=@assoc_value={0x0, 0x1}, &(0x7f0000004700)=0x8) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000004880)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0xa850000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x2d}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) 5.834524646s ago: executing program 0 (id=1375): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000080211000001080211000000aa09b799c0d70000000000000000000064000110000602020202020201010b"], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.140132584s ago: executing program 4 (id=1376): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000080211000001080211000000aa09b799c0d70000000000000000000064000110000602020202020201010b"], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (fail_nth: 1) 5.047429639s ago: executing program 1 (id=1377): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="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", 0x111}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.790390486s ago: executing program 0 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, r1, 0x2) mount_setattr(r5, &(0x7f0000000440)='./file0\x00', 0x800, &(0x7f00000005c0)={0x4, 0xfc, 0x0, {r5}}, 0x20) 4.712415643s ago: executing program 0 (id=1379): getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) (fail_nth: 1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r5 = timerfd_create(0x7, 0x800) timerfd_gettime(r5, &(0x7f0000000180)) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) utime(&(0x7f00000003c0)='./cgroup\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, 0x0, 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.135143434s ago: executing program 0 (id=1380): getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r5 = timerfd_create(0x7, 0x800) timerfd_gettime(r5, &(0x7f0000000180)) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) utime(&(0x7f00000003c0)='./cgroup\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, 0x0, 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.133792922s ago: executing program 1 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1, 0x3, 0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r11, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x800000000000, 0xfffffffffffffff9}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 4.059241589s ago: executing program 2 (id=1382): r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r6 = timerfd_create(0x7, 0x800) timerfd_gettime(r6, &(0x7f0000000180)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x600041, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000400)='%-5lx \x00'}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@base={0x1c, 0x0, 0x0, 0x2000, 0x4405, r8, 0x0, '\x00', 0x0, r9, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) utime(&(0x7f00000003c0)='./cgroup\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, 0x0, 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.661259515s ago: executing program 0 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040010004400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 2.450285561s ago: executing program 3 (id=1384): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = timerfd_create(0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) (async, rerun: 32) r4 = dup(r1) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000000}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000400db4e060000000364bc24eab55665bdd2bbf905f7ddca0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72e8ed", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.449767532s ago: executing program 4 (id=1385): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0xc, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x600, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c4, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x59c, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c3, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xec, 0x15, 0x0, 0x0, {{0x7}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xd0, 0x5, 0x0, 0x0, {{0xa}, {0x4}, {0xa2, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e25}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e5995f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x600}, 0x1, 0x0, 0x0, 0x1}, 0x42a45aeb8050ec88) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000240)=0x262, 0x4) 871.512924ms ago: executing program 1 (id=1386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="aada3f77dbd09a1a000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100001d122610d118af1e79070102030109021b0001000000000904"], 0x0) socket$alg(0x26, 0x5, 0x0) 870.979625ms ago: executing program 2 (id=1387): fsopen(&(0x7f0000000000)='vfat\x00', 0x0) getxattr(0x0, &(0x7f0000001040)=@random={'trusted.', '/de\x02\x00\x00\x00\x00\x00\x00\x00\xddQv\x13n5\xfeFz\xe6+\x894\xb6|\xabb|\xc90<^Az)\xcd\xc7*h\"\xd1@O\x1b\xce\x8a\xef_\x0f\xcdGs\x97\xfbS\xab\x96q\xa09\'\x87\x93\xac\x88o\xca\x89k\xe8'}, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x100}, 0x18) getdents64(r0, &(0x7f00000010c0)=""/4096, 0x1000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000000010d, 0x3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x100, 0x37f, 0x148, 0x100, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x89}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0xe1c8, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$inet6_sctp(0xa, 0x1, 0x84) accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x76}, 0x9c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x217}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 0s ago: executing program 3 (id=1388): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="1700000002", 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) flistxattr(r3, &(0x7f0000000000)=""/1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r6}}, 0x48) r7 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r10, &(0x7f0000000200)='~', 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) kernel console output (not intermixed with test programs): ux_netlbl_socket_setsockopt+0x10/0x10 [ 313.497154][ T9008] ? ipv6_setsockopt+0xcb/0x170 [ 313.501976][ T9008] ipv6_setsockopt+0xcb/0x170 [ 313.506631][ T9008] udpv6_setsockopt+0x7d/0xd0 [ 313.511285][ T9008] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 313.517155][ T9008] do_sock_setsockopt+0x222/0x480 [ 313.522157][ T9008] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 313.527676][ T9008] ? lock_acquire+0x2f/0xb0 [ 313.532158][ T9008] __sys_setsockopt+0x1a0/0x230 [ 313.536990][ T9008] __x64_sys_setsockopt+0xbd/0x160 [ 313.542080][ T9008] ? do_syscall_64+0x91/0x250 [ 313.546735][ T9008] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.551908][ T9008] do_syscall_64+0xcd/0x250 [ 313.556388][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.562267][ T9008] RIP: 0033:0x7f3459f7ff19 [ 313.566678][ T9008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.586299][ T9008] RSP: 002b:00007f345aca9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.594721][ T9008] RAX: ffffffffffffffda RBX: 00007f345a145fa0 RCX: 00007f3459f7ff19 [ 313.602684][ T9008] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 313.610651][ T9008] RBP: 00007f345aca90a0 R08: 00000000000005a0 R09: 0000000000000000 [ 313.618635][ T9008] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 313.623764][ T25] usb 3-1: USB disconnect, device number 8 [ 313.626596][ T9008] R13: 0000000000000000 R14: 00007f345a145fa0 R15: 00007ffc96ce9a78 [ 313.640373][ T9008] [ 313.653146][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 313.666397][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 313.676330][ T25] keyspan 3-1:0.136: device disconnected [ 313.761250][ T9014] FAULT_INJECTION: forcing a failure. [ 313.761250][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.804607][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.4.897 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 313.815231][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.825278][ T9014] Call Trace: [ 313.828543][ T9014] [ 313.831465][ T9014] dump_stack_lvl+0x16c/0x1f0 [ 313.836144][ T9014] should_fail_ex+0x497/0x5b0 [ 313.840803][ T9014] _copy_from_user+0x2e/0xd0 [ 313.845384][ T9014] copy_msghdr_from_user+0x99/0x160 [ 313.850575][ T9014] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 313.856372][ T9014] ___sys_sendmsg+0xff/0x1e0 [ 313.860946][ T9014] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.866130][ T9014] ? __pfx_lock_release+0x10/0x10 [ 313.871132][ T9014] ? trace_lock_acquire+0x14e/0x1f0 [ 313.876318][ T9014] ? __fget_files+0x206/0x3a0 [ 313.880975][ T9014] __sys_sendmsg+0x16e/0x220 [ 313.885552][ T9014] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.890651][ T9014] do_syscall_64+0xcd/0x250 [ 313.895133][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.901015][ T9014] RIP: 0033:0x7fde3417ff19 [ 313.905419][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.925027][ T9014] RSP: 002b:00007fde34f45058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.933420][ T9014] RAX: ffffffffffffffda RBX: 00007fde34345fa0 RCX: 00007fde3417ff19 [ 313.941381][ T9014] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 313.949328][ T9014] RBP: 00007fde34f450a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.957275][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.965234][ T9014] R13: 0000000000000000 R14: 00007fde34345fa0 R15: 00007fffec678298 [ 313.973186][ T9014] [ 314.088680][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.898'. [ 314.097687][ T9019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.898'. [ 314.193697][ T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 314.823606][ T9] usb 1-1: device descriptor read/64, error -71 [ 314.858965][ T25] usb 4-1: USB disconnect, device number 23 [ 315.544939][ T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 315.706609][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 315.723923][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.748658][ T9038] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.903'. [ 315.808491][ T25] usb 5-1: config 0 descriptor?? [ 315.810718][ T25] pwc: Philips SPC 900NC USB webcam detected. [ 315.905595][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 316.842742][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.463949][ T9054] nvme_fabrics: missing parameter 'transport=%s' [ 318.470508][ T9054] nvme_fabrics: missing parameter 'nqn=%s' [ 318.511905][ T25] pwc: Failed to set LED on/off time (-71) [ 318.518092][ T25] pwc: send_video_command error -71 [ 318.523290][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 318.530919][ T25] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 318.597065][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 318.603185][ T25] usb 5-1: USB disconnect, device number 31 [ 318.613492][ T29] audit: type=1400 audit(1733913393.007:419): avc: denied { read } for pid=9063 comm="syz.3.912" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 318.677906][ T29] audit: type=1400 audit(1733913393.037:420): avc: denied { open } for pid=9063 comm="syz.3.912" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 318.733558][ T29] audit: type=1400 audit(1733913393.097:421): avc: denied { read } for pid=9063 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 319.127224][ T9082] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.919'. [ 319.244124][ T9085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.918'. [ 320.023250][ T2159] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 320.863713][ T2159] usb 2-1: Using ep0 maxpacket: 8 [ 320.959793][ T2159] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.108337][ T9098] nvme_fabrics: missing parameter 'transport=%s' [ 321.115274][ T2159] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 321.133852][ T9098] nvme_fabrics: missing parameter 'nqn=%s' [ 321.148561][ T2159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 321.159857][ T2159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 321.171121][ T2159] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.196800][ T2159] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 321.243374][ T2159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.253638][ T6461] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 321.273650][ T2159] usb 2-1: Product: syz [ 321.277824][ T2159] usb 2-1: Manufacturer: syz [ 321.282388][ T2159] usb 2-1: SerialNumber: syz [ 321.312443][ T2159] usb 2-1: config 0 descriptor?? [ 321.498775][ T2159] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 321.586925][ T6461] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 321.601775][ T6461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.958493][ T6461] usb 4-1: config 0 descriptor?? [ 321.964973][ T6461] pwc: Philips SPC 900NC USB webcam detected. [ 321.995301][ T5867] usb 2-1: USB disconnect, device number 13 [ 323.433648][ T6461] pwc: Failed to set LED on/off time (-71) [ 323.460704][ T6461] pwc: send_video_command error -71 [ 323.532935][ T6461] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 323.587836][ T6461] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 323.667697][ T6461] usb 4-1: USB disconnect, device number 24 [ 325.300685][ T9147] nvme_fabrics: missing parameter 'transport=%s' [ 325.308745][ T9147] nvme_fabrics: missing parameter 'nqn=%s' [ 325.849576][ T29] audit: type=1400 audit(1733913400.217:422): avc: denied { block_suspend } for pid=9150 comm="syz.4.936" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.118790][ T29] audit: type=1400 audit(1733913400.447:423): avc: denied { mount } for pid=9160 comm="syz.2.939" name="/" dev="rpc_pipefs" ino=20622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 326.607289][ T29] audit: type=1400 audit(1733913400.457:424): avc: denied { mounton } for pid=9160 comm="syz.2.939" path="/183/file0" dev="rpc_pipefs" ino=20622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 326.630586][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.816536][ T29] audit: type=1400 audit(1733913401.167:425): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 327.565576][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 327.574690][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.2.945'. [ 327.591111][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 328.143590][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 328.263813][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 328.272110][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.461489][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.525291][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 329.238187][ T9] usb 1-1: Product: syz [ 329.242408][ T9] usb 1-1: Manufacturer: syz [ 329.247054][ T9] usb 1-1: SerialNumber: syz [ 329.259547][ T9] usb 1-1: config 0 descriptor?? [ 329.381939][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.392799][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 329.404332][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 329.415741][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 329.426830][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.542037][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.598657][ T25] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 329.607784][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.615929][ T25] usb 2-1: Product: syz [ 329.620551][ T25] usb 2-1: Manufacturer: syz [ 329.625704][ T25] usb 2-1: SerialNumber: syz [ 329.637602][ T25] usb 2-1: config 0 descriptor?? [ 329.651388][ T25] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 329.866531][ T25] usb 2-1: USB disconnect, device number 14 [ 329.951726][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 329.967839][ T29] audit: type=1400 audit(1733913404.357:426): avc: denied { watch watch_reads } for pid=9202 comm="syz.4.950" path="/187" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.024761][ T9204] process 'syz.3.949' launched '/dev/fd/7' with NULL argv: empty string added [ 330.064538][ T29] audit: type=1400 audit(1733913404.427:427): avc: denied { execute_no_trans } for pid=9199 comm="syz.3.949" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 330.365123][ T29] audit: type=1400 audit(1733913404.437:428): avc: denied { ioctl } for pid=9199 comm="syz.3.949" path="socket:[20682]" dev="sockfs" ino=20682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.533676][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 330.694063][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 330.790175][ T25] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 330.835212][ T9213] FAULT_INJECTION: forcing a failure. [ 330.835212][ T9213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.853957][ T25] usb 5-1: config 6 has no interface number 0 [ 330.870906][ T25] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 330.985020][ T25] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.992209][ T9213] CPU: 0 UID: 0 PID: 9213 Comm: syz.2.952 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 330.996596][ T25] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.007053][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.007068][ T9213] Call Trace: [ 331.007075][ T9213] [ 331.007083][ T9213] dump_stack_lvl+0x16c/0x1f0 [ 331.007110][ T9213] should_fail_ex+0x497/0x5b0 [ 331.017948][ T25] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.027956][ T9213] _copy_from_user+0x2e/0xd0 [ 331.027990][ T9213] copy_msghdr_from_user+0x99/0x160 [ 331.032957][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 331.034157][ T9213] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.034201][ T9213] ___sys_sendmsg+0xff/0x1e0 [ 331.038838][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.043482][ T9213] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.043520][ T9213] ? __pfx_lock_release+0x10/0x10 [ 331.043541][ T9213] ? trace_lock_acquire+0x14e/0x1f0 [ 331.043572][ T9213] ? __fget_files+0x206/0x3a0 [ 331.043596][ T9213] __sys_sendmsg+0x16e/0x220 [ 331.043628][ T9213] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.043668][ T9213] do_syscall_64+0xcd/0x250 [ 331.043691][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.043713][ T9213] RIP: 0033:0x7fa747b7ff19 [ 331.043729][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.043747][ T9213] RSP: 002b:00007fa748a3d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.162761][ T9213] RAX: ffffffffffffffda RBX: 00007fa747d45fa0 RCX: 00007fa747b7ff19 [ 331.170719][ T9213] RDX: 0000000000040000 RSI: 0000000020000f80 RDI: 0000000000000004 [ 331.178674][ T9213] RBP: 00007fa748a3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.186633][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.194588][ T9213] R13: 0000000000000000 R14: 00007fa747d45fa0 R15: 00007ffe3b8fd5a8 [ 331.202557][ T9213] [ 331.206130][ T25] usb 5-1: Product: syz [ 331.210339][ T25] usb 5-1: Manufacturer: syz [ 331.215206][ T25] usb 5-1: SerialNumber: syz [ 331.231459][ T25] hso 5-1:6.2: Failed to find BULK IN ep [ 331.312619][ T9217] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 331.361493][ T9217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9217 comm=syz.2.954 [ 331.914436][ T9224] vlan2: entered allmulticast mode [ 331.919801][ T2159] usb 5-1: USB disconnect, device number 32 [ 331.926615][ T9224] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 332.080543][ T9224] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 332.346706][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 332.365171][ T9] usb 1-1: USB disconnect, device number 22 [ 332.399243][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 332.408529][ T9234] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 332.499889][ T9237] input: syz0 as /devices/virtual/input/input21 [ 333.533428][ T6461] IPVS: starting estimator thread 0... [ 333.643763][ T9254] IPVS: using max 56 ests per chain, 134400 per kthread [ 333.806669][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 333.893166][ T9262] netlink: 'syz.1.965': attribute type 3 has an invalid length. [ 333.893905][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 334.192812][ T29] audit: type=1400 audit(1733913408.577:429): avc: denied { ioctl } for pid=9266 comm="syz.2.968" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 334.265271][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 334.287393][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.288058][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 334.321471][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.328716][ T9] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 334.348883][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.363655][ T9] usb 4-1: Product: syz [ 334.367920][ T9] usb 4-1: Manufacturer: syz [ 334.383018][ T29] audit: type=1400 audit(1733913408.767:430): avc: denied { nlmsg_read } for pid=9266 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.407769][ T9] usb 4-1: SerialNumber: syz [ 334.485417][ T9] usb 4-1: config 0 descriptor?? [ 334.533861][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 334.815517][ T5870] usb 3-1: device descriptor read/64, error -71 [ 335.101455][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 335.255506][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 335.345779][ T9] usb 4-1: USB disconnect, device number 25 [ 335.516794][ T5870] usb 3-1: device descriptor read/64, error -71 [ 335.636696][ T5870] usb usb3-port1: attempt power cycle [ 336.034169][ T5870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 336.137750][ T5870] usb 3-1: device descriptor read/8, error -71 [ 337.213540][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 337.493585][ T5870] usb 3-1: device not accepting address 12, error -71 [ 337.553711][ T5870] usb usb3-port1: unable to enumerate USB device [ 338.251463][ T9308] nvme_fabrics: missing parameter 'transport=%s' [ 338.258076][ T9308] nvme_fabrics: missing parameter 'nqn=%s' [ 338.811030][ T9329] usb usb8: usbfs: process 9329 (syz.1.984) did not claim interface 0 before use [ 341.198419][ T29] audit: type=1400 audit(1733913415.587:431): avc: denied { append } for pid=9347 comm="syz.4.989" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.830527][ T29] audit: type=1400 audit(1733913416.137:432): avc: denied { setopt } for pid=9347 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.481418][ T9376] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.996'. [ 344.483669][ T9365] nvme_fabrics: missing parameter 'transport=%s' [ 344.525505][ T9375] FAULT_INJECTION: forcing a failure. [ 344.525505][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.610203][ T9365] nvme_fabrics: missing parameter 'nqn=%s' [ 344.623604][ T9375] CPU: 0 UID: 0 PID: 9375 Comm: syz.1.995 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 344.634213][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.644265][ T9375] Call Trace: [ 344.647535][ T9375] [ 344.650455][ T9375] dump_stack_lvl+0x16c/0x1f0 [ 344.655138][ T9375] should_fail_ex+0x497/0x5b0 [ 344.659817][ T9375] _copy_from_user+0x2e/0xd0 [ 344.664416][ T9375] __sys_bpf+0x21c/0x49c0 [ 344.668745][ T9375] ? __pfx_lock_release+0x10/0x10 [ 344.673766][ T9375] ? __pfx___sys_bpf+0x10/0x10 [ 344.678521][ T9375] ? vfs_write+0x306/0x1150 [ 344.683017][ T9375] ? __mutex_unlock_slowpath+0x164/0x690 [ 344.688650][ T9375] ? fput+0x67/0x440 [ 344.692551][ T9375] ? ksys_write+0x1ba/0x250 [ 344.697041][ T9375] ? __pfx_ksys_write+0x10/0x10 [ 344.701887][ T9375] __x64_sys_bpf+0x78/0xc0 [ 344.706295][ T9375] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.711480][ T9375] do_syscall_64+0xcd/0x250 [ 344.715992][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.721884][ T9375] RIP: 0033:0x7f3459f7ff19 [ 344.726285][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.745877][ T9375] RSP: 002b:00007f345aca9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.754275][ T9375] RAX: ffffffffffffffda RBX: 00007f345a145fa0 RCX: 00007f3459f7ff19 [ 344.762228][ T9375] RDX: 0000000000000094 RSI: 0000000020000080 RDI: 0000000000000005 [ 344.770183][ T9375] RBP: 00007f345aca90a0 R08: 0000000000000000 R09: 0000000000000000 [ 344.778137][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.786093][ T9375] R13: 0000000000000000 R14: 00007f345a145fa0 R15: 00007ffc96ce9a78 [ 344.794058][ T9375] [ 345.665821][ T9386] veth0_vlan: entered allmulticast mode [ 346.497850][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.523278][ T9396] FAULT_INJECTION: forcing a failure. [ 346.523278][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 346.570733][ T9392] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 346.695263][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.4.1002 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 346.705977][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.716030][ T9396] Call Trace: [ 346.719305][ T9396] [ 346.722248][ T9396] dump_stack_lvl+0x16c/0x1f0 [ 346.726934][ T9396] should_fail_ex+0x497/0x5b0 [ 346.731616][ T9396] ? fs_reclaim_acquire+0xae/0x150 [ 346.736741][ T9396] should_failslab+0xc2/0x120 [ 346.741423][ T9396] __kmalloc_noprof+0xcb/0x510 [ 346.746189][ T9396] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 346.751830][ T9396] tomoyo_realpath_from_path+0xb9/0x720 [ 346.757383][ T9396] ? tomoyo_path_number_perm+0x235/0x590 [ 346.763048][ T9396] ? tomoyo_path_number_perm+0x235/0x590 [ 346.768684][ T9396] tomoyo_path_number_perm+0x248/0x590 [ 346.774139][ T9396] ? tomoyo_path_number_perm+0x235/0x590 [ 346.779772][ T9396] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 346.785778][ T9396] ? __pfx_lock_release+0x10/0x10 [ 346.790803][ T9396] ? trace_lock_acquire+0x14e/0x1f0 [ 346.796021][ T9396] ? lock_acquire+0x2f/0xb0 [ 346.800523][ T9396] ? __fget_files+0x40/0x3a0 [ 346.805123][ T9396] ? __fget_files+0x206/0x3a0 [ 346.809802][ T9396] security_file_ioctl+0x9b/0x240 [ 346.814831][ T9396] __x64_sys_ioctl+0xb7/0x200 [ 346.819520][ T9396] do_syscall_64+0xcd/0x250 [ 346.824032][ T9396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.829930][ T9396] RIP: 0033:0x7fde3417ff19 [ 346.834345][ T9396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.853953][ T9396] RSP: 002b:00007fde34f45058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.862366][ T9396] RAX: ffffffffffffffda RBX: 00007fde34345fa0 RCX: 00007fde3417ff19 [ 346.870337][ T9396] RDX: 0000000020001040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 346.878319][ T9396] RBP: 00007fde34f450a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.886293][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.894265][ T9396] R13: 0000000000000000 R14: 00007fde34345fa0 R15: 00007fffec678298 [ 346.902253][ T9396] [ 347.773617][ T9396] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.219188][ T9416] usb usb8: usbfs: process 9416 (syz.3.1006) did not claim interface 0 before use [ 351.746479][ T9458] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1017'. [ 352.512033][ T9485] FAULT_INJECTION: forcing a failure. [ 352.512033][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.526410][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.0.1026 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 352.537091][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.547134][ T9485] Call Trace: [ 352.550395][ T9485] [ 352.553310][ T9485] dump_stack_lvl+0x16c/0x1f0 [ 352.557979][ T9485] should_fail_ex+0x497/0x5b0 [ 352.562652][ T9485] _copy_from_user+0x2e/0xd0 [ 352.567240][ T9485] copy_msghdr_from_user+0x99/0x160 [ 352.572448][ T9485] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 352.578257][ T9485] ___sys_sendmsg+0xff/0x1e0 [ 352.582841][ T9485] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.588041][ T9485] ? __pfx_lock_release+0x10/0x10 [ 352.593074][ T9485] ? trace_lock_acquire+0x14e/0x1f0 [ 352.598286][ T9485] ? __fget_files+0x206/0x3a0 [ 352.602954][ T9485] __sys_sendmsg+0x16e/0x220 [ 352.607537][ T9485] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.612653][ T9485] do_syscall_64+0xcd/0x250 [ 352.617147][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.623030][ T9485] RIP: 0033:0x7faf21f7ff19 [ 352.627431][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.647034][ T9485] RSP: 002b:00007faf22dec058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.655440][ T9485] RAX: ffffffffffffffda RBX: 00007faf22145fa0 RCX: 00007faf21f7ff19 [ 352.663404][ T9485] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 352.671369][ T9485] RBP: 00007faf22dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.679329][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.687293][ T9485] R13: 0000000000000000 R14: 00007faf22145fa0 R15: 00007fff8336a988 [ 352.695262][ T9485] [ 353.360571][ T9501] usb usb8: usbfs: process 9501 (syz.3.1030) did not claim interface 0 before use [ 354.603127][ T9505] FAULT_INJECTION: forcing a failure. [ 354.603127][ T9505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.627224][ T9505] CPU: 1 UID: 0 PID: 9505 Comm: syz.4.1033 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 354.637926][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.647996][ T9505] Call Trace: [ 354.651287][ T9505] [ 354.654229][ T9505] dump_stack_lvl+0x16c/0x1f0 [ 354.658923][ T9505] should_fail_ex+0x497/0x5b0 [ 354.663618][ T9505] _copy_from_user+0x2e/0xd0 [ 354.668223][ T9505] copy_msghdr_from_user+0x99/0x160 [ 354.673430][ T9505] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 354.679261][ T9505] ___sys_sendmsg+0xff/0x1e0 [ 354.683864][ T9505] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.689092][ T9505] ? __sys_sendmmsg+0x2c8/0x420 [ 354.693968][ T9505] __sys_sendmmsg+0x201/0x420 [ 354.698667][ T9505] ? __pfx___sys_sendmmsg+0x10/0x10 [ 354.703875][ T9505] ? ksys_write+0x191/0x250 [ 354.708391][ T9505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.714395][ T9505] ? fput+0x67/0x440 [ 354.718307][ T9505] ? ksys_write+0x1ba/0x250 [ 354.722810][ T9505] ? __pfx_ksys_write+0x10/0x10 [ 354.727667][ T9505] __x64_sys_sendmmsg+0x9c/0x100 [ 354.732619][ T9505] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.737821][ T9505] do_syscall_64+0xcd/0x250 [ 354.742335][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.748232][ T9505] RIP: 0033:0x7fde3417ff19 [ 354.752649][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.772274][ T9505] RSP: 002b:00007fde34f45058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 354.780701][ T9505] RAX: ffffffffffffffda RBX: 00007fde34345fa0 RCX: 00007fde3417ff19 [ 354.788671][ T9505] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 354.796632][ T9505] RBP: 00007fde34f450a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.804609][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.812582][ T9505] R13: 0000000000000000 R14: 00007fde34345fa0 R15: 00007fffec678298 [ 354.820599][ T9505] [ 356.080140][ T9523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.096111][ T9523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.107360][ T9523] Bluetooth: MGMT ver 1.23 [ 356.341742][ T9532] FAULT_INJECTION: forcing a failure. [ 356.341742][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 356.354844][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.1.1041 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 356.365535][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.375575][ T9532] Call Trace: [ 356.378843][ T9532] [ 356.381751][ T9532] dump_stack_lvl+0x16c/0x1f0 [ 356.386409][ T9532] should_fail_ex+0x497/0x5b0 [ 356.391084][ T9532] ? fs_reclaim_acquire+0xae/0x150 [ 356.396187][ T9532] should_failslab+0xc2/0x120 [ 356.400861][ T9532] __kmalloc_node_noprof+0xd1/0x510 [ 356.406039][ T9532] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 356.411490][ T9532] __kvmalloc_node_noprof+0xad/0x1a0 [ 356.416801][ T9532] traverse.part.0.constprop.0+0x392/0x640 [ 356.422609][ T9532] ? __pfx___lock_acquire+0x10/0x10 [ 356.427800][ T9532] seq_read_iter+0x934/0x12b0 [ 356.432472][ T9532] ? hlock_class+0x4e/0x130 [ 356.436972][ T9532] seq_read+0x39f/0x4e0 [ 356.441120][ T9532] ? __pfx_seq_read+0x10/0x10 [ 356.445792][ T9532] ? import_ubuf+0x1b6/0x220 [ 356.450379][ T9532] ? avc_policy_seqno+0x9/0x20 [ 356.455150][ T9532] ? __pfx_seq_read+0x10/0x10 [ 356.459819][ T9532] proc_reg_read+0x23d/0x330 [ 356.464397][ T9532] ? __pfx_proc_reg_read+0x10/0x10 [ 356.469495][ T9532] vfs_readv+0x6bf/0x890 [ 356.473727][ T9532] ? __pfx___lock_acquire+0x10/0x10 [ 356.478912][ T9532] ? find_held_lock+0x2d/0x110 [ 356.483668][ T9532] ? __pfx_vfs_readv+0x10/0x10 [ 356.488431][ T9532] ? __fget_files+0x1fc/0x3a0 [ 356.493091][ T9532] ? __pfx_lock_release+0x10/0x10 [ 356.498109][ T9532] ? __fget_files+0x206/0x3a0 [ 356.502773][ T9532] ? do_preadv+0x1b1/0x270 [ 356.507179][ T9532] do_preadv+0x1b1/0x270 [ 356.511416][ T9532] ? __pfx_do_preadv+0x10/0x10 [ 356.516176][ T9532] do_syscall_64+0xcd/0x250 [ 356.520669][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.526550][ T9532] RIP: 0033:0x7f3459f7ff19 [ 356.530948][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.550538][ T9532] RSP: 002b:00007f345aca9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 356.558935][ T9532] RAX: ffffffffffffffda RBX: 00007f345a145fa0 RCX: 00007f3459f7ff19 [ 356.566891][ T9532] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 356.574848][ T9532] RBP: 00007f345aca90a0 R08: 0000000000000000 R09: 0000000000000000 [ 356.582804][ T9532] R10: 000000000000002f R11: 0000000000000246 R12: 0000000000000001 [ 356.590758][ T9532] R13: 0000000000000000 R14: 00007f345a145fa0 R15: 00007ffc96ce9a78 [ 356.598724][ T9532] [ 356.601786][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.740891][ T9538] gretap1: entered allmulticast mode [ 356.835700][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 360.339268][ T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 360.384432][ T29] audit: type=1400 audit(1733913434.277:433): avc: denied { setopt } for pid=9571 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.743632][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 362.459689][ T47] usb 4-1: device not accepting address 26, error -71 [ 362.803713][ T25] usb 3-1: device not accepting address 13, error -71 [ 363.381072][ T9] IPVS: starting estimator thread 0... [ 363.489211][ T9625] batadv_slave_0: invalid flags given to default FDB implementation [ 363.493784][ T9619] IPVS: using max 30 ests per chain, 72000 per kthread [ 364.055594][ T9637] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 364.083413][ T9637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9637 comm=syz.3.1074 [ 364.721001][ T9640] vlan2: entered allmulticast mode [ 364.726283][ T9640] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 364.979445][ T9640] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 366.282451][ T9670] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1084'. [ 367.362606][ T9679] FAULT_INJECTION: forcing a failure. [ 367.362606][ T9679] name failslab, interval 1, probability 0, space 0, times 0 [ 367.375770][ T9679] CPU: 0 UID: 0 PID: 9679 Comm: syz.0.1086 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 367.386448][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.396491][ T9679] Call Trace: [ 367.399760][ T9679] [ 367.402671][ T9679] dump_stack_lvl+0x16c/0x1f0 [ 367.407331][ T9679] should_fail_ex+0x497/0x5b0 [ 367.411987][ T9679] ? fs_reclaim_acquire+0xae/0x150 [ 367.417081][ T9679] should_failslab+0xc2/0x120 [ 367.421747][ T9679] __kmalloc_noprof+0xcb/0x510 [ 367.426503][ T9679] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.432135][ T9679] tomoyo_realpath_from_path+0xb9/0x720 [ 367.437670][ T9679] ? tomoyo_path_number_perm+0x235/0x590 [ 367.443285][ T9679] ? tomoyo_path_number_perm+0x235/0x590 [ 367.448906][ T9679] tomoyo_path_number_perm+0x248/0x590 [ 367.454359][ T9679] ? tomoyo_path_number_perm+0x235/0x590 [ 367.459976][ T9679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 367.465945][ T9679] ? __pfx_lock_release+0x10/0x10 [ 367.470957][ T9679] ? trace_lock_acquire+0x14e/0x1f0 [ 367.476148][ T9679] ? lock_acquire+0x2f/0xb0 [ 367.480654][ T9679] ? __fget_files+0x40/0x3a0 [ 367.485229][ T9679] ? __fget_files+0x206/0x3a0 [ 367.489888][ T9679] security_file_ioctl+0x9b/0x240 [ 367.494895][ T9679] __x64_sys_ioctl+0xb7/0x200 [ 367.499557][ T9679] do_syscall_64+0xcd/0x250 [ 367.504055][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.509943][ T9679] RIP: 0033:0x7faf21f7ff19 [ 367.514338][ T9679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.533922][ T9679] RSP: 002b:00007faf22dec058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.542327][ T9679] RAX: ffffffffffffffda RBX: 00007faf22145fa0 RCX: 00007faf21f7ff19 [ 367.550272][ T9679] RDX: 0000000020000440 RSI: 0000000040505412 RDI: 0000000000000003 [ 367.558221][ T9679] RBP: 00007faf22dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.566171][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.574117][ T9679] R13: 0000000000000000 R14: 00007faf22145fa0 R15: 00007fff8336a988 [ 367.582080][ T9679] [ 367.585109][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.605259][ T9679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.286037][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 369.486856][ T9706] FAULT_INJECTION: forcing a failure. [ 369.486856][ T9706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.506482][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz.4.1095 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 369.517173][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.527222][ T9706] Call Trace: [ 369.530482][ T9706] [ 369.533397][ T9706] dump_stack_lvl+0x16c/0x1f0 [ 369.538058][ T9706] should_fail_ex+0x497/0x5b0 [ 369.542718][ T9706] _copy_from_user+0x2e/0xd0 [ 369.547306][ T9706] quota_setquota+0x26b/0x5f0 [ 369.551963][ T9706] ? __pfx_quota_setquota+0x10/0x10 [ 369.557145][ T9706] ? avc_has_perm+0x11b/0x1c0 [ 369.561810][ T9706] ? selinux_quotactl+0x171/0x300 [ 369.566826][ T9706] do_quotactl+0xb00/0x13d0 [ 369.571325][ T9706] ? __pfx_do_quotactl+0x10/0x10 [ 369.576250][ T9706] ? rwsem_read_trylock+0x12d/0x250 [ 369.581439][ T9706] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 369.586976][ T9706] ? __pfx_lock_release+0x10/0x10 [ 369.591987][ T9706] ? __x64_sys_quotactl_fd+0x2d8/0x520 [ 369.597438][ T9706] ? lock_acquire+0x2f/0xb0 [ 369.601942][ T9706] ? __x64_sys_quotactl_fd+0x2d8/0x520 [ 369.607395][ T9706] ? down_read+0xc9/0x330 [ 369.611715][ T9706] ? __pfx_down_read+0x10/0x10 [ 369.616472][ T9706] ? mnt_get_write_access+0x20c/0x300 [ 369.621837][ T9706] __x64_sys_quotactl_fd+0x2f4/0x520 [ 369.627116][ T9706] do_syscall_64+0xcd/0x250 [ 369.631610][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.637492][ T9706] RIP: 0033:0x7fde3417ff19 [ 369.641901][ T9706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.661506][ T9706] RSP: 002b:00007fde34f45058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 369.669917][ T9706] RAX: ffffffffffffffda RBX: 00007fde34345fa0 RCX: 00007fde3417ff19 [ 369.677885][ T9706] RDX: 000000000000ee01 RSI: ffffffff80000801 RDI: 0000000000000003 [ 369.685845][ T9706] RBP: 00007fde34f450a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.693813][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.701775][ T9706] R13: 0000000000000000 R14: 00007fde34345fa0 R15: 00007fffec678298 [ 369.709752][ T9706] [ 370.216521][ T9717] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1097'. [ 373.693984][ T9756] FAULT_INJECTION: forcing a failure. [ 373.693984][ T9756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.707134][ T9756] CPU: 1 UID: 0 PID: 9756 Comm: syz.3.1108 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 373.717818][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.727884][ T9756] Call Trace: [ 373.731170][ T9756] [ 373.734103][ T9756] dump_stack_lvl+0x16c/0x1f0 [ 373.738796][ T9756] should_fail_ex+0x497/0x5b0 [ 373.743492][ T9756] _copy_from_user+0x2e/0xd0 [ 373.748091][ T9756] ksys_shmctl.constprop.0+0x325/0x380 [ 373.753550][ T9756] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 373.759512][ T9756] ? __mutex_unlock_slowpath+0x164/0x690 [ 373.765149][ T9756] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.771129][ T9756] ? __fget_files+0x206/0x3a0 [ 373.775795][ T9756] ? native_tss_update_io_bitmap+0x3d0/0x730 [ 373.781764][ T9756] do_syscall_64+0xcd/0x250 [ 373.786250][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.792128][ T9756] RIP: 0033:0x7fa3d2f7ff19 [ 373.796521][ T9756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.816116][ T9756] RSP: 002b:00007fa3d3d6a058 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 373.824510][ T9756] RAX: ffffffffffffffda RBX: 00007fa3d3145fa0 RCX: 00007fa3d2f7ff19 [ 373.832473][ T9756] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 373.840436][ T9756] RBP: 00007fa3d3d6a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 373.848397][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.856343][ T9756] R13: 0000000000000000 R14: 00007fa3d3145fa0 R15: 00007fffb21f6fe8 [ 373.864296][ T9756] [ 374.196254][ T9764] usb usb8: usbfs: process 9764 (syz.1.1111) did not claim interface 0 before use [ 375.040628][ T9765] nvme_fabrics: missing parameter 'transport=%s' [ 375.279243][ T9765] nvme_fabrics: missing parameter 'nqn=%s' [ 376.024053][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 376.033043][ T9792] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1118'. [ 376.696482][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1119'. [ 376.705603][ T9796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1119'. [ 377.335573][ T9] IPVS: starting estimator thread 0... [ 377.762783][ T9802] IPVS: using max 28 ests per chain, 67200 per kthread [ 377.997999][ T9812] usb usb8: usbfs: process 9812 (syz.0.1123) did not claim interface 0 before use [ 378.279625][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.425621][ T5870] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 378.441903][ T5870] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.723605][ T8] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 379.599230][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.609149][ T8] usb 5-1: no configurations [ 379.616039][ T8] usb 5-1: can't read configurations, error -22 [ 379.639074][ T29] audit: type=1400 audit(1733913454.027:434): avc: denied { ioctl } for pid=9828 comm="syz.2.1130" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.683749][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.707465][ T9831] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 379.720264][ T9831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9831 comm=syz.2.1131 [ 379.834757][ T9834] xt_ecn: cannot match TCP bits for non-tcp packets [ 379.867265][ T9834] vlan2: entered allmulticast mode [ 379.872603][ T9834] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 379.886490][ T9834] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 379.904002][ T25] usb 4-1: config 0 has an invalid interface number: 177 but max is 0 [ 379.913116][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.119197][ T25] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 380.132739][ T25] usb 4-1: config 0 has no interface number 0 [ 380.140045][ T25] usb 4-1: config 0 interface 177 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.158035][ T29] audit: type=1400 audit(1733913454.547:435): avc: denied { mounton } for pid=9835 comm="syz.1.1133" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.189979][ T9836] binder: Unknown parameter '000000000á‚@£ÝÕ·ò]Œ000U3' [ 380.197403][ T25] usb 4-1: config 0 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 380.214729][ T25] usb 4-1: config 0 interface 177 has no altsetting 0 [ 380.221562][ T25] usb 4-1: config 0 interface 1 has no altsetting 0 [ 380.233696][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0113, bcdDevice=b4.e1 [ 380.243199][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.257621][ T25] usb 4-1: Product: syz [ 380.262578][ T25] usb 4-1: Manufacturer: syz [ 380.267642][ T25] usb 4-1: SerialNumber: syz [ 380.278375][ T25] usb 4-1: config 0 descriptor?? [ 380.721671][ T5870] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 380.953646][ T9844] nvme_fabrics: missing parameter 'transport=%s' [ 380.954465][ T25] usb 4-1: selecting invalid altsetting 0 [ 380.960048][ T9844] nvme_fabrics: missing parameter 'nqn=%s' [ 381.077994][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 381.087053][ T9850] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1135'. [ 381.653114][ T25] usb 4-1: USB disconnect, device number 28 [ 381.854116][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 381.863228][ T5870] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.871492][ T5870] usb 2-1: config 0 has no interface number 0 [ 381.881326][ T5870] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.891583][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.929784][ T5870] usb 2-1: Product: syz [ 381.959871][ T9858] usb usb8: usbfs: process 9858 (syz.4.1138) did not claim interface 0 before use [ 382.086364][ T5870] usb 2-1: Manufacturer: syz [ 382.163854][ T5870] usb 2-1: SerialNumber: syz [ 382.289596][ T5870] usb 2-1: config 0 descriptor?? [ 382.422565][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.177/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.453278][ T5870] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 382.662396][ T5870] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 382.675783][ T5870] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 382.873622][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 382.881540][ T6461] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 383.873934][ T6461] usb 1-1: Using ep0 maxpacket: 16 [ 383.884234][ T6461] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 383.905199][ T6461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 383.983085][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.000524][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 384.000843][ T5867] usb 2-1: USB disconnect, device number 15 [ 384.046840][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 384.075685][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 384.086961][ T6461] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 384.096967][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.108234][ T6461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 384.121437][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.134517][ T6461] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 384.144722][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.153934][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.180596][ T6461] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 384.190019][ T6461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.204221][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.217329][ T25] usb 3-1: config 0 descriptor?? [ 384.223867][ T9863] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 384.236658][ T5867] quatech2 2-1:0.51: device disconnected [ 384.242399][ T6461] usb 1-1: Product: syz [ 384.247368][ T6461] usb 1-1: Manufacturer: syz [ 384.251996][ T6461] usb 1-1: SerialNumber: syz [ 384.360754][ T6461] usb 1-1: config 0 descriptor?? [ 384.366439][ T9864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 384.374279][ T9864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 384.391740][ T6461] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 384.398987][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 384.399044][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 384.478935][ T9890] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 384.646039][ T9895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9895 comm=syz.4.1148 [ 384.677081][ T29] audit: type=1400 audit(1733913459.067:436): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.725429][ T29] audit: type=1400 audit(1733913459.067:437): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=6023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.771412][ T9895] vlan2: entered allmulticast mode [ 384.776763][ T9895] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 384.821736][ T9895] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 384.920424][ T29] audit: type=1400 audit(1733913459.067:438): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=6023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.985533][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 385.105856][ T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 385.111069][ T29] audit: type=1400 audit(1733913459.067:439): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=6023 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.199695][ T5870] usb 1-1: USB disconnect, device number 23 [ 385.203794][ T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 385.206869][ T5870] mcba_usb 1-1:0.0 can0: device disconnected [ 385.223535][ T29] audit: type=1400 audit(1733913459.447:440): avc: denied { read } for pid=9898 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.224038][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 385.261328][ T29] audit: type=1400 audit(1733913459.447:441): avc: denied { open } for pid=9898 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.343424][ T29] audit: type=1400 audit(1733913459.457:442): avc: denied { getattr } for pid=9898 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.514075][ T8] usb 4-1: config 0 has an invalid interface number: 177 but max is 0 [ 385.531009][ T29] audit: type=1400 audit(1733913459.587:443): avc: denied { ioctl } for pid=9861 comm="syz.2.1142" path="socket:[24221]" dev="sockfs" ino=24221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.543306][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.807586][ T9] usb 3-1: USB disconnect, device number 15 [ 385.816385][ T8] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 385.834856][ T8] usb 4-1: config 0 has no interface number 0 [ 385.841251][ T8] usb 4-1: config 0 interface 177 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 385.933105][ T9907] nvme_fabrics: missing parameter 'transport=%s' [ 385.939635][ T9907] nvme_fabrics: missing parameter 'nqn=%s' [ 386.091755][ T9911] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1153'. [ 386.100944][ T9911] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.109128][ T8] usb 4-1: config 0 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 386.122171][ T8] usb 4-1: config 0 interface 177 has no altsetting 0 [ 386.185463][ T9918] usb usb8: usbfs: process 9918 (syz.0.1154) did not claim interface 0 before use [ 386.669746][ T8] usb 4-1: config 0 interface 1 has no altsetting 0 [ 386.706598][ T29] audit: type=1400 audit(1733913461.097:444): avc: denied { write } for pid=9897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.783752][ T29] audit: type=1400 audit(1733913461.097:445): avc: denied { add_name } for pid=9897 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.015428][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0113, bcdDevice=b4.e1 [ 387.073146][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.084126][ T8] usb 4-1: Product: syz [ 387.088965][ T8] usb 4-1: Manufacturer: syz [ 387.098501][ T8] usb 4-1: SerialNumber: syz [ 387.289321][ T8] usb 4-1: config 0 descriptor?? [ 388.123068][ T8] usb 4-1: selecting invalid altsetting 0 [ 388.247818][ T8] usb 4-1: USB disconnect, device number 29 [ 388.524200][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.177/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.266338][ T9966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.343710][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 389.430429][ T9977] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 389.466675][ T9977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9977 comm=syz.1.1167 [ 389.506675][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 389.517293][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.693660][ T9980] vlan3: entered allmulticast mode [ 389.700567][ T9980] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 389.703992][ T25] usb 3-1: config 0 descriptor?? [ 389.708350][ T9979] FAULT_INJECTION: forcing a failure. [ 389.708350][ T9979] name failslab, interval 1, probability 0, space 0, times 0 [ 389.794799][ T9980] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 389.832732][ T9982] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 389.873909][ T25] pwc: Philips SPC 900NC USB webcam detected. [ 389.880823][ T9982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9982 comm=syz.4.1169 [ 389.885588][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.0.1168 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 389.903812][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.913867][ T9979] Call Trace: [ 389.917142][ T9979] [ 389.920071][ T9979] dump_stack_lvl+0x16c/0x1f0 [ 389.924747][ T9979] should_fail_ex+0x497/0x5b0 [ 389.929443][ T9979] ? fs_reclaim_acquire+0xae/0x150 [ 389.934596][ T9979] should_failslab+0xc2/0x120 [ 389.939286][ T9979] __kmalloc_noprof+0xcb/0x510 [ 389.944051][ T9979] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 389.949687][ T9979] tomoyo_realpath_from_path+0xb9/0x720 [ 389.955242][ T9979] ? tomoyo_path_number_perm+0x235/0x590 [ 389.960876][ T9979] ? tomoyo_path_number_perm+0x235/0x590 [ 389.966512][ T9979] tomoyo_path_number_perm+0x248/0x590 [ 389.971966][ T9979] ? tomoyo_path_number_perm+0x235/0x590 [ 389.977614][ T9979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.983623][ T9979] ? __pfx_lock_release+0x10/0x10 [ 389.988648][ T9979] ? trace_lock_acquire+0x14e/0x1f0 [ 389.993866][ T9979] ? lock_acquire+0x2f/0xb0 [ 389.998819][ T9979] ? __fget_files+0x40/0x3a0 [ 390.003408][ T9979] ? __fget_files+0x206/0x3a0 [ 390.008075][ T9979] security_file_ioctl+0x9b/0x240 [ 390.013090][ T9979] __x64_sys_ioctl+0xb7/0x200 [ 390.017751][ T9979] do_syscall_64+0xcd/0x250 [ 390.022244][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.028148][ T9979] RIP: 0033:0x7faf21f7ff19 [ 390.032555][ T9979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.052158][ T9979] RSP: 002b:00007faf22dec058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.060579][ T9979] RAX: ffffffffffffffda RBX: 00007faf22145fa0 RCX: 00007faf21f7ff19 [ 390.068561][ T9979] RDX: 0000000020000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 390.076546][ T9979] RBP: 00007faf22dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 390.084507][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.092486][ T9979] R13: 0000000000000000 R14: 00007faf22145fa0 R15: 00007fff8336a988 [ 390.100473][ T9979] [ 390.496055][ T9983] vlan2: entered allmulticast mode [ 390.501284][ T9983] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 390.543576][ T9979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.712008][ T9983] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 392.388731][ T25] pwc: Failed to set LED on/off time (-71) [ 392.410833][ T25] pwc: send_video_command error -71 [ 392.431647][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 392.478589][ T25] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 392.536716][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 392.538608][ T29] audit: type=1400 audit(1733913466.927:452): avc: denied { bind } for pid=9995 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.848249][ T25] usb 3-1: USB disconnect, device number 16 [ 392.893900][ T29] audit: type=1400 audit(1733913466.957:453): avc: denied { sqpoll } for pid=9995 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.926496][T10006] FAULT_INJECTION: forcing a failure. [ 392.926496][T10006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.963272][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.0.1175 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 392.974060][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.984438][T10006] Call Trace: [ 392.987693][T10006] [ 392.990600][T10006] dump_stack_lvl+0x16c/0x1f0 [ 392.995261][T10006] should_fail_ex+0x497/0x5b0 [ 392.999915][T10006] ? fs_reclaim_acquire+0xae/0x150 [ 393.005008][T10006] should_fail_alloc_page+0xe7/0x130 [ 393.010270][T10006] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 393.016402][T10006] ? hlock_class+0x4e/0x130 [ 393.020882][T10006] __alloc_pages_noprof+0x190/0x25b0 [ 393.026150][T10006] ? hlock_class+0x4e/0x130 [ 393.030631][T10006] ? mark_lock+0xb5/0xc60 [ 393.034931][T10006] ? kasan_save_stack+0x33/0x60 [ 393.039754][T10006] ? __pfx___lock_acquire+0x10/0x10 [ 393.044933][T10006] ? __pfx_mark_lock+0x10/0x10 [ 393.049678][T10006] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 393.055370][T10006] ? hlock_class+0x4e/0x130 [ 393.059846][T10006] ? mark_lock+0xb5/0xc60 [ 393.064145][T10006] ? hlock_class+0x4e/0x130 [ 393.068623][T10006] ? __pfx_mark_lock+0x10/0x10 [ 393.073361][T10006] ? __pfx_mark_lock+0x10/0x10 [ 393.078097][T10006] ? hlock_class+0x4e/0x130 [ 393.082578][T10006] ? __lock_acquire+0xcc5/0x3c40 [ 393.087509][T10006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.093390][T10006] ? policy_nodemask+0xea/0x4e0 [ 393.098217][T10006] alloc_pages_mpol_noprof+0x2c9/0x610 [ 393.103653][T10006] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 393.109612][T10006] ? __lock_acquire+0xcc5/0x3c40 [ 393.114525][T10006] folio_alloc_mpol_noprof+0x36/0xd0 [ 393.119787][T10006] vma_alloc_folio_noprof+0xee/0x1b0 [ 393.125135][T10006] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 393.131004][T10006] ? find_held_lock+0x2d/0x110 [ 393.135746][T10006] do_pte_missing+0x2017/0x3e00 [ 393.140575][T10006] __handle_mm_fault+0x103c/0x2a40 [ 393.145674][T10006] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.151105][T10006] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 393.156717][T10006] ? find_vma+0xc0/0x140 [ 393.160949][T10006] ? __pfx_find_vma+0x10/0x10 [ 393.165602][T10006] ? hlock_class+0x4e/0x130 [ 393.170082][T10006] handle_mm_fault+0x3fa/0xaa0 [ 393.174824][T10006] do_user_addr_fault+0x7a3/0x13f0 [ 393.179918][T10006] exc_page_fault+0x5c/0xc0 [ 393.184418][T10006] asm_exc_page_fault+0x26/0x30 [ 393.189256][T10006] RIP: 0010:filldir64+0x29c/0x5e0 [ 393.194292][T10006] Code: db e8 e8 0b 86 ff 89 d8 48 83 c4 50 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ce 0b 86 ff 0f 01 cb 0f ae e8 48 8b 04 24 <49> 89 47 08 e8 bb 0b 86 ff 4c 8b 7c 24 30 48 8b 74 24 10 49 89 37 [ 393.213892][T10006] RSP: 0018:ffffc90003877c48 EFLAGS: 00050293 [ 393.219944][T10006] RAX: 0000000000000000 RBX: ffffc90003877e80 RCX: ffffffff8213f75a [ 393.227903][T10006] RDX: ffff888031142440 RSI: ffffffff8213f7b2 RDI: 0000000000000006 [ 393.235858][T10006] RBP: 0000000020002158 R08: 0000000000000006 R09: 0000000020002140 [ 393.243813][T10006] R10: 0000000020002158 R11: 0000000000000002 R12: 0000000000000001 [ 393.251759][T10006] R13: 0000000000000018 R14: ffffffff8b8189c0 R15: 0000000020002140 [ 393.259709][T10006] ? filldir64+0x23a/0x5e0 [ 393.264105][T10006] ? filldir64+0x292/0x5e0 [ 393.268503][T10006] ? filldir64+0x292/0x5e0 [ 393.272902][T10006] ? __pfx_filldir64+0x10/0x10 [ 393.277653][T10006] proc_readfd_common+0x429/0x620 [ 393.282665][T10006] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 393.288272][T10006] ? lock_acquire+0x2f/0xb0 [ 393.292747][T10006] ? __pfx_proc_readfd_common+0x10/0x10 [ 393.298277][T10006] ? down_read_killable+0xcc/0x380 [ 393.303363][T10006] ? __pfx_down_read_killable+0x10/0x10 [ 393.308886][T10006] ? selinux_file_permission+0x11f/0x580 [ 393.314497][T10006] iterate_dir+0x52f/0xb40 [ 393.318904][T10006] __x64_sys_getdents64+0x148/0x2c0 [ 393.324084][T10006] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 393.329781][T10006] ? __pfx_filldir64+0x10/0x10 [ 393.334542][T10006] do_syscall_64+0xcd/0x250 [ 393.339027][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.344897][T10006] RIP: 0033:0x7faf21f7ff19 [ 393.349287][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.368879][T10006] RSP: 002b:00007faf22dec058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 393.377264][T10006] RAX: ffffffffffffffda RBX: 00007faf22145fa0 RCX: 00007faf21f7ff19 [ 393.385223][T10006] RDX: 00000000000000f5 RSI: 0000000020002140 RDI: 0000000000000003 [ 393.393166][T10006] RBP: 00007faf22dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 393.401112][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.409058][T10006] R13: 0000000000000000 R14: 00007faf22145fa0 R15: 00007fff8336a988 [ 393.417026][T10006] [ 393.526205][T10012] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1178'. [ 394.761616][T10026] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 394.770547][T10030] FAULT_INJECTION: forcing a failure. [ 394.770547][T10030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.780252][T10026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10026 comm=syz.0.1182 [ 394.783799][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.1183 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 394.806963][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.817035][T10030] Call Trace: [ 394.820323][T10030] [ 394.823250][T10030] dump_stack_lvl+0x16c/0x1f0 [ 394.827937][T10030] should_fail_ex+0x497/0x5b0 [ 394.832615][T10030] _copy_from_user+0x2e/0xd0 [ 394.837200][T10030] copy_msghdr_from_user+0x99/0x160 [ 394.842399][T10030] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.848224][T10030] ___sys_sendmsg+0xff/0x1e0 [ 394.852828][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.858024][T10030] ? __pfx_lock_release+0x10/0x10 [ 394.863042][T10030] ? trace_lock_acquire+0x14e/0x1f0 [ 394.868242][T10030] ? __fget_files+0x206/0x3a0 [ 394.872904][T10030] __sys_sendmsg+0x16e/0x220 [ 394.877484][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.882593][T10030] do_syscall_64+0xcd/0x250 [ 394.887087][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.892964][T10030] RIP: 0033:0x7fa747b7ff19 [ 394.897357][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.916953][T10030] RSP: 002b:00007fa748a3d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.925350][T10030] RAX: ffffffffffffffda RBX: 00007fa747d45fa0 RCX: 00007fa747b7ff19 [ 394.933320][T10030] RDX: 0000000030004001 RSI: 0000000020000040 RDI: 0000000000000005 [ 394.941282][T10030] RBP: 00007fa748a3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 394.949251][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.957204][T10030] R13: 0000000000000000 R14: 00007fa747d45fa0 R15: 00007ffe3b8fd5a8 [ 394.965161][T10030] [ 394.968201][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.012027][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 395.182828][T10026] vlan2: entered allmulticast mode [ 395.188057][T10026] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 395.197880][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.214230][T10026] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 395.225777][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.764305][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.786222][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 395.797045][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.884963][ T25] usb 5-1: Product: syz [ 395.889228][ T25] usb 5-1: Manufacturer: syz [ 395.894001][ T25] usb 5-1: SerialNumber: syz [ 395.919396][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 396.439757][ T25] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 396.548429][ T29] audit: type=1400 audit(1733913470.937:454): avc: denied { read write } for pid=10027 comm="syz.4.1184" name="lp0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.572095][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.582566][ T29] audit: type=1400 audit(1733913470.937:455): avc: denied { open } for pid=10027 comm="syz.4.1184" path="/dev/usb/lp0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.583783][ T6461] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 396.606499][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.614934][ T29] audit: type=1400 audit(1733913470.967:456): avc: denied { ioctl } for pid=10027 comm="syz.4.1184" path="/dev/usb/lp0" dev="devtmpfs" ino=3008 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.811314][ T868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 396.845417][ T6461] usb 4-1: Using ep0 maxpacket: 32 [ 396.852042][ T6461] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 396.864576][ T6461] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 396.873763][ T6461] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 396.882024][ T6461] usb 4-1: Product: syz [ 396.983791][ T868] usb 1-1: Using ep0 maxpacket: 8 [ 396.996344][ T868] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 397.403604][ T6461] usb 4-1: Manufacturer: syz [ 397.408499][ T6461] usb 4-1: SerialNumber: syz [ 397.415505][ T6461] usb 4-1: config 0 descriptor?? [ 397.421283][T10048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 397.444917][ T868] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 397.470100][ T868] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 397.480706][ T868] usb 1-1: config 250 has no interface number 0 [ 397.487592][ T868] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 397.499825][ T868] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 397.510918][ T868] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.522415][ T868] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 397.536836][ T868] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 397.551900][ T868] usb 1-1: config 250 interface 228 has no altsetting 0 [ 397.674788][ T868] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 397.689099][ T6461] usb 4-1: USB disconnect, device number 30 [ 397.791854][ T868] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 397.807015][ T868] usb 1-1: Product: syz [ 397.814512][ T868] usb 1-1: SerialNumber: syz [ 397.854121][T10048] FAULT_INJECTION: forcing a failure. [ 397.854121][T10048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.857266][ T868] hub 1-1:250.228: bad descriptor, ignoring hub [ 397.874983][T10065] nvme_fabrics: missing parameter 'transport=%s' [ 397.880028][T10048] CPU: 1 UID: 0 PID: 10048 Comm: syz.3.1189 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 397.881460][T10065] nvme_fabrics: missing parameter 'nqn=%s' [ 397.892042][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.892056][T10048] Call Trace: [ 397.892063][T10048] [ 397.892072][T10048] dump_stack_lvl+0x16c/0x1f0 [ 397.892101][T10048] should_fail_ex+0x497/0x5b0 [ 397.892130][T10048] _copy_to_user+0x32/0xd0 [ 397.892156][T10048] simple_read_from_buffer+0xd0/0x160 [ 397.892184][T10048] proc_fail_nth_read+0x198/0x270 [ 397.938651][T10048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.944192][T10048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.949745][T10048] vfs_read+0x1df/0xbe0 [ 397.953883][T10048] ? __fget_files+0x1fc/0x3a0 [ 397.958554][T10048] ? __pfx___mutex_lock+0x10/0x10 [ 397.963558][T10048] ? __pfx_vfs_read+0x10/0x10 [ 397.968234][T10048] ? __fget_files+0x206/0x3a0 [ 397.973077][T10048] ksys_read+0x12b/0x250 [ 397.977298][T10048] ? __pfx_ksys_read+0x10/0x10 [ 397.982041][T10048] do_syscall_64+0xcd/0x250 [ 397.986545][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.992439][T10048] RIP: 0033:0x7fa3d2f7e92c [ 397.996834][T10048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.016434][T10048] RSP: 002b:00007fa3d3d6a050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.024824][T10048] RAX: ffffffffffffffda RBX: 00007fa3d3145fa0 RCX: 00007fa3d2f7e92c [ 398.032771][T10048] RDX: 000000000000000f RSI: 00007fa3d3d6a0b0 RDI: 0000000000000003 [ 398.040807][T10048] RBP: 00007fa3d3d6a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 398.048767][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.056714][T10048] R13: 0000000000000000 R14: 00007fa3d3145fa0 R15: 00007fffb21f6fe8 [ 398.064671][T10048] [ 398.114813][ T9] usb 5-1: USB disconnect, device number 35 [ 398.122159][ T868] hub 1-1:250.228: probe with driver hub failed with error -5 [ 398.149732][ T9] usblp0: removed [ 398.273691][ T868] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 398.356153][ T868] usb 1-1: USB disconnect, device number 24 [ 398.381685][ T868] usblp0: removed [ 398.399149][T10076] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1197'. [ 398.429010][ T29] audit: type=1326 audit(1733913472.787:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 398.455137][T10076] netlink: 'syz.0.1197': attribute type 8 has an invalid length. [ 398.473321][T10076] fuse: Unknown parameter '0x0000000000000007' [ 398.498356][ T29] audit: type=1326 audit(1733913472.787:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 398.521727][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.580197][ T29] audit: type=1326 audit(1733913472.797:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 398.603618][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.643651][ T29] audit: type=1326 audit(1733913472.797:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 398.909219][T10086] fuse: Bad value for 'fd' [ 399.066431][ T29] audit: type=1326 audit(1733913472.797:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 399.284725][ T29] audit: type=1326 audit(1733913472.797:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 399.619662][ T29] audit: type=1326 audit(1733913472.797:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 399.674347][ T2159] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 399.732856][ T29] audit: type=1326 audit(1733913472.797:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 399.772120][T10093] FAULT_INJECTION: forcing a failure. [ 399.772120][T10093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.883562][ T2159] usb 2-1: Using ep0 maxpacket: 8 [ 399.953770][T10093] CPU: 1 UID: 0 PID: 10093 Comm: syz.0.1201 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 399.964578][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.974641][T10093] Call Trace: [ 399.977921][T10093] [ 399.980859][T10093] dump_stack_lvl+0x16c/0x1f0 [ 399.985551][T10093] should_fail_ex+0x497/0x5b0 [ 399.990238][T10093] _copy_from_user+0x2e/0xd0 [ 399.994845][T10093] copy_msghdr_from_user+0x99/0x160 [ 400.000054][T10093] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 400.005881][T10093] ___sys_sendmsg+0xff/0x1e0 [ 400.010488][T10093] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.015709][T10093] ? __pfx_lock_release+0x10/0x10 [ 400.020741][T10093] ? trace_lock_acquire+0x14e/0x1f0 [ 400.025959][T10093] ? __fget_files+0x206/0x3a0 [ 400.030651][T10093] __sys_sendmsg+0x16e/0x220 [ 400.035252][T10093] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.040390][T10093] do_syscall_64+0xcd/0x250 [ 400.044907][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.050804][T10093] RIP: 0033:0x7faf21f7ff19 [ 400.055220][T10093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.074849][T10093] RSP: 002b:00007faf22dec058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.083264][T10093] RAX: ffffffffffffffda RBX: 00007faf22145fa0 RCX: 00007faf21f7ff19 [ 400.091237][T10093] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 400.099220][T10093] RBP: 00007faf22dec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.107204][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.115183][T10093] R13: 0000000000000000 R14: 00007faf22145fa0 R15: 00007fff8336a988 [ 400.117260][ T29] audit: type=1326 audit(1733913472.797:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 400.123156][T10093] [ 400.173849][ T29] audit: type=1326 audit(1733913472.797:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa3d2f7ff19 code=0x7ffc0000 [ 400.224239][ T2159] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.258423][ T2159] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 400.273582][ T2159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.368868][ T2159] usb 2-1: Product: syz [ 400.375752][ T2159] usb 2-1: Manufacturer: syz [ 400.380381][ T2159] usb 2-1: SerialNumber: syz [ 400.388015][ T2159] usb 2-1: config 0 descriptor?? [ 400.649440][ T2159] usb 2-1: USB disconnect, device number 16 [ 400.729362][T10107] usb usb8: usbfs: process 10107 (syz.0.1205) did not claim interface 0 before use [ 401.911513][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 402.111445][T10121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.964059][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 402.973346][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.984181][ T9] usb 5-1: config 0 descriptor?? [ 403.047063][ T9] pwc: Philips SPC 900NC USB webcam detected. [ 403.238330][T10129] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 404.118880][T10129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10129 comm=syz.1.1209 [ 404.447679][T10129] vlan3: entered allmulticast mode [ 404.452849][T10129] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 405.051611][T10129] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 405.214980][ T9] pwc: Failed to set LED on/off time (-71) [ 405.329164][ T9] pwc: send_video_command error -71 [ 405.335256][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 405.342763][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 405.519421][ T9] usb 5-1: USB disconnect, device number 36 [ 406.325218][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 406.334325][T10166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1219'. [ 408.443060][ T5822] Bluetooth: hci3: hardware error 0x07 [ 408.753755][ T2159] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 408.913663][ T2159] usb 4-1: Using ep0 maxpacket: 16 [ 408.930503][ T2159] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 408.952726][ T2159] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.976485][ T2159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.013577][ T2159] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.030401][ T2159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.038689][T10205] mkiss: ax0: crc mode is auto. [ 409.046758][ T2159] usb 4-1: Product: syz [ 409.051939][ T2159] usb 4-1: Manufacturer: syz [ 409.058153][ T2159] usb 4-1: SerialNumber: syz [ 409.107526][T10205] mkiss: ax0: crc mode is auto. [ 409.515123][ T6461] kernel write not supported for file /dsp1 (pid: 6461 comm: kworker/1:7) [ 409.550807][ T2159] usb 4-1: 0:2 : does not exist [ 409.572234][ T2159] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 409.622484][ T2159] usb 4-1: USB disconnect, device number 31 [ 409.896441][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.549628][ T5822] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 410.816449][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1241'. [ 410.838957][T10238] openvswitch: netlink: Key type 72 is out of range max 32 [ 412.045048][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 412.045060][ T29] audit: type=1400 audit(1733913485.897:482): avc: denied { read write } for pid=10248 comm="syz.3.1245" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 412.079656][ T29] audit: type=1400 audit(1733913485.897:483): avc: denied { open } for pid=10248 comm="syz.3.1245" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 412.150530][ T5870] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 412.673928][ T5870] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 412.724784][ T5870] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 412.735348][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.745493][ T5870] usb 5-1: config 0 has no interface number 0 [ 412.751609][ T5870] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 412.761582][ T5870] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 14129, setting to 64 [ 412.772740][ T5870] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 412.785868][ T5870] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 412.794970][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.815407][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 412.881653][T10266] nvme_fabrics: missing parameter 'transport=%s' [ 412.888961][ T5870] usb 5-1: config 0 descriptor?? [ 412.889314][T10266] nvme_fabrics: missing parameter 'nqn=%s' [ 412.907316][ T5870] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 413.168177][ T5929] usb 5-1: Failed to submit usb control message: -71 [ 413.172765][ T8] usb 5-1: USB disconnect, device number 37 [ 413.189498][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 413.193538][ T5929] usb 5-1: unable to send the bmi data to the device: -71 [ 413.206581][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.210117][ T5929] usb 5-1: unable to get target info from device [ 413.225902][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 413.247107][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.256632][ T5929] usb 5-1: could not get target info (-71) [ 413.276600][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 413.294906][ T5929] usb 5-1: could not probe fw (-71) [ 413.297270][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.308273][ T9] usb 1-1: Product: syz [ 413.312456][ T9] usb 1-1: Manufacturer: syz [ 413.317183][ T9] usb 1-1: SerialNumber: syz [ 413.330985][ T9] usb 1-1: config 0 descriptor?? [ 413.361124][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1254'. [ 413.644602][ T8] usb 1-1: USB disconnect, device number 25 [ 414.535448][ T29] audit: type=1400 audit(1733913488.907:484): avc: denied { mount } for pid=10291 comm="syz.1.1257" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 414.592180][ T25] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 415.271512][ T29] audit: type=1400 audit(1733913489.657:485): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 415.341067][ T25] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 415.350196][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.360219][ T25] usb 5-1: Product: syz [ 415.369790][ T25] usb 5-1: Manufacturer: syz [ 415.379820][ T25] usb 5-1: SerialNumber: syz [ 415.402348][ T25] usb 5-1: config 0 descriptor?? [ 415.563590][ T6461] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 415.626420][ T25] usb 5-1: ignoring: not an USB2CAN converter [ 415.703596][ T6461] usb 2-1: device descriptor read/64, error -71 [ 415.809698][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 415.948433][T10311] mkiss: ax0: crc mode is auto. [ 416.173747][ T9] usb 5-1: USB disconnect, device number 38 [ 416.433688][ T6461] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 416.496219][T10319] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1266'. [ 416.594088][ T6461] usb 2-1: device descriptor read/64, error -71 [ 417.157311][ T6461] usb usb2-port1: attempt power cycle [ 417.614756][ T6461] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 417.635352][ T6461] usb 2-1: device descriptor read/8, error -71 [ 418.033708][ T6461] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 418.114385][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 418.134198][ T6461] usb 2-1: device descriptor read/8, error -71 [ 418.245936][ T6461] usb usb2-port1: unable to enumerate USB device [ 418.275470][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 418.284463][ T9] usb 3-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 418.300580][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.313719][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=420a, bcdDevice=91.36 [ 418.325591][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.383305][ T9] usb 3-1: Product: syz [ 418.402129][ T9] usb 3-1: Manufacturer: syz [ 418.471619][ T9] usb 3-1: SerialNumber: syz [ 419.459458][ T9] usb 3-1: config 0 descriptor?? [ 419.470355][ T29] audit: type=1400 audit(1733913493.857:486): avc: denied { write } for pid=10378 comm="syz.4.1276" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 421.421022][ T5870] usb 3-1: USB disconnect, device number 17 [ 421.692985][ T29] audit: type=1400 audit(1733913496.067:487): avc: denied { write } for pid=10405 comm="syz.2.1281" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 423.851591][ T5870] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 423.972348][ T29] audit: type=1326 audit(1733913498.347:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.2.1286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa747b7ff19 code=0x0 [ 423.995150][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.013071][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'. [ 424.030411][T10427] tmpfs: Bad value for 'nr_blocks' [ 424.083529][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 424.153189][ T5870] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.198932][ T5870] usb 1-1: config 0 has no interface number 0 [ 424.407365][ T5870] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 424.416713][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.424841][ T5870] usb 1-1: Product: syz [ 424.429186][ T5870] usb 1-1: Manufacturer: syz [ 424.433984][ T5870] usb 1-1: SerialNumber: syz [ 424.463955][ T5870] usb 1-1: config 0 descriptor?? [ 424.474397][ T5870] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 424.682383][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.695724][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.482001][T10445] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.634655][T10447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.857774][T10451] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1294'. [ 425.904120][ T5870] gspca_spca1528: reg_w err -110 [ 425.931795][T10454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.944444][ T5870] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 425.973441][T10454] FAULT_INJECTION: forcing a failure. [ 425.973441][T10454] name failslab, interval 1, probability 0, space 0, times 0 [ 425.987796][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.1.1295 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 425.998579][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 426.008645][T10454] Call Trace: [ 426.011923][T10454] [ 426.014852][T10454] dump_stack_lvl+0x16c/0x1f0 [ 426.019542][T10454] should_fail_ex+0x497/0x5b0 [ 426.024225][T10454] ? fs_reclaim_acquire+0xae/0x150 [ 426.029349][T10454] should_failslab+0xc2/0x120 [ 426.034030][T10454] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 426.039403][T10454] ? getname_flags.part.0+0x4c/0x550 [ 426.044699][T10454] getname_flags.part.0+0x4c/0x550 [ 426.049817][T10454] getname_flags+0x93/0xf0 [ 426.054234][T10454] __x64_sys_rename+0x58/0xa0 [ 426.058914][T10454] do_syscall_64+0xcd/0x250 [ 426.063427][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.069325][T10454] RIP: 0033:0x7f3459f7ff19 [ 426.073739][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.093352][T10454] RSP: 002b:00007f345aca9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 426.101766][T10454] RAX: ffffffffffffffda RBX: 00007f345a145fa0 RCX: 00007f3459f7ff19 [ 426.109748][T10454] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000020000180 [ 426.117730][T10454] RBP: 00007f345aca90a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.125704][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.133697][T10454] R13: 0000000000000000 R14: 00007f345a145fa0 R15: 00007ffc96ce9a78 [ 426.141675][T10454] [ 426.398693][T10463] FAULT_INJECTION: forcing a failure. [ 426.398693][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 426.413624][T10463] CPU: 1 UID: 0 PID: 10463 Comm: syz.1.1297 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 426.424405][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 426.434450][T10463] Call Trace: [ 426.437706][T10463] [ 426.440616][T10463] dump_stack_lvl+0x16c/0x1f0 [ 426.445372][T10463] should_fail_ex+0x497/0x5b0 [ 426.450050][T10463] ? fs_reclaim_acquire+0xae/0x150 [ 426.455158][T10463] should_failslab+0xc2/0x120 [ 426.459829][T10463] __kmalloc_noprof+0xcb/0x510 [ 426.464577][T10463] ? rcu_is_watching+0x12/0xc0 [ 426.469329][T10463] kernfs_fop_write_iter+0x223/0x500 [ 426.474609][T10463] vfs_write+0x5ae/0x1150 [ 426.478949][T10463] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 426.484736][T10463] ? __pfx___mutex_lock+0x10/0x10 [ 426.490188][T10463] ? __pfx_vfs_write+0x10/0x10 [ 426.494960][T10463] ksys_write+0x12b/0x250 [ 426.499283][T10463] ? __pfx_ksys_write+0x10/0x10 [ 426.504117][T10463] do_syscall_64+0xcd/0x250 [ 426.508613][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.514489][T10463] RIP: 0033:0x7f3459f7ff19 [ 426.518889][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.538565][T10463] RSP: 002b:00007f345aca9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.546953][T10463] RAX: ffffffffffffffda RBX: 00007f345a145fa0 RCX: 00007f3459f7ff19 [ 426.554911][T10463] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006 [ 426.562864][T10463] RBP: 00007f345aca90a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.570820][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.578792][T10463] R13: 0000000000000000 R14: 00007f345a145fa0 R15: 00007ffc96ce9a78 [ 426.586767][T10463] [ 426.790637][ T8] usb 1-1: USB disconnect, device number 26 [ 428.176568][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 428.398141][ T25] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 428.422344][ T25] usb 3-1: config 0 has no interface number 0 [ 428.470725][ T25] usb 3-1: config 0 interface 177 altsetting 247 has a duplicate endpoint with address 0x6, skipping [ 428.595509][ T25] usb 3-1: config 0 interface 177 has no altsetting 0 [ 428.606491][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0113, bcdDevice=b4.e1 [ 428.618196][ T29] audit: type=1400 audit(1733913503.017:489): avc: denied { create } for pid=10485 comm="syz.0.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 428.638412][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.654434][ T29] audit: type=1400 audit(1733913503.017:490): avc: denied { sys_admin } for pid=10485 comm="syz.0.1304" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 428.685848][ T25] usb 3-1: Product: syz [ 428.690035][ T25] usb 3-1: Manufacturer: syz [ 428.700534][ T25] usb 3-1: SerialNumber: syz [ 428.778775][ T25] usb 3-1: config 0 descriptor?? [ 429.419668][ T25] usb 3-1: USB disconnect, device number 18 [ 429.921772][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.177/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.189727][T10516] usb usb8: usbfs: process 10516 (syz.4.1312) did not claim interface 0 before use [ 430.941117][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 431.014586][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 431.584522][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 431.592695][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.603797][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 431.611608][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.625030][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.632594][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 431.653133][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 431.667787][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.706800][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 431.718033][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 431.720385][ T25] usb 3-1: config 0 descriptor?? [ 431.729222][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.782205][ T8] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 431.791762][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.803436][ T8] usb 2-1: Product: syz [ 431.807847][ T8] usb 2-1: Manufacturer: syz [ 431.832690][ T8] usb 2-1: SerialNumber: syz [ 431.864415][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 431.881523][ T8] usb 2-1: config 0 descriptor?? [ 432.043780][ T2159] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 432.045274][ T8] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 432.065547][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 432.099040][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.184011][ T2159] usb 4-1: device descriptor read/64, error -71 [ 432.195855][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.276257][ T25] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input25 [ 432.284792][ T8] usb 2-1: USB disconnect, device number 21 [ 432.303591][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 432.318317][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.329219][ T5870] usb 1-1: config 0 descriptor?? [ 432.349534][ T25] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 432.423740][ T2159] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 432.553583][ T2159] usb 4-1: device descriptor read/64, error -71 [ 432.643705][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 432.663879][ T2159] usb usb4-port1: attempt power cycle [ 432.743127][ T5870] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000C/input/input26 [ 432.803606][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 432.810994][ T9] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 432.823155][ T9] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64 [ 432.834203][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 432.843147][ T5870] appleir 0003:05AC:8241.000C: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 432.860176][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.873034][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.881094][ T9] usb 5-1: Product: syz [ 432.889270][ T9] usb 5-1: Manufacturer: â Š [ 432.893987][ T9] usb 5-1: SerialNumber: syz [ 432.907498][T10532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.919799][T10532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.993579][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 433.003733][ T2159] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 433.023984][ T2159] usb 4-1: device descriptor read/8, error -71 [ 433.050797][ T25] usb 3-1: USB disconnect, device number 19 [ 433.143641][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 433.149873][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.160911][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.172916][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.186016][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.195180][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.204877][ T8] usb 2-1: config 0 descriptor?? [ 433.263611][ T2159] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 433.283984][ T2159] usb 4-1: device descriptor read/8, error -71 [ 433.293877][T10536] FAULT_INJECTION: forcing a failure. [ 433.293877][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.307294][T10536] CPU: 1 UID: 0 PID: 10536 Comm: syz.0.1315 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 433.318065][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.328109][T10536] Call Trace: [ 433.331374][T10536] [ 433.334299][T10536] dump_stack_lvl+0x16c/0x1f0 [ 433.338970][T10536] should_fail_ex+0x497/0x5b0 [ 433.343648][T10536] _copy_to_user+0x32/0xd0 [ 433.348076][T10536] simple_read_from_buffer+0xd0/0x160 [ 433.353461][T10536] proc_fail_nth_read+0x198/0x270 [ 433.358502][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.364070][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.369613][T10536] vfs_read+0x1df/0xbe0 [ 433.373756][T10536] ? __fget_files+0x1fc/0x3a0 [ 433.378423][T10536] ? __pfx___mutex_lock+0x10/0x10 [ 433.383443][T10536] ? __pfx_vfs_read+0x10/0x10 [ 433.388121][T10536] ? __fget_files+0x206/0x3a0 [ 433.392789][T10536] ksys_read+0x12b/0x250 [ 433.397051][T10536] ? __pfx_ksys_read+0x10/0x10 [ 433.401824][T10536] do_syscall_64+0xcd/0x250 [ 433.406318][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.412201][T10536] RIP: 0033:0x7faf21f7e92c [ 433.416601][T10536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.436196][T10536] RSP: 002b:00007faf22dcb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.444599][T10536] RAX: ffffffffffffffda RBX: 00007faf22146080 RCX: 00007faf21f7e92c [ 433.452556][T10536] RDX: 000000000000000f RSI: 00007faf22dcb0b0 RDI: 0000000000000005 [ 433.460511][T10536] RBP: 00007faf22dcb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 433.468468][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.476426][T10536] R13: 0000000000000000 R14: 00007faf22146080 R15: 00007fff8336a988 [ 433.484392][T10536] [ 433.499272][ T2159] usb usb4-port1: unable to enumerate USB device [ 433.518440][ T5925] usb 1-1: USB disconnect, device number 27 [ 433.925243][ T29] audit: type=1400 audit(1733913508.317:491): avc: denied { watch watch_reads } for pid=10547 comm="syz.2.1324" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 433.964331][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 433.970380][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.987268][ T8] usb 2-1: USB disconnect, device number 22 [ 434.265293][ T29] audit: type=1400 audit(1733913508.647:492): avc: denied { bind } for pid=10555 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.413610][ T5925] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 434.563626][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 434.570143][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.592471][ T5925] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 434.606742][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.616583][ T5925] usb 3-1: Product: syz [ 434.621494][ T5925] usb 3-1: Manufacturer: syz [ 434.626811][ T5925] usb 3-1: SerialNumber: syz [ 434.636075][ T5925] usb 3-1: config 0 descriptor?? [ 434.735442][T10564] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1327'. [ 434.887743][ T5925] usb 3-1: Limiting number of CPorts to U8_MAX [ 434.919443][ T5925] usb 3-1: Not enough endpoints found in device, aborting! [ 435.436184][ T2159] usb 3-1: USB disconnect, device number 20 [ 435.468626][ T9] usb 5-1: bad CDC descriptors [ 436.156487][ T9] usb 5-1: USB disconnect, device number 39 [ 437.797984][T10594] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 437.817489][T10594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10594 comm=syz.3.1333 [ 438.082431][T10598] vlan2: entered allmulticast mode [ 438.087713][T10598] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 438.105832][T10598] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 438.223679][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 438.424491][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 438.438755][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 438.448567][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.466554][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.556862][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.600514][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.757665][ T25] usb 5-1: Product: syz [ 438.792407][ T25] usb 5-1: Manufacturer: syz [ 438.802531][ T25] usb 5-1: SerialNumber: syz [ 439.357386][ T25] usb 5-1: 0:2 : does not exist [ 439.394249][T10621] FAULT_INJECTION: forcing a failure. [ 439.394249][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.474416][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.2.1343 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 439.485229][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.495292][T10621] Call Trace: [ 439.498567][T10621] [ 439.501496][T10621] dump_stack_lvl+0x16c/0x1f0 [ 439.506184][T10621] should_fail_ex+0x497/0x5b0 [ 439.510889][T10621] _copy_from_user+0x2e/0xd0 [ 439.515477][T10621] copy_msghdr_from_user+0x99/0x160 [ 439.520689][T10621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.526520][T10621] ___sys_sendmsg+0xff/0x1e0 [ 439.531120][T10621] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.536338][T10621] ? __pfx_lock_release+0x10/0x10 [ 439.541365][T10621] ? trace_lock_acquire+0x14e/0x1f0 [ 439.546579][T10621] ? __fget_files+0x206/0x3a0 [ 439.551265][T10621] __sys_sendmsg+0x16e/0x220 [ 439.555864][T10621] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.560998][T10621] do_syscall_64+0xcd/0x250 [ 439.565504][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.571400][T10621] RIP: 0033:0x7fa747b7ff19 [ 439.575804][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.595399][T10621] RSP: 002b:00007fa748a3d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.603800][T10621] RAX: ffffffffffffffda RBX: 00007fa747d45fa0 RCX: 00007fa747b7ff19 [ 439.611754][T10621] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 439.619709][T10621] RBP: 00007fa748a3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.627837][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.635796][T10621] R13: 0000000000000000 R14: 00007fa747d45fa0 R15: 00007ffe3b8fd5a8 [ 439.643764][T10621] [ 439.646846][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.943593][ T29] audit: type=1400 audit(1733913515.327:493): avc: denied { append } for pid=10601 comm="syz.4.1337" name="event3" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 440.966985][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.977631][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.041655][T10602] vlan2: entered promiscuous mode [ 441.053609][T10602] vlan2: entered allmulticast mode [ 441.062004][T10602] vlan0: entered allmulticast mode [ 441.129501][T10602] veth0_vlan: entered allmulticast mode [ 441.149593][T10602] vlan0: entered promiscuous mode [ 441.221798][T10602] team0: Port device vlan2 added [ 441.344486][T10634] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1345'. [ 441.426495][T10631] could not allocate digest TFM handle cbcmac-aes-neon [ 442.537096][ T25] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 442.569221][ T25] usb 5-1: USB disconnect, device number 40 [ 442.596840][ T29] audit: type=1400 audit(1733913516.987:494): avc: denied { load_policy } for pid=10651 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 442.624988][T10652] SELinux: policydb version 3342356 does not match my version range 15-33 [ 442.640681][T10652] SELinux: failed to load policy [ 442.719986][ T29] audit: type=1400 audit(1733913517.107:495): avc: denied { shutdown } for pid=10653 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.871574][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.892609][T10662] FAULT_INJECTION: forcing a failure. [ 442.892609][T10662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.095586][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.1.1352 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 443.106393][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.116454][T10662] Call Trace: [ 443.119735][T10662] [ 443.122665][T10662] dump_stack_lvl+0x16c/0x1f0 [ 443.127362][T10662] should_fail_ex+0x497/0x5b0 [ 443.132064][T10662] _copy_from_user+0x2e/0xd0 [ 443.136687][T10662] move_addr_to_kernel+0x68/0x160 [ 443.141740][T10662] __sys_connect+0xb0/0x170 [ 443.146263][T10662] ? __pfx___sys_connect+0x10/0x10 [ 443.151403][T10662] ? __pfx_ksys_write+0x10/0x10 [ 443.156265][T10662] __x64_sys_connect+0x72/0xb0 [ 443.161044][T10662] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.166262][T10662] do_syscall_64+0xcd/0x250 [ 443.170787][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.176693][T10662] RIP: 0033:0x7f3459f7ff19 [ 443.181116][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.200826][T10662] RSP: 002b:00007f3457df6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 443.209257][T10662] RAX: ffffffffffffffda RBX: 00007f345a146080 RCX: 00007f3459f7ff19 [ 443.217238][T10662] RDX: 000000000000000a RSI: 00000000200001c0 RDI: 0000000000000004 [ 443.225221][T10662] RBP: 00007f3457df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 443.233196][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.241171][T10662] R13: 0000000000000000 R14: 00007f345a146080 R15: 00007ffc96ce9a78 [ 443.249158][T10662] [ 443.252209][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.325766][T10652] syz.4.1350 (10652) used greatest stack depth: 20864 bytes left [ 444.345604][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 444.563825][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 444.671365][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.921498][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 444.974298][T10689] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 445.224044][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 445.333544][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.541439][ T9] usb 3-1: Product: syz [ 445.562969][T10691] vlan3: entered allmulticast mode [ 445.592043][ T9] usb 3-1: Manufacturer: syz [ 445.593634][T10691] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 445.613436][T10691] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 445.613441][ T9] usb 3-1: SerialNumber: syz [ 445.613590][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 445.749545][ T9] usb 3-1: config 0 descriptor?? [ 445.954070][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 445.980431][T10697] FAULT_INJECTION: forcing a failure. [ 445.980431][T10697] name failslab, interval 1, probability 0, space 0, times 0 [ 445.993452][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.1.1362 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 446.004219][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.014273][T10697] Call Trace: [ 446.017547][T10697] [ 446.020475][T10697] dump_stack_lvl+0x16c/0x1f0 [ 446.025157][T10697] should_fail_ex+0x497/0x5b0 [ 446.029841][T10697] ? fs_reclaim_acquire+0xae/0x150 [ 446.034965][T10697] should_failslab+0xc2/0x120 [ 446.039646][T10697] __kmalloc_node_noprof+0xd1/0x510 [ 446.044848][T10697] ? __kvmalloc_node_noprof+0x25/0x1a0 [ 446.050310][T10697] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 446.055772][T10697] __kvmalloc_node_noprof+0xad/0x1a0 [ 446.061059][T10697] file_tty_write.constprop.0+0x6dd/0x9a0 [ 446.066786][T10697] ? security_file_permission+0x71/0x210 [ 446.072518][T10697] vfs_write+0x5ae/0x1150 [ 446.076848][T10697] ? __pfx_tty_write+0x10/0x10 [ 446.081621][T10697] ? __pfx_vfs_write+0x10/0x10 [ 446.086385][T10697] ? __fget_files+0x40/0x3a0 [ 446.090989][T10697] ksys_write+0x12b/0x250 [ 446.095316][T10697] ? __pfx_ksys_write+0x10/0x10 [ 446.100180][T10697] do_syscall_64+0xcd/0x250 [ 446.104686][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.110580][T10697] RIP: 0033:0x7f3459f7ff19 [ 446.114993][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.134601][T10697] RSP: 002b:00007f3457dd5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.143009][T10697] RAX: ffffffffffffffda RBX: 00007f345a146160 RCX: 00007f3459f7ff19 [ 446.150979][T10697] RDX: 00000000000001b7 RSI: 0000000020001040 RDI: 0000000000000007 [ 446.158947][T10697] RBP: 00007f3457dd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.166918][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.174882][T10697] R13: 0000000000000000 R14: 00007f345a146160 R15: 00007ffc96ce9a78 [ 446.182870][T10697] [ 446.185944][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.214202][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.228906][ T5868] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 446.238227][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.254412][ T9] usb 3-1: Limiting number of CPorts to U8_MAX [ 446.267290][ T9] usb 3-1: Not enough endpoints found in device, aborting! [ 446.353536][ T5868] usb 1-1: Product: syz [ 446.367928][ T5868] usb 1-1: Manufacturer: syz [ 446.372561][ T5868] usb 1-1: SerialNumber: syz [ 446.404094][ T5868] usb 1-1: config 0 descriptor?? [ 446.418099][T10701] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1364'. [ 446.500808][ T9] usb 3-1: USB disconnect, device number 21 [ 446.693354][ T5868] usb 1-1: Limiting number of CPorts to U8_MAX [ 446.700129][ T5868] usb 1-1: Not enough endpoints found in device, aborting! [ 446.702416][T10704] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 446.859576][ T9] usb 1-1: USB disconnect, device number 28 [ 446.898039][T10704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.001005][T10711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.613297][T10711] bond1: (slave bond2): making interface the new active one [ 447.693340][T10711] bond1: (slave bond2): Enslaving as an active interface with an up link [ 447.850010][T10716] veth0_to_team: entered promiscuous mode [ 447.855884][T10716] veth0_to_team: entered allmulticast mode [ 447.990907][T10721] veth0_to_team: entered promiscuous mode [ 447.996765][T10721] veth0_to_team: entered allmulticast mode [ 448.012777][T10721] FAULT_INJECTION: forcing a failure. [ 448.012777][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 448.025519][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.0.1367 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 448.036280][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.046334][T10721] Call Trace: [ 448.049610][T10721] [ 448.052591][T10721] dump_stack_lvl+0x16c/0x1f0 [ 448.057275][T10721] should_fail_ex+0x497/0x5b0 [ 448.061958][T10721] ? fs_reclaim_acquire+0xae/0x150 [ 448.067077][T10721] should_failslab+0xc2/0x120 [ 448.071757][T10721] __kmalloc_noprof+0xcb/0x510 [ 448.076521][T10721] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 448.082161][T10721] tomoyo_realpath_from_path+0xb9/0x720 [ 448.087708][T10721] ? tomoyo_path_number_perm+0x235/0x590 [ 448.093340][T10721] ? tomoyo_path_number_perm+0x235/0x590 [ 448.098973][T10721] tomoyo_path_number_perm+0x248/0x590 [ 448.104427][T10721] ? tomoyo_path_number_perm+0x235/0x590 [ 448.110059][T10721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.116143][T10721] ? vfs_write+0xaa8/0x1150 [ 448.120658][T10721] ? __pfx_lock_release+0x10/0x10 [ 448.125682][T10721] ? trace_lock_acquire+0x14e/0x1f0 [ 448.130890][T10721] ? lock_acquire+0x2f/0xb0 [ 448.135400][T10721] ? __fget_files+0x40/0x3a0 [ 448.139998][T10721] ? __fget_files+0x206/0x3a0 [ 448.144675][T10721] security_file_ioctl+0x9b/0x240 [ 448.149702][T10721] __x64_sys_ioctl+0xb7/0x200 [ 448.154410][T10721] do_syscall_64+0xcd/0x250 [ 448.158922][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.164817][T10721] RIP: 0033:0x7faf21f7ff19 [ 448.169245][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.188855][T10721] RSP: 002b:00007faf22daa058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.197271][T10721] RAX: ffffffffffffffda RBX: 00007faf22146160 RCX: 00007faf21f7ff19 [ 448.205242][T10721] RDX: 0000000020000340 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 448.213212][T10721] RBP: 00007faf22daa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 448.221182][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.229147][T10721] R13: 0000000000000000 R14: 00007faf22146160 R15: 00007fff8336a988 [ 448.237117][T10721] [ 448.240607][T10721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.803697][ T2159] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 448.971333][ T2159] usb 3-1: Using ep0 maxpacket: 16 [ 449.005649][ T264] Bluetooth: hci5: Frame reassembly failed (-84) [ 449.008919][ T2159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.048818][ T2159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.071921][ T2159] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.103229][ T2159] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.131556][ T2159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.218084][ T2159] usb 3-1: config 0 descriptor?? [ 449.838373][T10743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.882755][T10743] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 449.914007][T10743] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 450.014961][ T2159] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 450.051833][ T2159] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input27 [ 450.138576][ T2159] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 450.444372][ T9] usb 3-1: USB disconnect, device number 22 [ 450.509074][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.530870][T10749] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 450.545705][T10749] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 450.564376][T10749] FAULT_INJECTION: forcing a failure. [ 450.564376][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 450.577313][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.4.1376 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 450.588087][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.598150][T10749] Call Trace: [ 450.601435][T10749] [ 450.604384][T10749] dump_stack_lvl+0x16c/0x1f0 [ 450.609062][T10749] should_fail_ex+0x497/0x5b0 [ 450.613762][T10749] ? fs_reclaim_acquire+0xae/0x150 [ 450.618855][T10749] should_failslab+0xc2/0x120 [ 450.623520][T10749] __kmalloc_noprof+0xcb/0x510 [ 450.628291][T10749] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 450.633934][T10749] tomoyo_realpath_from_path+0xb9/0x720 [ 450.639508][T10749] ? tomoyo_path_number_perm+0x235/0x590 [ 450.645131][T10749] ? tomoyo_path_number_perm+0x235/0x590 [ 450.650844][T10749] tomoyo_path_number_perm+0x248/0x590 [ 450.656376][T10749] ? tomoyo_path_number_perm+0x235/0x590 [ 450.661997][T10749] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.667984][T10749] ? __pfx_lock_release+0x10/0x10 [ 450.673085][T10749] ? trace_lock_acquire+0x14e/0x1f0 [ 450.678279][T10749] ? lock_acquire+0x2f/0xb0 [ 450.682770][T10749] ? __fget_files+0x40/0x3a0 [ 450.687347][T10749] ? __fget_files+0x206/0x3a0 [ 450.692010][T10749] security_file_ioctl+0x9b/0x240 [ 450.697022][T10749] __x64_sys_ioctl+0xb7/0x200 [ 450.701694][T10749] do_syscall_64+0xcd/0x250 [ 450.706188][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.712069][T10749] RIP: 0033:0x7fde3417ff19 [ 450.716474][T10749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.736065][T10749] RSP: 002b:00007fde34f45058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.744462][T10749] RAX: ffffffffffffffda RBX: 00007fde34345fa0 RCX: 00007fde3417ff19 [ 450.752418][T10749] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 450.760402][T10749] RBP: 00007fde34f450a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.768364][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.776322][T10749] R13: 0000000000000000 R14: 00007fde34345fa0 R15: 00007fffec678298 [ 450.784289][T10749] [ 450.798628][T10749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.871122][ T29] audit: type=1400 audit(1733913525.257:496): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 450.892404][ T29] audit: type=1400 audit(1733913525.257:497): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.919919][ T29] audit: type=1400 audit(1733913525.257:498): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.951243][ T29] audit: type=1400 audit(1733913525.257:499): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.982674][ T29] audit: type=1400 audit(1733913525.287:500): avc: denied { prog_load } for pid=10758 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.007055][ T29] audit: type=1400 audit(1733913525.287:501): avc: denied { bpf } for pid=10758 comm="syz.0.1379" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.034015][ T29] audit: type=1400 audit(1733913525.287:502): avc: denied { perfmon } for pid=10758 comm="syz.0.1379" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.046089][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 451.062898][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 451.076352][ T29] audit: type=1400 audit(1733913525.287:503): avc: denied { prog_run } for pid=10758 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.100098][ T29] audit: type=1400 audit(1733913525.317:504): avc: denied { execmem } for pid=10758 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 451.100130][ T29] audit: type=1400 audit(1733913525.317:505): avc: denied { append } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 455.573062][T10795] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 559.733426][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 559.740399][ C1] rcu: 0-...!: (1 GPs behind) idle=c90c/1/0x4000000000000000 softirq=34841/34842 fqs=45 [ 559.751438][ C1] rcu: (detected by 1, t=10502 jiffies, g=29765, q=1080 ncpus=2) [ 559.759254][ C1] Sending NMI from CPU 1 to CPUs 0: [ 559.759277][ C0] NMI backtrace for cpu 0 [ 559.759286][ C0] CPU: 0 UID: 0 PID: 8809 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 559.759301][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 559.759309][ C0] RIP: 0010:lock_release+0x3c6/0x6f0 [ 559.759329][ C0] Code: 19 0f 84 87 01 00 00 48 c7 c7 60 db 6c 8b e8 31 42 b2 09 b8 ff ff ff ff 65 0f c1 05 cc de 8b 7e 83 f8 01 0f 85 fe 01 00 00 9c <58> f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 [ 559.759340][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000046 [ 559.759352][ C0] RAX: 0000000000000001 RBX: 1ffff92000000f86 RCX: ffffc90000007c70 [ 559.759360][ C0] RDX: 1ffff1100b3aea6a RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1d280 [ 559.759369][ C0] RBP: d57e1d102ea6ccdd R08: 0000000000000000 R09: fffffbfff20be2ba [ 559.759377][ C0] R10: ffffffff905f15d7 R11: 0000000000000002 R12: 0000000000000002 [ 559.759385][ C0] R13: 0000000000000003 R14: ffff888059d75358 R15: ffff888059d74880 [ 559.759394][ C0] FS: 00007f17d9f74280(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 559.759409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.759418][ C0] CR2: 00007f3459f63ce0 CR3: 0000000079040000 CR4: 00000000003526f0 [ 559.759427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.759434][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.759443][ C0] Call Trace: [ 559.759449][ C0] [ 559.759454][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 559.759475][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 559.759488][ C0] ? nmi_handle+0x1ac/0x5d0 [ 559.759502][ C0] ? lock_release+0x3c6/0x6f0 [ 559.759515][ C0] ? default_do_nmi+0x6a/0x160 [ 559.759533][ C0] ? exc_nmi+0x170/0x1e0 [ 559.759550][ C0] ? end_repeat_nmi+0xf/0x53 [ 559.759568][ C0] ? lock_release+0x3c6/0x6f0 [ 559.759581][ C0] ? lock_release+0x3c6/0x6f0 [ 559.759595][ C0] ? lock_release+0x3c6/0x6f0 [ 559.759608][ C0] [ 559.759612][ C0] [ 559.759617][ C0] ? debug_object_activate+0x2e6/0x4a0 [ 559.759632][ C0] ? __pfx_lock_release+0x10/0x10 [ 559.759665][ C0] ? lock_acquire+0x2f/0xb0 [ 559.759677][ C0] ? debug_object_activate+0x149/0x4a0 [ 559.759692][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 559.759706][ C0] debug_object_activate+0x2e6/0x4a0 [ 559.759719][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 559.759734][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 559.759749][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 559.759765][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.759782][ C0] ? __pfx_advance_sched+0x10/0x10 [ 559.759795][ C0] enqueue_hrtimer+0x25/0x3c0 [ 559.759817][ C0] __hrtimer_run_queues+0x903/0xae0 [ 559.759835][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 559.759851][ C0] ? read_tsc+0x9/0x20 [ 559.759870][ C0] hrtimer_interrupt+0x392/0x8e0 [ 559.759891][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 559.759907][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 559.759921][ C0] [ 559.759925][ C0] [ 559.759930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.759947][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 559.759963][ C0] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 74 d5 69 7e 65 8b 05 75 d5 69 7e a9 00 01 [ 559.759975][ C0] RSP: 0018:ffffc90003e8fb50 EFLAGS: 00000246 [ 559.759985][ C0] RAX: dffffc0000000000 RBX: ffffc90003e8fc60 RCX: ffffffff821203a3 [ 559.759993][ C0] RDX: 1ffff920007d1f90 RSI: ffffffff821203b1 RDI: 0000000000000001 [ 559.760002][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 559.760010][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90003e8fc98 [ 559.760018][ C0] R13: ffffc90003e8fca0 R14: ffff88807f357318 R15: ffffc90003e8fc60 [ 559.760030][ C0] ? try_to_unlazy+0x103/0x660 [ 559.760049][ C0] ? try_to_unlazy+0x111/0x660 [ 559.760067][ C0] try_to_unlazy+0x197/0x660 [ 559.760086][ C0] complete_walk+0x10b/0x330 [ 559.760104][ C0] path_parentat+0xe5/0x1b0 [ 559.760122][ C0] __filename_parentat+0x22d/0x680 [ 559.760141][ C0] ? __pfx___filename_parentat+0x10/0x10 [ 559.760166][ C0] ? __virt_addr_valid+0x2b4/0x590 [ 559.760183][ C0] ? __pfx_lock_release+0x10/0x10 [ 559.760196][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 559.760216][ C0] do_unlinkat+0x106/0x760 [ 559.760230][ C0] ? __virt_addr_valid+0x5e/0x590 [ 559.760246][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 559.760259][ C0] ? __check_object_size+0x488/0x710 [ 559.760277][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 559.760295][ C0] __x64_sys_unlink+0xc5/0x110 [ 559.760309][ C0] do_syscall_64+0xcd/0x250 [ 559.760325][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.760340][ C0] RIP: 0033:0x7f17d9b17da7 [ 559.760351][ C0] Code: f0 ff ff 73 01 c3 48 8b 0d 7e 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 90 0d 00 f7 d8 64 89 01 48 [ 559.760362][ C0] RSP: 002b:00007fff586b8078 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 559.760374][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17d9b17da7 [ 559.760383][ C0] RDX: 0000000000000000 RSI: 0000557f331aa510 RDI: 00007fff586b8098 [ 559.760391][ C0] RBP: 0000557f331ea040 R08: 0000000000000000 R09: 042dc9cc5c57b4e0 [ 559.760399][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 559.760407][ C0] R13: 00007fff586b8098 R14: 0000557f331aa500 R15: 0000557efbeab160 [ 559.760420][ C0] [ 559.761274][ C1] rcu: rcu_preempt kthread starved for 10412 jiffies! g29765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 560.313761][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 560.323720][ C1] rcu: RCU grace-period kthread stack dump: [ 560.329595][ C1] task:rcu_preempt state:R running task stack:28424 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 560.341346][ C1] Call Trace: [ 560.344649][ C1] [ 560.347578][ C1] __schedule+0xe58/0x5ad0 [ 560.351997][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 560.357208][ C1] ? __pfx___schedule+0x10/0x10 [ 560.362055][ C1] ? schedule+0x298/0x350 [ 560.366376][ C1] ? __pfx_lock_release+0x10/0x10 [ 560.371399][ C1] ? lock_acquire+0x2f/0xb0 [ 560.375895][ C1] ? schedule+0x1fd/0x350 [ 560.380224][ C1] schedule+0xe7/0x350 [ 560.384287][ C1] schedule_timeout+0x124/0x280 [ 560.389136][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 560.394509][ C1] ? __pfx_process_timeout+0x10/0x10 [ 560.399808][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.405608][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 560.411071][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 560.415843][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 560.421122][ C1] ? rcu_gp_init+0xc82/0x1630 [ 560.425796][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 560.430998][ C1] rcu_gp_kthread+0x271/0x380 [ 560.435676][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 560.440870][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.446069][ C1] ? __kthread_parkme+0x148/0x220 [ 560.451114][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 560.456321][ C1] kthread+0x2c1/0x3a0 [ 560.460394][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.465593][ C1] ? __pfx_kthread+0x10/0x10 [ 560.470189][ C1] ret_from_fork+0x45/0x80 [ 560.474607][ C1] ? __pfx_kthread+0x10/0x10 [ 560.479206][ C1] ret_from_fork_asm+0x1a/0x30 [ 560.483997][ C1] [ 560.487019][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 560.493334][ C1] CPU: 1 UID: 0 PID: 10795 Comm: syz.2.1387 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 560.504090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 560.514135][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 560.521073][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0d 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 560.540671][ C1] RSP: 0018:ffffc9000bb77b30 EFLAGS: 00000246 [ 560.546732][ C1] RAX: 0000000000080000 RBX: ffff8880b86469c0 RCX: ffffc9000cc21000 [ 560.554694][ C1] RDX: 0000000000080000 RSI: ffffffff818df5d6 RDI: 0000000000000005 [ 560.562931][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 560.570900][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170c8d39 [ 560.578861][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 560.586825][ C1] FS: 00007fa748a3d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 560.595755][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.602333][ C1] CR2: 000000110c39450e CR3: 0000000028886000 CR4: 00000000003526f0 [ 560.610299][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.618262][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.626226][ C1] Call Trace: [ 560.629514][ C1] [ 560.632354][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 560.638684][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 560.643903][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 560.649385][ C1] ? timekeeping_advance+0x72e/0xa90 [ 560.654670][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 560.660309][ C1] ? __asan_memcpy+0x3c/0x60 [ 560.664899][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 560.670196][ C1] ? rcu_is_watching+0x12/0xc0 [ 560.674969][ C1] ? update_process_times+0x178/0x2d0 [ 560.680340][ C1] ? __pfx_update_process_times+0x10/0x10 [ 560.686062][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 560.691525][ C1] ? update_wall_time+0x1c/0x40 [ 560.696373][ C1] ? tick_nohz_handler+0x376/0x530 [ 560.701490][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 560.706950][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 560.712339][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 560.718059][ C1] ? read_tsc+0x9/0x20 [ 560.722140][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 560.727254][ C1] ? sched_core_idle_cpu+0xc4/0x250 [ 560.732453][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 560.738608][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 560.744413][ C1] [ 560.747340][ C1] [ 560.750266][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.756427][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 560.762493][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 560.768563][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 560.773589][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 560.778613][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 560.783727][ C1] text_poke_bp_batch+0x22b/0x760 [ 560.788756][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 560.793779][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 560.799327][ C1] ? text_poke_queue+0xef/0x180 [ 560.804178][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 560.810427][ C1] text_poke_finish+0x30/0x40 [ 560.815105][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 560.821088][ C1] jump_label_update+0x1d7/0x400 [ 560.826042][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 560.831940][ C1] static_key_enable+0x1a/0x20 [ 560.836703][ C1] sched_core_get+0x8a/0xa0 [ 560.841202][ C1] sched_core_share_pid+0x41f/0xa00 [ 560.846401][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.852301][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 560.858026][ C1] ? static_key_count+0x5a/0x70 [ 560.862883][ C1] ? security_task_prctl+0x11c/0x160 [ 560.868177][ C1] __do_sys_prctl+0x15e6/0x2190 [ 560.873032][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 560.878236][ C1] do_syscall_64+0xcd/0x250 [ 560.882749][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.888639][ C1] RIP: 0033:0x7fa747b7ff19 [ 560.893072][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.912678][ C1] RSP: 002b:00007fa748a3d058 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 560.921088][ C1] RAX: ffffffffffffffda RBX: 00007fa747d45fa0 RCX: 00007fa747b7ff19 [ 560.929052][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 560.937013][ C1] RBP: 00007fa747bf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 560.944980][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 560.952944][ C1] R13: 0000000000000000 R14: 00007fa747d45fa0 R15: 00007ffe3b8fd5a8 [ 560.960921][ C1]