last executing test programs: 9.504555432s ago: executing program 4 (id=1280): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r1 = epoll_create1(0x80000) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x6000200e}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000008c0), 0x442000, 0x0) ioctl$mixer_OSS_GETVERSION(r4, 0x80044d76, &(0x7f0000000900)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r5) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000880)={0x80, 0x28, 0x5}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="420000000200"], 0x42) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0xfffffffc}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r10, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x4], 0x0, 0x0, 0x1}}, 0x40) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_usb_connect$cdc_ecm(0x1, 0x83, &(0x7f00000003c0)={{0x12, 0x1, 0x852696f9fd575190, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x2, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x51, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "3c0b86b782"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x62c7, 0x8, 0x1}, [@country_functional={0x12, 0x24, 0x7, 0xb, 0x0, [0x2, 0x80, 0x8, 0x7, 0x101, 0x3]}, @obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5}, @mbim={0xc, 0x24, 0x1b, 0xe, 0x8, 0x6, 0x6, 0x1, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xe, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0xf1, 0x7}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x1e, 0x7, 0x1, 0x8}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "3b364ec38f28a59562be262b1168dfa5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0xf, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7, 0x0, 0xff, [0x30, 0xc0, 0x0, 0x50, 0xff00c0]}]}, 0x3, [{0x1a, &(0x7f0000000340)=@string={0x1a, 0x3, "1da3bd18ae8bd2a13172185462c3ce223ad5318309fd097d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0xa0, 0xc, 0x20, {0x20, 0x31, "533fe366026612f9f377f1bf5e8e379e9a30bd544296a0bdbe84369916d5"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000700)={0x60, 0xd, 0x96, "28537405f410970f51608ff845d9e72edf5657556561cc218963329e6a4698e81abc4ff67c5ef91b1125e4ba15cb80212a946dc057bd01078f312adcbe9812c7aa85f618693d6a9645bd6700b79f3138e892159b668e7e5be2226aef6b20fdc08cdb31ad7acd8ec5901ec5f3216cee01004de764a127b547e10ff3327d0f24146622b99150011409a95c3fbfe8b080e07a8c85964373"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', r13, 0x20, 0x8, 0x8, 0x0, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x66, 0xc, 0x2, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x12, [@multicast2, @loopback]}, @cipso={0x86, 0x35, 0x2, [{0x1, 0x12, "1a591df183d594cd02ea51b87814bb46"}, {0x7, 0x2}, {0x4, 0xd, "6992631a7ea5ba1358781a"}, {0x2, 0xe, "72dfea9bc81d986c015ecae0"}]}]}}}}}) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x1, @pix={0x9, 0x5, 0x47524247, 0x9, 0xa, 0x4cb5cf38, 0x5, 0x8001, 0x0, 0x8, 0x2, 0x2}}) 8.830298378s ago: executing program 0 (id=1281): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2137) 8.50634712s ago: executing program 1 (id=1282): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x70) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000880)=0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa0800, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x5) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x10010001ffffffff, 0x2001) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 8.445192387s ago: executing program 0 (id=1283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x7b, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x20003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 8.277115557s ago: executing program 2 (id=1284): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2a0000000400000000000000000000000500000000000040040000000000000002000000000000000000"], 0x2a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x20c088, &(0x7f0000003580)=ANY=[@ANYRES8=r1, @ANYBLOB="866dc724f03dbc07814599ad09856719ea17b59f4c1b4581b0ca2c01dc7d14f783297b2c7eedfddd2204e70a497fe7a6b771f01eff0894311fd0a1c412f680543bdec98633635d6fc0bc5c025d3c849c240dea4b160de2dba7e5f530cb2b473ce2ce", @ANYRES8=r2, @ANYBLOB="314b2fd703f89ae1249cf7b42828e8531f903264879d010cb89c188bb40fd661dd55568015cc5ef014cc4a29e1b6c126140c4120c5db9a9563e88433597188216151826a4453f0256c7cfecbe60fa5a5824cd3a08faf6824d7233b71d12802672feaef35459cc21e842a8a3c4cd59e0ac33c166dbee1c3225a3a29aa6380bd8ac4f8f16149ec4c22a050404e57ab4e1045aac18210e83618985820889f1be4757cf57c43a003e7e9aebfac3c403e3128672cad1c4774256bc3c612d64792bad7897c95ef220d1c2535d2fd1572f2478ff127e3d3f146a2f60100fb6e1a25d128d951529a917d93049879aa87ec06236aac371e5d78163724"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) r3 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7fff, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x36, 0xfd75) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.236401854s ago: executing program 3 (id=1285): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0xc0800) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x200, 0x7a, 0x6, 0xbe, 0x81}) 7.964843913s ago: executing program 0 (id=1286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x10c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x100000d873}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0xe, 0x0, 0x78, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000004c0)}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) socket$inet6_tcp(0xa, 0x1, 0x0) 7.774237601s ago: executing program 0 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x20680, 0x0) read$rfkill(r3, &(0x7f0000000380), 0x8) 7.182475061s ago: executing program 1 (id=1288): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) read$FUSE(r0, 0x0, 0x0) 7.106996303s ago: executing program 2 (id=1289): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r3 = socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04001220", @ANYRES16], 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000002c0)=0xb, 0x4) accept$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0xfffffffffffffcf3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000180), 0x0}, 0x20) shutdown(r6, 0x0) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002130000020000000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x21) setuid(0xee00) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/5, 0x5) 6.394178647s ago: executing program 4 (id=1290): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 6.247049945s ago: executing program 1 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000040), 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = open(0x0, 0x0, 0x0) getdents(r4, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000084000000000000009199a0", @ANYRES16, @ANYRES32=r3, @ANYBLOB="93921f31fdba6e4f788b4f0bc6d56e1ec26f13c4d56b17ff3dd4e2a0956ef4b8fae920679498992b2e98381f153072d5845e68bebfaa5afd"], 0x18}, 0x80c4) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000ffdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000050074"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) 5.389376866s ago: executing program 4 (id=1292): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000cb962a102c0a0800cfe80102e40009021200010000000009040000001802f400"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000004000000000009000000240004801300010062726f6164636173742d6c696e6b"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000009c0)={&(0x7f0000000780), 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1a4}}, 0x888) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x4, 0xdc, {0xdc, 0x14, "ec6106ad3301eb32cd0ba2d8ad182cddcd07be08f616850df0ba2c38e8c036e261e4ef6d2fa106d05ed33c42fd211ce9ff102a3c224617595f77f311c00f20d230cf8cd2fbb6adea909a1a6e65e39bbb4745292075f98c9db7ac628bc625f30329f3d89daad600b476c9e40f3a1a8d83fc1b03f3b29026a458a16cefd6c00f15bd5174d4c2b789586bcf59861d29e261512020a03ec414e7f57952d47c8f8154deadc38b51423e95d3e7ecb660b0bd3cf80cb58bad9d95a5156b92533af9f7c9d85a3bd2c184e028c015f257a34888e6c702b3a262964f02a2c7"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000140)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x38, 0x7, 0xfb}, @ssp_cap={0x18, 0x10, 0xa, 0xba, 0x3, 0x6, 0xff00, 0x2, [0x30, 0xf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xb, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x9, 0x8000}, @generic={0x26, 0x10, 0xb, "e653df73d971799bea6b8983bbd096caca59827334a306054f9b5094a08712c9b27711"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x68, 0x3, 0x80, 0x79, "864c4126", "c700b83f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x4, 0x29, 0x1f, 0x5}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x10, 0x2, "eee3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0xe0, 0x1, [0xf0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xde}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "aee8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f9b6"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) 5.199491332s ago: executing program 2 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='rxrpc_improper_term\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfd324000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x509801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000003f74b48300f604000000ff0061190200000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000001c0)=ANY=[]) syz_io_uring_setup(0xfb, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r7, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050004000000006110510000000000af2af21d2b9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x1f, 0x80000, 0x9) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000001b000000000011400000000000000000000000000000000000000001e000000102"], 0xc0}}, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) 4.893343769s ago: executing program 0 (id=1294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone3(&(0x7f0000001880)={0x3ffffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e9, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 4.891284111s ago: executing program 3 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000000c0)={0x8000000, 0x1000000, 0x0, 0x0, 0xf, "bb5dee00"}) 4.631833028s ago: executing program 3 (id=1296): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x367) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000006c0)=""/210, 0xd2, 0x4800000000000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1e, 0x11, r3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000100), 0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) process_vm_writev(r4, &(0x7f0000000540)=[{&(0x7f0000000280)=""/207, 0xcf}, {0x0}, {0x0}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000640)=""/179, 0xb3}], 0x5, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/55, 0x37}, {&(0x7f0000000780)=""/165, 0xa5}], 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) (fail_nth: 7) 4.285032303s ago: executing program 1 (id=1297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x10c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x100000d873}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0xe, 0x0, 0x78, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000004c0)}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) socket$inet6_tcp(0xa, 0x1, 0x0) 4.214431493s ago: executing program 3 (id=1298): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x20497000) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="63202a3a2a2002"], 0x8) 4.033732369s ago: executing program 3 (id=1299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000080), 0xe) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x58, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40013) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r9, r9) 4.014299518s ago: executing program 1 (id=1300): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001480)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904", @ANYRESHEX=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x3) lseek(r2, 0x4, 0x1) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, &(0x7f0000000400)={0x0, 0x0, 0x24, {0x24, 0x8, "d65d45aaaeec4fc7db691b0153999a42fdc9c3a365a4b62b6948c71aad3067b3b945"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x0, 0x9, 0xa4, "b1c87a5398025afacd27c0d49e58667db0a0fa79ee7b9f21d579d828739a0fd0aedc7956028b4639f96f9725570d4c711b29b6993c56879a425ffd4fd96fda0d8fd49cafc4710d281f78290ef6f8b742ad7fe5f41b4de9f41098f5a7ebdee6f13c3c9130b6ec9bc4970586dd0b90054514615c702258317f9b04968b01325e8d41fa190e33b97d8d0bbbcc6226a9dce6f7f1dd547ab203f0cd5a8525c442c484e7d02b77"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x15) r7 = syz_usb_connect$cdc_ecm(0x3, 0x70, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x0, 0x100, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "f7089f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x7e0, 0x84}, [@obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x7f, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x9, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xdd, 0x4, 0xbc}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x6, 0x4, 0xcc, 0xff, 0x7}, 0x19, &(0x7f0000000980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "e4a18e264394d66f47cf08288355434f"}]}, 0x6, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x827}}, {0xfd, &(0x7f0000000a80)=@string={0xfd, 0x3, "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"}}, {0x1c, &(0x7f0000000b80)=@string={0x1c, 0x3, "bcc519db894fecc2677b9d8d7fd07b7d2b9276949defb08593d3"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x6cf9c4fe82934e5a}}]}) syz_usb_control_io(r7, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c80)={0x40, 0x22, 0x20, {0x20, 0x10, "6db5658596c44a7a5ad600d0bd604ac2b272cdbe9e37978fed00375e3799"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000e00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x4, 0xe, "9c001a52", "8149e8ba"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xa, 0x7, 0x8, 0x5, 0x9faa}}}, &(0x7f00000013c0)={0x84, &(0x7f0000000f00)={0x40, 0xb, 0xf7, "f3a5df3413561268c91031d26cf5da7b5dbe4d0acf764193b3d501374d05eca237b3286c85358314b28cd6efa5cba0a725b192e77fd59a89d60c9e6fdc0c67bcf74b7b790e4681c0fab05c68db4c00a8a34dfe00f7eb415bf0d3e6041692ac11bd82a861b57a0516af5598631724b4ad5e78d8966b7a476c0dd5726794e9e0d3421b54906c5cd53af217e909f80f2f10077bd6f2ce8ede5134c425a9fd9a9df9fd6cd166f18f25afd174553c9631920f0f8f893847d0a5639881e5ba6cca362c0b52384e3b3f8c7117c4934ea9126c149338eb7ade02ed8de1fc4fb65ce081a9598d35a83be6d8d5727847065a698732f67ff6e1a67443"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001080)={0x20, 0x0, 0x4}, &(0x7f00000010c0)={0x20, 0x0, 0x8, {0x1c00, 0x80, [0xf00]}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001180)={0x40, 0xb, 0x2, "69c4"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001200)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001240)={0x40, 0x17, 0x6}, &(0x7f0000001280)={0x40, 0x19, 0x2, "72bc"}, &(0x7f00000012c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001300)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001340)={0x40, 0x1e, 0x1}, &(0x7f0000001380)={0x40, 0x21, 0x1, 0x6}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r9, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x88) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000840)={0x6, "dfc93da91a98eb911fe9c22158d25edb767db6d012a0644b49c04cd33641621e1c96bea29439d40b98c75e7f59cb8f383782e5ac6f87db7a7c1bf32d80af1675"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005d75b94082058d00ac7a01020301090212000100000a000904000000959ec800a6d6d408d4ad450d4c488e6ed2bf5cfeeb596d9b32f86519d0b32bdc13db76b4036a1979c673f5cd46b64be49ae6fb7c843257c3f3b17700fee7c0b951b3958e0c4ff3304d24e8b118d709233a1ec26b73edd581b6b2bc73ce4b50c5d8545c5f48d67957e751d7a2efa1d364910b4e5ce713da13191256ee"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES16=r1, @ANYRES16=r9], 0x0) 2.842098359s ago: executing program 0 (id=1301): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) fcntl$addseals(r0, 0x409, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x185, "f927d0dd58d24ba439e1577081b2e0b9a7ec63e728a2e8f4b9a39bc7d3952c29757dc829c5bef074ca9afe881e0509ff008a21f4ce7a2e34cfcc9650f0b8778f587e9d59f23e5d8dfd1155d9da3cd0e19879bd80ca8897293f879ab0954c8e95a525e42734589ca4bb757a89a71d7309e8d8f6cac0d8aa52bb41df27a0849279d4ed3bf3d6967844adb459c9b8d2b7ab41440351fc3ea803e7000000000000000093f74c83b64fffb6b405c5ea6d90ea7a07b2bd73c2fcfb8f11e3e1ca6e693fd26518df54a11293c8965d9309a8926344b0e40624856bd0befc352618267a9f70c43ea54a938b0d88853e890106ffc047b6bb79ce27a07190672eece0fb3676129ecb65eb24c803b1f5194c18791aba7f96a7527822f2c813210a44918325fab0418a1a5f66535104d1a85ef67b811955d8676f470c10f114d572a88f25d8957192a86d95dc826aca89e417fc1280b868907c7c1e13252759e15e54be61749fdf54bb529446c553eabb1635e09cc63cd0da1c8f3d86b4b500"/389}, &(0x7f0000000180)=0x18d) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000001c0)={r8, 0x30, "28e124b4c43e96b77667e9f3d851aa95bba14d1c07ac4b8c17252b2e07b6761f29023539e78e3e99422caf24bd9b59a7"}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r9, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) 2.73306004s ago: executing program 2 (id=1302): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r1 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x8000000000000001, 0x2001) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_io_uring_setup(0x206c, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x568, 0x0, 0x2e, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000a40)={0x852, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) fsetxattr(r0, &(0x7f00000009c0)=@known='system.posix_acl_access\x00', &(0x7f0000000a00)='#\'$]!/)}@/%\x00', 0xc, 0x2) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x1, 0x2002) 2.569916804s ago: executing program 2 (id=1303): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.326342098s ago: executing program 3 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x20680, 0x0) read$rfkill(r3, &(0x7f0000000380), 0x8) 1.410717521s ago: executing program 4 (id=1305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18c8252cbe000000000000000000000095000000000000000ab9eab1260e52788eecb2dfb8a01bee23c02f9f7a501da9a4d38fd35df3e7110af9cc7e0fa0030f46e0dfdfc26833b98377baffc381054c891c79c051176b5e28649151a45cde036d45310974cc7c38064f1dc8377ca0d1e59a8266bda45751f46621b2b1a707a7a49a1e65b826e6bbb26d2333a092a6669bf2bdd4d163d8646fd926268025fc4dd96be95b24539c27d575f7aada231fa30b54ed537274b7e922841d26d79ee8b2b9a3a3e40c77a230f77dc078c2d8e9c3642558f590800131eb8a75e10ba15da5262352d225e0fc00a26ffa7df2436b2c5cbd8d3eff52a6c01a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) socket$netlink(0x10, 0x3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r5, &(0x7f0000000080)=@un=@abs, 0x80) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, r9, 0x0) sendmmsg$unix(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="bd1e", 0x2}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r9}}}], 0x20, 0x4000080}}], 0x1, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, &(0x7f0000001980)) 1.303326551s ago: executing program 2 (id=1306): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.250296829s ago: executing program 1 (id=1307): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x8, 0x0, 0xff, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000280)={r1, 0xcc8, 0x7, 0x5}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xa, 0x1, 0x3}}}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup(r0) fsetxattr$security_selinux(r2, &(0x7f0000000100), 0x0, 0x0, 0x6) 160.514688ms ago: executing program 4 (id=1308): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0xffffffff, 0xe, 0x1bf, 0x0}) 0s ago: executing program 4 (id=1309): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x8b01, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) kernel console output (not intermixed with test programs): 292] RDX: 0000000020000d40 RSI: 00000000c0386105 RDI: 0000000000000003 [ 332.031639][ T9292] RBP: 00007f556e2d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.039598][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.047553][ T9292] R13: 0000000000000000 R14: 00007f556d745fa0 R15: 00007ffffed245d8 [ 332.055521][ T9292] [ 332.185055][ T9302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.897'. [ 332.430647][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 333.195052][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 333.203547][ T5946] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.227257][ T5946] usb 3-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 333.244482][ T5946] usb 3-1: config 0 has no interface number 0 [ 333.256635][ T5946] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.303179][ T5946] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.322529][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.350472][ T5946] usb 3-1: Product: syz [ 333.354891][ T5946] usb 3-1: Manufacturer: syz [ 333.359601][ T5946] usb 3-1: SerialNumber: syz [ 333.381732][ T5946] usb 3-1: config 0 descriptor?? [ 333.414259][ T9326] FAULT_INJECTION: forcing a failure. [ 333.414259][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 333.443332][ T9326] CPU: 1 UID: 0 PID: 9326 Comm: syz.0.909 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 333.453610][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.463736][ T9326] Call Trace: [ 333.467026][ T9326] [ 333.470037][ T9326] dump_stack_lvl+0x16c/0x1f0 [ 333.474729][ T9326] should_fail_ex+0x497/0x5b0 [ 333.479502][ T9326] ? fs_reclaim_acquire+0xae/0x150 [ 333.484623][ T9326] should_failslab+0xc2/0x120 [ 333.489300][ T9326] __kmalloc_noprof+0xcb/0x510 [ 333.494047][ T9326] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 333.499053][ T9326] video_usercopy+0x1ac/0x1620 [ 333.503799][ T9326] ? __pfx___video_do_ioctl+0x10/0x10 [ 333.509145][ T9326] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 333.515979][ T9326] ? __pfx_video_usercopy+0x10/0x10 [ 333.521161][ T9326] v4l2_ioctl+0x1ba/0x250 [ 333.525465][ T9326] ? __pfx_v4l2_ioctl+0x10/0x10 [ 333.530291][ T9326] __x64_sys_ioctl+0x190/0x200 [ 333.535120][ T9326] do_syscall_64+0xcd/0x250 [ 333.539604][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.545477][ T9326] RIP: 0033:0x7ff530d80849 [ 333.549865][ T9326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.569446][ T9326] RSP: 002b:00007ff531ae7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.577861][ T9326] RAX: ffffffffffffffda RBX: 00007ff530f45fa0 RCX: 00007ff530d80849 [ 333.585998][ T9326] RDX: 0000000020000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 333.593948][ T9326] RBP: 00007ff531ae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.601895][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.609840][ T9326] R13: 0000000000000000 R14: 00007ff530f45fa0 R15: 00007ffde9bede18 [ 333.617793][ T9326] [ 333.649394][ T5946] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.659184][ T5946] usb 3-1: qt2_attach - failed to power on unit: -71 [ 333.670539][ T5946] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 333.738613][ T5946] usb 3-1: USB disconnect, device number 25 [ 334.310666][ T972] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 334.670255][ T972] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 334.679692][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.816063][ T972] usb 1-1: Product: syz [ 335.012513][ T972] usb 1-1: Manufacturer: syz [ 335.017148][ T972] usb 1-1: SerialNumber: syz [ 335.098203][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 335.298475][ T972] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 335.492113][ T972] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 335.546024][ T972] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.557386][ T9377] FAULT_INJECTION: forcing a failure. [ 335.557386][ T9377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.600605][ T972] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.609391][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.4.921 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 335.619650][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.629695][ T9377] Call Trace: [ 335.632954][ T9377] [ 335.635865][ T9377] dump_stack_lvl+0x16c/0x1f0 [ 335.640525][ T9377] should_fail_ex+0x497/0x5b0 [ 335.645181][ T9377] _copy_from_user+0x2e/0xd0 [ 335.649744][ T9377] userfaultfd_ioctl+0x2302/0x3830 [ 335.654835][ T9377] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 335.660284][ T9377] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 335.666779][ T9377] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 335.673301][ T9377] ? __pfx_lock_release+0x10/0x10 [ 335.678326][ T9377] ? selinux_file_ioctl+0x180/0x270 [ 335.683520][ T9377] ? selinux_file_ioctl+0xb4/0x270 [ 335.688624][ T9377] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 335.694072][ T9377] ? __x64_sys_ioctl+0x190/0x200 [ 335.699005][ T9377] __x64_sys_ioctl+0x190/0x200 [ 335.703761][ T9377] do_syscall_64+0xcd/0x250 [ 335.708262][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.714148][ T9377] RIP: 0033:0x7f9002d80849 [ 335.718544][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.738160][ T9377] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.746561][ T9377] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 335.754514][ T9377] RDX: 0000000020000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 335.762470][ T9377] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.770433][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.778398][ T9377] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 335.786377][ T9377] [ 335.862561][ T972] usb 1-1: USB disconnect, device number 19 [ 335.929287][ T972] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 335.970908][ T972] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 335.980845][ T972] visor 1-1:1.0: device disconnected [ 336.572659][ T29] audit: type=1400 audit(1732949067.305:713): avc: denied { write } for pid=9385 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.902667][ T9243] Bluetooth: Error in BCSP hdr checksum [ 337.000440][ T5936] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 337.137477][ T9410] FAULT_INJECTION: forcing a failure. [ 337.137477][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 337.150464][ T9410] CPU: 0 UID: 0 PID: 9410 Comm: syz.3.930 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 337.155617][ T6173] Bluetooth: Error in BCSP hdr checksum [ 337.160695][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.160709][ T9410] Call Trace: [ 337.160715][ T9410] [ 337.160723][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 337.160753][ T9410] should_fail_ex+0x497/0x5b0 [ 337.160779][ T9410] ? fs_reclaim_acquire+0xae/0x150 [ 337.160810][ T9410] should_failslab+0xc2/0x120 [ 337.160834][ T9410] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 337.160856][ T9410] ? __d_alloc+0x31/0xaa0 [ 337.160881][ T9410] __d_alloc+0x31/0xaa0 [ 337.160905][ T9410] d_alloc_pseudo+0x1c/0xc0 [ 337.160930][ T9410] alloc_file_pseudo+0xdc/0x210 [ 337.160955][ T9410] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 337.160986][ T9410] sock_alloc_file+0x50/0x1d0 [ 337.235311][ T9410] do_accept+0x23e/0x530 [ 337.239550][ T9410] ? do_raw_spin_lock+0x12d/0x2c0 [ 337.244565][ T9410] ? __pfx_do_accept+0x10/0x10 [ 337.249322][ T9410] __sys_accept4+0xfe/0x1b0 [ 337.253810][ T9410] ? __pfx___sys_accept4+0x10/0x10 [ 337.258902][ T9410] ? __pfx_ksys_write+0x10/0x10 [ 337.263746][ T9410] __x64_sys_accept4+0x96/0x100 [ 337.268585][ T9410] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.273772][ T9410] do_syscall_64+0xcd/0x250 [ 337.278286][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.284169][ T9410] RIP: 0033:0x7f556d580849 [ 337.288567][ T9410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.308203][ T9410] RSP: 002b:00007f556e2d1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 337.316636][ T9410] RAX: ffffffffffffffda RBX: 00007f556d745fa0 RCX: 00007f556d580849 [ 337.324602][ T9410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 337.332561][ T9410] RBP: 00007f556e2d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 337.340515][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.348467][ T9410] R13: 0000000000000000 R14: 00007f556d745fa0 R15: 00007ffffed245d8 [ 337.356446][ T9410] [ 337.378005][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.389309][ T5936] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 337.402284][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.411746][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.212302][ T62] Bluetooth: Error in BCSP hdr checksum [ 338.220453][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 338.234607][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 338.261956][ T29] audit: type=1804 audit(1732949069.125:714): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.932" name="/newroot/194/file0" dev="fuse" ino=1 res=1 errno=0 [ 338.332361][ T5936] usb 5-1: Product: syz [ 338.337384][ T62] Bluetooth: Error in BCSP hdr checksum [ 338.337513][ T5946] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 338.365988][ T5936] usb 5-1: Manufacturer: syz [ 338.440503][ T5936] usb 5-1: SerialNumber: syz [ 338.487688][ T9427] netlink: 'syz.1.936': attribute type 3 has an invalid length. [ 338.496345][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'. [ 338.505331][ T9427] netlink: 'syz.1.936': attribute type 3 has an invalid length. [ 338.513229][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'. [ 338.521856][ T5946] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.528964][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 338.538494][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.557768][ T5946] usb 3-1: config 0 descriptor?? [ 338.597821][ T3031] Bluetooth: Error in BCSP hdr checksum [ 338.652924][ T9394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.683689][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 338.851457][ T9243] Bluetooth: Error in BCSP hdr checksum [ 338.860692][ T29] audit: type=1804 audit(1732949069.715:715): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.935" name="/newroot/196/file0" dev="fuse" ino=1 res=1 errno=0 [ 338.891014][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 339.118047][ T5936] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 339.130617][ T5936] cdc_ncm 5-1:1.0: bind() failure [ 339.141830][ T5946] (null): keene_cmd_main failed (-110) [ 339.144185][ T5936] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 339.168668][ T5936] cdc_ncm 5-1:1.1: bind() failure [ 339.170300][ T5946] video4linux radio48: keene_cmd_main failed (-32) [ 339.392450][ T6826] Bluetooth: Error in BCSP hdr checksum [ 339.444857][ T5946] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 339.471165][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.475479][ T972] usb 3-1: USB disconnect, device number 26 [ 339.480216][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.480257][ T47] usb 4-1: Product: syz [ 339.518443][ T47] usb 4-1: Manufacturer: syz [ 339.533524][ T47] usb 4-1: SerialNumber: syz [ 339.631638][ T9243] Bluetooth: Error in BCSP hdr checksum [ 339.687138][ T29] audit: type=1400 audit(1732949070.555:716): avc: denied { ioctl } for pid=9439 comm="syz.1.939" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 339.711948][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.900853][ T12] Bluetooth: Error in BCSP hdr checksum [ 339.968084][ T1856] usb 5-1: USB disconnect, device number 14 [ 340.100478][ T972] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 340.230526][ T972] usb 1-1: device descriptor read/64, error -71 [ 341.050518][ T972] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 341.087342][ T47] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 341.094108][ T47] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 341.101694][ T47] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 341.580340][ T29] audit: type=1804 audit(1732949072.425:717): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.947" name="/newroot/180/file0" dev="fuse" ino=1 res=1 errno=0 [ 342.053081][ T972] usb 1-1: device descriptor read/64, error -71 [ 342.291307][ T972] usb usb1-port1: attempt power cycle [ 342.517655][ T47] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 342.544738][ T47] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 342.576943][ T29] audit: type=1804 audit(1732949073.445:718): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.949" name="/newroot/182/file0" dev="fuse" ino=1 res=1 errno=0 [ 342.649365][ T47] usb 4-1: USB disconnect, device number 18 [ 342.694015][ T47] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 342.960519][ T1856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 343.105268][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 343.127731][ T1856] usb 2-1: config 0 interface 0 has no altsetting 0 [ 343.134676][ T1856] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 343.159309][ T1856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.190823][ T1856] usb 2-1: config 0 descriptor?? [ 343.263670][ T9492] FAULT_INJECTION: forcing a failure. [ 343.263670][ T9492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.293180][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.4.955 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 343.303465][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.313540][ T9492] Call Trace: [ 343.316819][ T9492] [ 343.319770][ T9492] dump_stack_lvl+0x16c/0x1f0 [ 343.324472][ T9492] should_fail_ex+0x497/0x5b0 [ 343.329139][ T9492] _copy_from_user+0x2e/0xd0 [ 343.333722][ T9492] kvm_arch_vcpu_ioctl+0x2ed8/0x5070 [ 343.339011][ T9492] ? hlock_class+0x4e/0x130 [ 343.343501][ T9492] ? __lock_acquire+0x15a9/0x3c40 [ 343.348515][ T9492] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 343.354150][ T9492] ? kasan_save_track+0x14/0x30 [ 343.359008][ T9492] ? __kasan_slab_free+0x51/0x70 [ 343.363928][ T9492] ? __pfx___lock_acquire+0x10/0x10 [ 343.369107][ T9492] ? __x64_sys_ioctl+0xb7/0x200 [ 343.373951][ T9492] ? do_syscall_64+0xcd/0x250 [ 343.378622][ T9492] ? hlock_class+0x4e/0x130 [ 343.383126][ T9492] ? lock_acquire.part.0+0x11b/0x380 [ 343.388417][ T9492] ? __mutex_trylock_common+0xea/0x250 [ 343.393859][ T9492] ? __pfx___mutex_trylock_common+0x10/0x10 [ 343.399745][ T9492] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 343.404846][ T9492] ? rcu_is_watching+0x12/0xc0 [ 343.409696][ T9492] ? trace_contention_end+0xee/0x140 [ 343.414972][ T9492] ? __mutex_lock+0x1cc/0xa60 [ 343.419644][ T9492] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 343.424569][ T9492] ? tomoyo_path_number_perm+0x298/0x590 [ 343.430191][ T9492] ? __pfx___mutex_lock+0x10/0x10 [ 343.435214][ T9492] ? tomoyo_path_number_perm+0x190/0x590 [ 343.440840][ T9492] ? kvm_vcpu_ioctl+0x9e6/0x1520 [ 343.445762][ T9492] kvm_vcpu_ioctl+0x9e6/0x1520 [ 343.450534][ T9492] ? do_vfs_ioctl+0x513/0x1990 [ 343.455303][ T9492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 343.460504][ T9492] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 343.467007][ T9492] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 343.473853][ T9492] ? __pfx_lock_release+0x10/0x10 [ 343.478873][ T9492] ? selinux_file_ioctl+0x180/0x270 [ 343.484076][ T9492] ? selinux_file_ioctl+0xb4/0x270 [ 343.489180][ T9492] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 343.494381][ T9492] __x64_sys_ioctl+0x190/0x200 [ 343.499140][ T9492] do_syscall_64+0xcd/0x250 [ 343.503637][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.509525][ T9492] RIP: 0033:0x7f9002d80849 [ 343.513927][ T9492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.533522][ T9492] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.541935][ T9492] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 343.549904][ T9492] RDX: 0000000020000000 RSI: 000000004008ae90 RDI: 0000000000000005 [ 343.557862][ T9492] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.565818][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.573775][ T9492] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 343.581754][ T9492] [ 343.584880][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.623590][ T9497] overlayfs: failed to resolve './file0': -2 [ 343.693128][ T1856] (null): keene_cmd_main failed (-71) [ 343.700581][ T1856] video4linux radio48: keene_cmd_main failed (-71) [ 343.708630][ T1856] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 343.719445][ T1856] usb 2-1: USB disconnect, device number 17 [ 344.685515][ T9507] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 344.726276][ T29] audit: type=1400 audit(1732949075.585:719): avc: denied { create } for pid=9503 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 344.899799][ T29] audit: type=1400 audit(1732949075.765:720): avc: denied { write } for pid=9510 comm="syz.2.961" lport=42865 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 345.028965][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 345.112390][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 345.717345][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 346.034082][ T29] audit: type=1804 audit(1732949076.895:721): pid=9533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.966" name="/newroot/202/file0" dev="fuse" ino=1 res=1 errno=0 [ 346.055492][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.308901][ T9542] overlayfs: failed to resolve './file1': -2 [ 347.274785][ T9547] vivid-001: disconnect [ 347.297968][ T9544] vivid-001: reconnect [ 347.771172][ T9572] overlayfs: failed to resolve './file1': -2 [ 347.900511][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 349.220441][ T25] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 349.280455][ T1856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 349.381911][ T25] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 349.407239][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.418525][ T25] usb 2-1: config 0 has no interface number 0 [ 349.425015][ T25] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.439341][ T1856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.440631][ T25] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 349.447173][ T1856] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 349.456202][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.484447][ T1856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.489060][ T25] usb 2-1: Product: syz [ 349.516940][ T25] usb 2-1: Manufacturer: syz [ 349.518401][ T1856] usb 5-1: config 0 descriptor?? [ 349.527037][ T25] usb 2-1: SerialNumber: syz [ 349.538795][ T25] usb 2-1: config 0 descriptor?? [ 349.555032][ T25] cyberjack 2-1:0.69: required endpoints missing [ 349.666151][ T9597] 9pnet_fd: Insufficient options for proto=fd [ 350.002406][ T1856] (null): keene_cmd_main failed (-71) [ 350.010126][ T1856] video4linux radio48: keene_cmd_main failed (-71) [ 350.018126][ T1856] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 350.045341][ T1856] usb 5-1: USB disconnect, device number 15 [ 351.060876][ T47] usb 2-1: USB disconnect, device number 18 [ 351.093691][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 351.109298][ T9621] netlink: 'syz.4.995': attribute type 4 has an invalid length. [ 351.206584][ T9622] netlink: 'syz.4.995': attribute type 4 has an invalid length. [ 351.627773][ T9621] syz.4.995 (9621) used greatest stack depth: 20512 bytes left [ 351.791874][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 352.485020][ T9648] FAULT_INJECTION: forcing a failure. [ 352.485020][ T9648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.518188][ T9648] CPU: 1 UID: 0 PID: 9648 Comm: syz.2.1004 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 352.528635][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.538681][ T9648] Call Trace: [ 352.541953][ T9648] [ 352.544888][ T9648] dump_stack_lvl+0x16c/0x1f0 [ 352.549609][ T9648] should_fail_ex+0x497/0x5b0 [ 352.554324][ T9648] _copy_from_user+0x2e/0xd0 [ 352.558920][ T9648] snd_seq_ioctl+0x1c0/0x3f0 [ 352.563545][ T9648] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 352.568667][ T9648] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 352.575575][ T9648] ? selinux_file_ioctl+0x180/0x270 [ 352.580799][ T9648] ? selinux_file_ioctl+0xb4/0x270 [ 352.585903][ T9648] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 352.591022][ T9648] __x64_sys_ioctl+0x190/0x200 [ 352.595793][ T9648] do_syscall_64+0xcd/0x250 [ 352.600287][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.606167][ T9648] RIP: 0033:0x7fa655780849 [ 352.610574][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.630164][ T9648] RSP: 002b:00007fa656512058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.638566][ T9648] RAX: ffffffffffffffda RBX: 00007fa655945fa0 RCX: 00007fa655780849 [ 352.646525][ T9648] RDX: 0000000020000100 RSI: 00000000c0605345 RDI: 0000000000000005 [ 352.654481][ T9648] RBP: 00007fa6565120a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.662427][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.670380][ T9648] R13: 0000000000000000 R14: 00007fa655945fa0 R15: 00007ffefc914eb8 [ 352.678343][ T9648] [ 352.681409][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.164785][ T9662] FAULT_INJECTION: forcing a failure. [ 353.164785][ T9662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.183065][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.4.1007 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 353.193453][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.203519][ T9662] Call Trace: [ 353.206797][ T9662] [ 353.209735][ T9662] dump_stack_lvl+0x16c/0x1f0 [ 353.214432][ T9662] should_fail_ex+0x497/0x5b0 [ 353.219132][ T9662] _copy_from_user+0x2e/0xd0 [ 353.223735][ T9662] kvm_vm_ioctl+0x555/0x3df0 [ 353.228338][ T9662] ? security_file_ioctl+0x9b/0x240 [ 353.233546][ T9662] ? do_syscall_64+0xcd/0x250 [ 353.238221][ T9662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.244287][ T9662] ? hlock_class+0x4e/0x130 [ 353.248788][ T9662] ? mark_lock+0xb5/0xc60 [ 353.253124][ T9662] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 353.258138][ T9662] ? __pfx_mark_lock+0x10/0x10 [ 353.262911][ T9662] ? find_held_lock+0x2d/0x110 [ 353.267670][ T9662] ? tomoyo_path_number_perm+0x298/0x590 [ 353.273306][ T9662] ? __pfx_lock_release+0x10/0x10 [ 353.278321][ T9662] ? tomoyo_path_number_perm+0x46d/0x590 [ 353.283959][ T9662] ? tomoyo_path_number_perm+0x190/0x590 [ 353.289581][ T9662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.295547][ T9662] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.301440][ T9662] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 353.307948][ T9662] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 353.314806][ T9662] ? __pfx_lock_release+0x10/0x10 [ 353.319837][ T9662] ? selinux_file_ioctl+0x180/0x270 [ 353.325559][ T9662] ? selinux_file_ioctl+0xb4/0x270 [ 353.330669][ T9662] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 353.335705][ T9662] __x64_sys_ioctl+0x190/0x200 [ 353.340487][ T9662] do_syscall_64+0xcd/0x250 [ 353.345005][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.350894][ T9662] RIP: 0033:0x7f9002d80849 [ 353.355299][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.374904][ T9662] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.383320][ T9662] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 353.391284][ T9662] RDX: 0000000020000180 RSI: 000000004068aea3 RDI: 0000000000000004 [ 353.399238][ T9662] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.407193][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.415151][ T9662] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 353.423116][ T9662] [ 353.427223][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.810398][ T29] audit: type=1400 audit(1732949084.665:722): avc: denied { map } for pid=9658 comm="syz.1.1006" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 353.837996][ T29] audit: type=1400 audit(1732949084.665:723): avc: denied { execute } for pid=9658 comm="syz.1.1006" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 354.260557][ T29] audit: type=1400 audit(1732949085.125:724): avc: denied { ioctl } for pid=9672 comm="syz.1.1010" path="socket:[24661]" dev="sockfs" ino=24661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.309540][ T9675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9675 comm=syz.4.1012 [ 354.481016][ T9685] binder_alloc: 9684: pid 9684 spamming oneway? 1 buffers allocated for a total size of 4096 [ 354.623165][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 355.072862][ T9679] FAULT_INJECTION: forcing a failure. [ 355.072862][ T9679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.089096][ T9679] CPU: 0 UID: 0 PID: 9679 Comm: syz.0.1011 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 355.099472][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.109571][ T9679] Call Trace: [ 355.112857][ T9679] [ 355.115780][ T9679] dump_stack_lvl+0x16c/0x1f0 [ 355.120457][ T9679] should_fail_ex+0x497/0x5b0 [ 355.125136][ T9679] _copy_to_user+0x32/0xd0 [ 355.129556][ T9679] simple_read_from_buffer+0xd0/0x160 [ 355.134927][ T9679] proc_fail_nth_read+0x198/0x270 [ 355.139963][ T9679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.145505][ T9679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.151058][ T9679] vfs_read+0x1df/0xbe0 [ 355.155235][ T9679] ? __fget_files+0x1fc/0x3a0 [ 355.159901][ T9679] ? __pfx___mutex_lock+0x10/0x10 [ 355.164920][ T9679] ? __pfx_vfs_read+0x10/0x10 [ 355.169601][ T9679] ? __fget_files+0x206/0x3a0 [ 355.174269][ T9679] ksys_read+0x12b/0x250 [ 355.178498][ T9679] ? __pfx_ksys_read+0x10/0x10 [ 355.183253][ T9679] ? syscall_user_dispatch+0x7a/0x130 [ 355.188633][ T9679] do_syscall_64+0xcd/0x250 [ 355.193133][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.199017][ T9679] RIP: 0033:0x7ff530d7f25c [ 355.203414][ T9679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 355.223005][ T9679] RSP: 002b:00007ff531ae7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.231402][ T9679] RAX: ffffffffffffffda RBX: 00007ff530f45fa0 RCX: 00007ff530d7f25c [ 355.239367][ T9679] RDX: 000000000000000f RSI: 00007ff531ae70b0 RDI: 0000000000000004 [ 355.247321][ T9679] RBP: 00007ff531ae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.255278][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.263235][ T9679] R13: 0000000000000000 R14: 00007ff530f45fa0 R15: 00007ffde9bede18 [ 355.271201][ T9679] [ 355.610565][ T29] audit: type=1400 audit(1732949086.445:725): avc: denied { map } for pid=9698 comm="syz.1.1018" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 355.633795][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.401261][ T9719] FAULT_INJECTION: forcing a failure. [ 356.401261][ T9719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.415777][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.4.1024 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 356.426128][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.436278][ T9719] Call Trace: [ 356.439565][ T9719] [ 356.442519][ T9719] dump_stack_lvl+0x16c/0x1f0 [ 356.447222][ T9719] should_fail_ex+0x497/0x5b0 [ 356.451923][ T9719] _copy_from_iter+0x2a1/0x1560 [ 356.456782][ T9719] ? trace_lock_acquire+0x14e/0x1f0 [ 356.461996][ T9719] ? __pfx__copy_from_iter+0x10/0x10 [ 356.467279][ T9719] ? __virt_addr_valid+0x1a4/0x590 [ 356.472401][ T9719] ? __virt_addr_valid+0x5e/0x590 [ 356.477437][ T9719] ? __phys_addr_symbol+0x30/0x80 [ 356.482475][ T9719] ? __check_object_size+0x488/0x710 [ 356.487770][ T9719] hci_sock_sendmsg+0x46d/0x25e0 [ 356.492719][ T9719] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 356.498103][ T9719] sock_write_iter+0x4fe/0x5b0 [ 356.502875][ T9719] ? __pfx_sock_write_iter+0x10/0x10 [ 356.508174][ T9719] ? bpf_lsm_file_permission+0x9/0x10 [ 356.513551][ T9719] ? security_file_permission+0x71/0x210 [ 356.519195][ T9719] vfs_write+0x5ae/0x1150 [ 356.523524][ T9719] ? __pfx_sock_write_iter+0x10/0x10 [ 356.528818][ T9719] ? __pfx_vfs_write+0x10/0x10 [ 356.533580][ T9719] ? __fget_files+0x40/0x3a0 [ 356.538182][ T9719] ksys_write+0x207/0x250 [ 356.542511][ T9719] ? __pfx_ksys_write+0x10/0x10 [ 356.547366][ T9719] do_syscall_64+0xcd/0x250 [ 356.551877][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.557776][ T9719] RIP: 0033:0x7f9002d80849 [ 356.562190][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.581802][ T9719] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.590216][ T9719] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 356.598185][ T9719] RDX: 000000000000000d RSI: 0000000020000000 RDI: 0000000000000005 [ 356.606154][ T9719] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 356.614128][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.622096][ T9719] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 356.630076][ T9719] [ 357.850481][ T29] audit: type=1400 audit(1732949088.705:726): avc: denied { execute } for pid=9745 comm="syz.2.1030" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.909559][ T29] audit: type=1400 audit(1732949088.765:727): avc: denied { getopt } for pid=9745 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 357.960240][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 357.980494][ T29] audit: type=1400 audit(1732949088.775:728): avc: denied { watch_reads } for pid=9745 comm="syz.2.1030" path="/185" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 358.803296][ T25] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 358.814648][ T25] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.829058][ T25] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 358.838429][ T25] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 358.850640][ T25] usb 4-1: Manufacturer: syz [ 358.855250][ T25] usb 4-1: SerialNumber: syz [ 358.917354][ T29] audit: type=1400 audit(1732949089.775:729): avc: denied { getopt } for pid=9756 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.998739][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 360.070539][ T25] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 360.088405][ T25] usb 4-1: USB disconnect, device number 19 [ 360.654200][ T9771] FAULT_INJECTION: forcing a failure. [ 360.654200][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 360.676507][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.4.1037 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 360.686863][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.696906][ T9771] Call Trace: [ 360.700162][ T9771] [ 360.703070][ T9771] dump_stack_lvl+0x16c/0x1f0 [ 360.707729][ T9771] should_fail_ex+0x497/0x5b0 [ 360.712388][ T9771] ? fs_reclaim_acquire+0xae/0x150 [ 360.717483][ T9771] should_failslab+0xc2/0x120 [ 360.722139][ T9771] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 360.728454][ T9771] ? resume_store+0x1ba/0x460 [ 360.733115][ T9771] kstrndup+0x6d/0x160 [ 360.737174][ T9771] resume_store+0x1ba/0x460 [ 360.741692][ T9771] ? __pfx_resume_store+0x10/0x10 [ 360.746737][ T9771] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 360.752383][ T9771] ? rcu_is_watching+0x12/0xc0 [ 360.757164][ T9771] ? __pfx_resume_store+0x10/0x10 [ 360.762204][ T9771] kobj_attr_store+0x55/0x80 [ 360.766810][ T9771] ? __pfx_kobj_attr_store+0x10/0x10 [ 360.772105][ T9771] sysfs_kf_write+0x117/0x170 [ 360.776789][ T9771] kernfs_fop_write_iter+0x33d/0x500 [ 360.782081][ T9771] ? __pfx_sysfs_kf_write+0x10/0x10 [ 360.787289][ T9771] vfs_write+0x5ae/0x1150 [ 360.791632][ T9771] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 360.797450][ T9771] ? __pfx___mutex_lock+0x10/0x10 [ 360.802487][ T9771] ? __pfx_vfs_write+0x10/0x10 [ 360.807277][ T9771] ksys_write+0x12b/0x250 [ 360.811608][ T9771] ? __pfx_ksys_write+0x10/0x10 [ 360.816469][ T9771] do_syscall_64+0xcd/0x250 [ 360.820986][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.826892][ T9771] RIP: 0033:0x7f9002d80849 [ 360.831312][ T9771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.850938][ T9771] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.859366][ T9771] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 360.867346][ T9771] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003 [ 360.875321][ T9771] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 360.883281][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.891237][ T9771] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 360.899195][ T9771] [ 360.960481][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 361.130515][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 361.140124][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.155371][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.184933][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.236814][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.280011][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.423344][ T25] usb 1-1: config 0 descriptor?? [ 362.267398][ T25] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 362.282998][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input18 [ 362.377436][ T25] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 362.557011][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.737206][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.546937][ T9809] FAULT_INJECTION: forcing a failure. [ 364.546937][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.560137][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.1.1046 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 364.570562][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.580612][ T9809] Call Trace: [ 364.583877][ T9809] [ 364.586796][ T9809] dump_stack_lvl+0x16c/0x1f0 [ 364.591472][ T9809] should_fail_ex+0x497/0x5b0 [ 364.596145][ T9809] _copy_to_user+0x32/0xd0 [ 364.600550][ T9809] simple_read_from_buffer+0xd0/0x160 [ 364.605915][ T9809] proc_fail_nth_read+0x198/0x270 [ 364.610932][ T9809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.616468][ T9809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.622002][ T9809] vfs_read+0x1df/0xbe0 [ 364.626140][ T9809] ? __fget_files+0x1fc/0x3a0 [ 364.630804][ T9809] ? __pfx___mutex_lock+0x10/0x10 [ 364.635821][ T9809] ? __pfx_vfs_read+0x10/0x10 [ 364.640489][ T9809] ? __fget_files+0x206/0x3a0 [ 364.645156][ T9809] ksys_read+0x12b/0x250 [ 364.649382][ T9809] ? __pfx_ksys_read+0x10/0x10 [ 364.654139][ T9809] do_syscall_64+0xcd/0x250 [ 364.658637][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.664520][ T9809] RIP: 0033:0x7f19b5d7f25c [ 364.668917][ T9809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 364.688683][ T9809] RSP: 002b:00007f19b3bd5050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.697171][ T9809] RAX: ffffffffffffffda RBX: 00007f19b5f46080 RCX: 00007f19b5d7f25c [ 364.705127][ T9809] RDX: 000000000000000f RSI: 00007f19b3bd50b0 RDI: 000000000000000c [ 364.713081][ T9809] RBP: 00007f19b3bd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 364.721035][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.728997][ T9809] R13: 0000000000000000 R14: 00007f19b5f46080 R15: 00007ffc39c85538 [ 364.736964][ T9809] [ 364.966214][ T5885] usb 1-1: USB disconnect, device number 23 [ 364.981380][ T5946] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 365.734240][ T5946] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 365.771994][ T5946] usb 3-1: config 0 has no interface number 0 [ 365.810823][ T5946] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 365.850579][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.863412][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 365.881210][ T5946] usb 3-1: config 0 descriptor?? [ 366.519943][ T29] audit: type=1400 audit(1732949097.385:730): avc: denied { connect } for pid=9838 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.614744][ T29] audit: type=1400 audit(1732949097.485:731): avc: denied { write } for pid=9838 comm="syz.3.1053" path="socket:[24529]" dev="sockfs" ino=24529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 367.220136][ T5946] usb 3-1: Cannot read MAC address [ 367.220447][ T1856] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 367.225522][ T5946] MOSCHIP usb-ethernet driver 3-1:0.16: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 367.374490][ T5946] usb 3-1: USB disconnect, device number 27 [ 367.414741][ T1856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.426350][ T1856] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 367.464329][ T9846] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 368.108982][ T1856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.118592][ T1856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.134556][ T1856] usb 5-1: Product: syz [ 368.138996][ T1856] usb 5-1: Manufacturer: syz [ 368.143943][ T1856] usb 5-1: SerialNumber: syz [ 368.195074][ T9850] FAULT_INJECTION: forcing a failure. [ 368.195074][ T9850] name failslab, interval 1, probability 0, space 0, times 0 [ 368.208850][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.2.1056 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 368.219201][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 368.229260][ T9850] Call Trace: [ 368.232546][ T9850] [ 368.235478][ T9850] dump_stack_lvl+0x16c/0x1f0 [ 368.240169][ T9850] should_fail_ex+0x497/0x5b0 [ 368.244857][ T9850] ? fs_reclaim_acquire+0xae/0x150 [ 368.249979][ T9850] should_failslab+0xc2/0x120 [ 368.254664][ T9850] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 368.261001][ T9850] ? resume_store+0x1ba/0x460 [ 368.265691][ T9850] kstrndup+0x6d/0x160 [ 368.269763][ T9850] resume_store+0x1ba/0x460 [ 368.274275][ T9850] ? __pfx_resume_store+0x10/0x10 [ 368.279527][ T9850] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 368.285186][ T9850] ? rcu_is_watching+0x12/0xc0 [ 368.289976][ T9850] ? __pfx_resume_store+0x10/0x10 [ 368.295008][ T9850] kobj_attr_store+0x55/0x80 [ 368.299604][ T9850] ? __pfx_kobj_attr_store+0x10/0x10 [ 368.304888][ T9850] sysfs_kf_write+0x117/0x170 [ 368.309565][ T9850] kernfs_fop_write_iter+0x33d/0x500 [ 368.314842][ T9850] ? __pfx_sysfs_kf_write+0x10/0x10 [ 368.320039][ T9850] vfs_write+0x5ae/0x1150 [ 368.324357][ T9850] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 368.330159][ T9850] ? __pfx___mutex_lock+0x10/0x10 [ 368.335179][ T9850] ? __pfx_vfs_write+0x10/0x10 [ 368.339945][ T9850] ksys_write+0x12b/0x250 [ 368.344310][ T9850] ? __pfx_ksys_write+0x10/0x10 [ 368.349169][ T9850] do_syscall_64+0xcd/0x250 [ 368.353691][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.359578][ T9850] RIP: 0033:0x7fa655780849 [ 368.363982][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.383578][ T9850] RSP: 002b:00007fa656512058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.392002][ T9850] RAX: ffffffffffffffda RBX: 00007fa655945fa0 RCX: 00007fa655780849 [ 368.399982][ T9850] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003 [ 368.408046][ T9850] RBP: 00007fa6565120a0 R08: 0000000000000000 R09: 0000000000000000 [ 368.416022][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.423991][ T9850] R13: 0000000000000000 R14: 00007fa655945fa0 R15: 00007ffefc914eb8 [ 368.431970][ T9850] [ 368.436132][ T9842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 368.640627][ T29] audit: type=1400 audit(1732949099.495:732): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.2 dest=38908 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.810816][ T29] audit: type=1400 audit(1732949099.575:733): avc: denied { execmem } for pid=9858 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 369.068852][ T9842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.282659][ T1856] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 369.690159][ T1856] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 369.936391][ T9868] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 370.611501][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.620025][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.631128][ T9868] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 371.504643][ T5936] usb 5-1: USB disconnect, device number 16 [ 371.550125][ T5936] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 371.684288][ T9886] kAFS: Can only specify source 'none' with -o dyn [ 371.693174][ T29] audit: type=1400 audit(1732949102.545:734): avc: denied { mount } for pid=9881 comm="syz.0.1063" name="/" dev="hugetlbfs" ino=25654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 371.862600][ T29] audit: type=1400 audit(1732949102.615:735): avc: denied { mount } for pid=9881 comm="syz.0.1063" name="/" dev="pstore" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 371.933428][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 372.111400][ T29] audit: type=1400 audit(1732949102.695:736): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 372.489883][ T29] audit: type=1400 audit(1732949102.695:737): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 372.562073][ T9902] FAULT_INJECTION: forcing a failure. [ 372.562073][ T9902] name fail_futex, interval 1, probability 0, space 0, times 1 [ 372.574915][ T9902] CPU: 1 UID: 0 PID: 9902 Comm: syz.2.1065 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 372.585248][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.595309][ T9902] Call Trace: [ 372.598586][ T9902] [ 372.601516][ T9902] dump_stack_lvl+0x16c/0x1f0 [ 372.606207][ T9902] should_fail_ex+0x497/0x5b0 [ 372.610896][ T9902] get_futex_key+0x4a0/0x10f0 [ 372.615585][ T9902] ? __pfx_get_futex_key+0x10/0x10 [ 372.620711][ T9902] ? find_held_lock+0x2d/0x110 [ 372.625486][ T9902] ? get_pid_task+0xfc/0x250 [ 372.630093][ T9902] futex_wake_op+0x16a/0xe70 [ 372.634689][ T9902] ? find_held_lock+0x2d/0x110 [ 372.639465][ T9902] ? __pfx_futex_wake_op+0x10/0x10 [ 372.644600][ T9902] ? ksys_write+0x191/0x250 [ 372.649111][ T9902] ? vfs_write+0x306/0x1150 [ 372.653621][ T9902] do_futex+0x2eb/0x350 [ 372.657780][ T9902] ? __pfx_do_futex+0x10/0x10 [ 372.662469][ T9902] __x64_sys_futex+0x1e1/0x4c0 [ 372.667235][ T9902] ? fput+0x67/0x440 [ 372.671136][ T9902] ? __pfx___x64_sys_futex+0x10/0x10 [ 372.676424][ T9902] ? ksys_write+0x1ba/0x250 [ 372.680928][ T9902] ? __pfx_ksys_write+0x10/0x10 [ 372.685788][ T9902] do_syscall_64+0xcd/0x250 [ 372.690304][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.696206][ T9902] RIP: 0033:0x7fa655780849 [ 372.700619][ T9902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.720245][ T9902] RSP: 002b:00007fa6564d0058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.728677][ T9902] RAX: ffffffffffffffda RBX: 00007fa655946160 RCX: 00007fa655780849 [ 372.736649][ T9902] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000020000100 [ 372.744620][ T9902] RBP: 00007fa6564d00a0 R08: 0000000020004000 R09: 0000000023fffffe [ 372.752591][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.760561][ T9902] R13: 0000000000000000 R14: 00007fa655946160 R15: 00007ffefc914eb8 [ 372.768541][ T9902] [ 373.355674][ T9904] overlayfs: failed to resolve './file1': -2 [ 373.373807][ T29] audit: type=1400 audit(1732949104.245:738): avc: denied { module_load } for pid=9903 comm="syz.2.1066" path="/196/bus/bus" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 373.399323][ T9904] Invalid ELF header magic: != ELF [ 377.218158][ T29] audit: type=1400 audit(1732949108.085:739): avc: denied { bind } for pid=9951 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 377.263975][ T9954] sp0: Synchronizing with TNC [ 377.286121][ T9954] sp0: Found TNC [ 377.593230][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 377.621499][ T5936] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 377.677420][ T29] audit: type=1400 audit(1732949108.545:740): avc: denied { override_creds } for pid=9950 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 377.986594][ T29] audit: type=1400 audit(1732949108.655:741): avc: denied { create } for pid=9962 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 378.128212][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 378.195215][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.201535][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.250541][ T9986] fuse: Unknown parameter 'ro00000000000' [ 381.530068][T10022] fuse: Bad value for 'fd' [ 382.276547][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 382.431677][ T5909] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 382.749786][T10037] xt_socket: unknown flags 0xc [ 383.236128][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.247780][ T5909] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 383.250293][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 383.257075][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.283468][ T5909] usb 2-1: config 0 descriptor?? [ 383.291895][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 383.704103][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.717031][ T5909] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.730800][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 383.738016][ T29] audit: type=1400 audit(1732949114.605:742): avc: denied { write } for pid=10024 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.759358][ T5909] pwc: recv_control_msg error -32 req 04 val 1000 [ 383.766412][ T29] audit: type=1400 audit(1732949114.605:743): avc: denied { nlmsg_write } for pid=10024 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.798722][ T5909] pwc: recv_control_msg error -32 req 04 val 1300 [ 383.805897][ T5909] pwc: recv_control_msg error -32 req 04 val 1400 [ 383.813142][ T5909] pwc: recv_control_msg error -32 req 02 val 2000 [ 384.842725][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 384.849466][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 384.856245][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 384.864277][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 384.872446][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 384.881176][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 384.888063][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 384.896252][ T5909] pwc: Registered as video103. [ 384.903037][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 384.922302][ T5909] usb 2-1: USB disconnect, device number 19 [ 385.032006][ T1856] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 385.100549][ T972] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 385.202658][ T1856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 385.215309][ T1856] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 385.230175][ T1856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.254508][ T1856] usb 5-1: config 0 descriptor?? [ 385.277522][ T972] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.288394][ T1856] smsusb:smsusb_probe: board id=8, interface number 0 [ 385.295609][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.304706][ T1856] smsusb:smsusb_probe: Device initialized with return code -19 [ 385.313389][ T972] usb 1-1: config 0 descriptor?? [ 385.343695][ T972] cp210x 1-1:0.0: cp210x converter detected [ 385.350212][T10052] veth0_to_team: entered promiscuous mode [ 385.356017][T10052] veth0_to_team: entered allmulticast mode [ 385.541519][ T972] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 386.564996][ T972] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 386.583877][ T972] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 386.893468][ T972] usb 1-1: cp210x converter now attached to ttyUSB0 [ 387.607567][ T1856] usb 5-1: USB disconnect, device number 17 [ 387.901288][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.941641][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.124825][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.183750][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.447494][ T5885] usb 1-1: USB disconnect, device number 24 [ 389.864351][T10098] fuse: Bad value for 'fd' [ 390.448057][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.456243][ T5885] cp210x 1-1:0.0: device disconnected [ 390.526315][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 390.724026][T10107] loop2: detected capacity change from 0 to 7 [ 390.894359][T10107] Dev loop2: unable to read RDB block 7 [ 390.990912][ T29] audit: type=1400 audit(1732949121.765:744): avc: denied { ioctl } for pid=10101 comm="syz.4.1109" path="socket:[26643]" dev="sockfs" ino=26643 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.030603][T10107] loop2: unable to read partition table [ 391.036519][T10107] loop2: partition table beyond EOD, truncated [ 391.052023][T10107] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 391.270061][ T5211] Dev loop2: unable to read RDB block 7 [ 391.275850][ T5211] loop2: unable to read partition table [ 391.283854][ T5211] loop2: partition table beyond EOD, truncated [ 391.640439][ T1856] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 391.870895][T10121] mmap: syz.2.1115 (10121): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 391.970492][ T1856] usb 1-1: Using ep0 maxpacket: 32 [ 391.977162][ T1856] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 391.985439][ T1856] usb 1-1: config 0 has no interface number 0 [ 391.993929][ T1856] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=13.d5 [ 392.003264][ T1856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.011415][ T1856] usb 1-1: Product: syz [ 392.015730][ T1856] usb 1-1: Manufacturer: syz [ 392.020562][ T1856] usb 1-1: SerialNumber: syz [ 392.041388][ T1856] usb 1-1: config 0 descriptor?? [ 392.049859][ T1856] usb 1-1: bad CDC descriptors [ 392.147439][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 392.256534][ T1856] usb 1-1: USB disconnect, device number 25 [ 392.640575][ T5885] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 392.825494][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 392.835409][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 393.019645][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.053186][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 393.135686][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 393.146755][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 393.154250][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 393.164466][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.195761][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 393.215095][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 393.230304][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 393.256557][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 393.293950][T10152] netlink: 'syz.2.1122': attribute type 18 has an invalid length. [ 393.303975][T10152] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.312955][T10152] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.321985][T10152] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.330771][T10152] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.341978][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 393.352028][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.362274][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 393.373949][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 393.838551][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 393.869014][ T5885] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.878461][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.480979][ T5885] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 394.727418][T10165] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.051554][ T29] audit: type=1400 audit(1732949125.925:745): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 395.227452][ T29] audit: type=1400 audit(1732949126.075:746): avc: denied { ioctl } for pid=10126 comm="syz.1.1117" path="socket:[26759]" dev="sockfs" ino=26759 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.256470][T10168] FAULT_INJECTION: forcing a failure. [ 395.256470][T10168] name failslab, interval 1, probability 0, space 0, times 0 [ 395.270122][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.3.1126 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 395.280545][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.290595][T10168] Call Trace: [ 395.293871][T10168] [ 395.296796][T10168] dump_stack_lvl+0x16c/0x1f0 [ 395.301484][T10168] should_fail_ex+0x497/0x5b0 [ 395.306176][T10168] ? fs_reclaim_acquire+0xae/0x150 [ 395.311300][T10168] should_failslab+0xc2/0x120 [ 395.315984][T10168] __kmalloc_noprof+0xcb/0x510 [ 395.320754][T10168] ? d_absolute_path+0x137/0x1b0 [ 395.325701][T10168] tomoyo_encode2+0x100/0x3e0 [ 395.330394][T10168] tomoyo_encode+0x29/0x50 [ 395.334817][T10168] tomoyo_realpath_from_path+0x19d/0x720 [ 395.340465][T10168] tomoyo_check_open_permission+0x2ad/0x3c0 [ 395.346362][T10168] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 395.352788][T10168] ? avc_has_perm_noaudit+0x119/0x3a0 [ 395.358188][T10168] ? __pfx_hook_file_open+0x10/0x10 [ 395.363386][T10168] ? lock_acquire+0x2f/0xb0 [ 395.367892][T10168] tomoyo_file_open+0x6b/0x90 [ 395.372580][T10168] security_file_open+0x84/0x1e0 [ 395.377523][T10168] do_dentry_open+0x57e/0x1ea0 [ 395.382291][T10168] ? inode_permission+0xdd/0x5f0 [ 395.387235][T10168] vfs_open+0x82/0x3f0 [ 395.391306][T10168] ? may_open+0x1f2/0x400 [ 395.395641][T10168] path_openat+0x1e6a/0x2d60 [ 395.400243][T10168] ? __pfx_path_openat+0x10/0x10 [ 395.405180][T10168] ? __pfx___lock_acquire+0x10/0x10 [ 395.410379][T10168] ? lock_acquire.part.0+0x11b/0x380 [ 395.415664][T10168] ? find_held_lock+0x2d/0x110 [ 395.420436][T10168] do_filp_open+0x20c/0x470 [ 395.424944][T10168] ? __pfx_do_filp_open+0x10/0x10 [ 395.426475][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.429962][T10168] ? find_held_lock+0x2d/0x110 [ 395.443023][T10168] ? alloc_fd+0x41f/0x760 [ 395.447334][T10168] do_sys_openat2+0x17a/0x1e0 [ 395.451991][T10168] ? __pfx_do_sys_openat2+0x10/0x10 [ 395.457167][T10168] ? __fget_files+0x206/0x3a0 [ 395.461822][T10168] __x64_sys_openat+0x175/0x210 [ 395.466659][T10168] ? __pfx___x64_sys_openat+0x10/0x10 [ 395.472008][T10168] ? ksys_write+0x1ba/0x250 [ 395.476491][T10168] do_syscall_64+0xcd/0x250 [ 395.480977][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.486847][T10168] RIP: 0033:0x7f556d580849 [ 395.491333][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.510914][T10168] RSP: 002b:00007f556b3f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.519303][T10168] RAX: ffffffffffffffda RBX: 00007f556d746160 RCX: 00007f556d580849 [ 395.527264][T10168] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 395.535211][T10168] RBP: 00007f556b3f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 395.543155][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.551103][T10168] R13: 0000000000000000 R14: 00007f556d746160 R15: 00007ffffed245d8 [ 395.559055][T10168] [ 395.562676][T10168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.908525][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.970063][ T1856] usb 2-1: USB disconnect, device number 20 [ 396.440709][T10177] overlayfs: missing 'lowerdir' [ 396.682004][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 396.737358][ T29] audit: type=1326 audit(1732949127.605:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.3.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556d580849 code=0x0 [ 396.851869][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.866942][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.910433][ T5946] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 396.936664][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.947242][ T5885] usb 5-1: Product: syz [ 396.951707][ T5885] usb 5-1: Manufacturer: syz [ 396.956389][ T5885] usb 5-1: SerialNumber: syz [ 396.971070][ T5885] cdc_ncm 5-1:1.0: skipping garbage [ 397.080519][ T5946] usb 2-1: device descriptor read/64, error -71 [ 397.340545][ T5946] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 397.490514][ T5946] usb 2-1: device descriptor read/64, error -71 [ 397.637805][ T5946] usb usb2-port1: attempt power cycle [ 397.712933][T10198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.410623][ T5946] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 398.680890][ T5885] cdc_ncm 5-1:1.0: bind() failure [ 398.686763][ T5946] usb 2-1: device descriptor read/8, error -71 [ 398.879016][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 398.898302][ T5885] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 398.907490][ T5885] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 398.917243][ T5885] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 398.928036][ T5885] usb 5-1: USB disconnect, device number 18 [ 399.720662][ T1856] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 399.910745][ T5946] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 400.007722][ T1856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.091539][ T1856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.103015][ T1856] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 400.115659][ T1856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.125284][ T1856] usb 3-1: config 0 descriptor?? [ 400.141398][ T5946] usb 2-1: device descriptor read/8, error -71 [ 400.250797][ T5946] usb usb2-port1: unable to enumerate USB device [ 400.691224][T10235] overlayfs: missing 'lowerdir' [ 400.751912][ T1856] usb 3-1: language id specifier not provided by device, defaulting to English [ 401.672575][ T1856] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 401.681479][ T1856] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 401.689655][ T1856] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 401.697950][ T1856] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 401.705526][ T1856] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 401.937263][ T1856] usb 3-1: USB disconnect, device number 29 [ 402.164265][ T29] audit: type=1326 audit(1732949133.005:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.3.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556d580849 code=0x0 [ 402.218507][T10275] FAULT_INJECTION: forcing a failure. [ 402.218507][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.346629][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.2.1148 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 402.357105][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.367170][T10275] Call Trace: [ 402.370452][T10275] [ 402.373403][T10275] dump_stack_lvl+0x16c/0x1f0 [ 402.378101][T10275] should_fail_ex+0x497/0x5b0 [ 402.382791][T10275] _copy_from_user+0x2e/0xd0 [ 402.387388][T10275] copy_msghdr_from_user+0x99/0x160 [ 402.392591][T10275] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.398409][T10275] ___sys_sendmsg+0xff/0x1e0 [ 402.403005][T10275] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.408215][T10275] ? __pfx_lock_release+0x10/0x10 [ 402.413246][T10275] ? trace_lock_acquire+0x14e/0x1f0 [ 402.418458][T10275] ? __fget_files+0x206/0x3a0 [ 402.423144][T10275] __sys_sendmsg+0x16e/0x220 [ 402.427739][T10275] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.432870][T10275] do_syscall_64+0xcd/0x250 [ 402.437382][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.443280][T10275] RIP: 0033:0x7fa655780849 [ 402.447695][T10275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.467318][T10275] RSP: 002b:00007fa656512058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.475734][T10275] RAX: ffffffffffffffda RBX: 00007fa655945fa0 RCX: 00007fa655780849 [ 402.483705][T10275] RDX: 0000000000000000 RSI: 0000000020001680 RDI: 0000000000000004 [ 402.491673][T10275] RBP: 00007fa6565120a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.499651][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.507618][T10275] R13: 0000000000000000 R14: 00007fa655945fa0 R15: 00007ffefc914eb8 [ 402.515598][T10275] [ 403.369982][T10286] bpf: Bad value for 'gid' [ 403.396000][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 405.177919][T10305] overlayfs: missing 'lowerdir' [ 407.069990][ T29] audit: type=1326 audit(1732949137.935:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.4.1160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9002d80849 code=0x0 [ 407.598974][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=10333 comm=syz.2.1163 [ 407.962325][T10343] loop6: detected capacity change from 0 to 1 [ 408.106794][T10343] Dev loop6: unable to read RDB block 1 [ 408.112611][T10343] loop6: unable to read partition table [ 408.118987][T10343] loop6: partition table beyond EOD, truncated [ 408.125516][T10343] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 408.125516][T10343] ) failed (rc=-5) [ 408.994562][ T29] audit: type=1400 audit(1732949139.855:750): avc: denied { listen } for pid=10345 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.014166][ T29] audit: type=1400 audit(1732949139.855:751): avc: denied { accept } for pid=10345 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.041247][ T5909] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 409.194108][ T5909] usb 1-1: config index 0 descriptor too short (expected 39, got 36) [ 409.202662][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.232368][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.247355][ T5909] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.80 [ 409.272395][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.329317][ T5909] usb 1-1: config 0 descriptor?? [ 409.446281][ T5946] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 409.560269][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 409.578487][ T5909] apple 0003:05AC:027C.000B: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0 [ 409.590072][ T25] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 409.743181][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 410.327716][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 410.339764][ T5946] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 410.351425][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.359424][ T5946] usb 3-1: Product: syz [ 410.360213][T10379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1172'. [ 410.371098][ T5946] usb 3-1: Manufacturer: syz [ 410.377797][ T5946] usb 3-1: SerialNumber: syz [ 410.377853][T10379] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 410.414518][ T5885] usb 1-1: USB disconnect, device number 26 [ 410.429378][ T5946] usb 3-1: config 0 descriptor?? [ 410.452474][T10379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 410.481876][ T5946] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 410.768130][T10402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=10402 comm=syz.3.1174 [ 410.877281][ T29] audit: type=1400 audit(1732949141.745:752): avc: denied { egress } for pid=10400 comm="syz.3.1174" saddr=fe80::bb daddr=fe80::bb netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 410.911413][ T29] audit: type=1400 audit(1732949141.745:753): avc: denied { sendto } for pid=10400 comm="syz.3.1174" saddr=fe80::bb daddr=fe80::bb netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 410.928863][ T5885] usb 3-1: USB disconnect, device number 30 [ 410.945051][ T5909] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 411.147970][ T29] audit: type=1326 audit(1732949142.015:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.0.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff530d80849 code=0x0 [ 411.239997][ T29] audit: type=1804 audit(1732949142.105:755): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1176" name="/newroot/238/file0" dev="fuse" ino=1 res=1 errno=0 [ 411.284377][ T5909] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 411.296739][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.304803][ T5909] usb 5-1: Product: syz [ 411.308956][ T5909] usb 5-1: Manufacturer: syz [ 411.313704][ T5909] usb 5-1: SerialNumber: syz [ 411.319525][ T5909] usb 5-1: config 0 descriptor?? [ 411.561335][ T29] audit: type=1400 audit(1732949142.275:756): avc: denied { bind } for pid=10413 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 411.775131][ T5909] hso 5-1:0.0: Failed to find BULK IN ep [ 411.978193][ T5909] usb-storage 5-1:0.0: USB Mass Storage device detected [ 412.002529][T10413] delete_channel: no stack [ 412.447378][T10434] fuse: Bad value for 'fd' [ 413.586360][T10438] FAULT_INJECTION: forcing a failure. [ 413.586360][T10438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.625286][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 413.789161][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.2.1181 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 413.799605][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.809638][T10438] Call Trace: [ 413.812899][T10438] [ 413.815815][T10438] dump_stack_lvl+0x16c/0x1f0 [ 413.820487][T10438] should_fail_ex+0x497/0x5b0 [ 413.825157][T10438] _copy_to_user+0x32/0xd0 [ 413.829567][T10438] simple_read_from_buffer+0xd0/0x160 [ 413.834942][T10438] proc_fail_nth_read+0x198/0x270 [ 413.839957][T10438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.845498][T10438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.851037][T10438] vfs_read+0x1df/0xbe0 [ 413.855177][T10438] ? __fget_files+0x1fc/0x3a0 [ 413.859841][T10438] ? __pfx___mutex_lock+0x10/0x10 [ 413.864856][T10438] ? __pfx_vfs_read+0x10/0x10 [ 413.869522][T10438] ? __fget_files+0x206/0x3a0 [ 413.874189][T10438] ksys_read+0x12b/0x250 [ 413.878413][T10438] ? __pfx_ksys_read+0x10/0x10 [ 413.883165][T10438] do_syscall_64+0xcd/0x250 [ 413.887659][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.893543][T10438] RIP: 0033:0x7fa65577f25c [ 413.897942][T10438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 413.917535][T10438] RSP: 002b:00007fa656512050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.925937][T10438] RAX: ffffffffffffffda RBX: 00007fa655945fa0 RCX: 00007fa65577f25c [ 413.933893][T10438] RDX: 000000000000000f RSI: 00007fa6565120b0 RDI: 0000000000000004 [ 413.941845][T10438] RBP: 00007fa6565120a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.949798][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.957753][T10438] R13: 0000000000000000 R14: 00007fa655945fa0 R15: 00007ffefc914eb8 [ 413.965723][T10438] [ 414.118837][ T5885] usb 5-1: USB disconnect, device number 19 [ 414.826868][ T29] audit: type=1400 audit(1732949145.695:757): avc: denied { setopt } for pid=10452 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.847754][T10457] netlink: 'syz.2.1186': attribute type 4 has an invalid length. [ 414.873161][T10457] netlink: 'syz.2.1186': attribute type 4 has an invalid length. [ 414.934550][T10462] FAULT_INJECTION: forcing a failure. [ 414.934550][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.947823][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.2.1189 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 414.958250][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.968309][T10462] Call Trace: [ 414.971590][T10462] [ 414.974526][T10462] dump_stack_lvl+0x16c/0x1f0 [ 414.979214][T10462] should_fail_ex+0x497/0x5b0 [ 414.983909][T10462] _copy_from_user+0x2e/0xd0 [ 414.988507][T10462] copy_msghdr_from_user+0x99/0x160 [ 414.993710][T10462] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 414.999544][T10462] ___sys_sendmsg+0xff/0x1e0 [ 415.004122][T10462] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.009314][T10462] ? __pfx_lock_release+0x10/0x10 [ 415.014321][T10462] ? trace_lock_acquire+0x14e/0x1f0 [ 415.019525][T10462] ? __fget_files+0x206/0x3a0 [ 415.024192][T10462] __sys_sendmsg+0x16e/0x220 [ 415.028767][T10462] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.033873][T10462] ? rcu_is_watching+0x12/0xc0 [ 415.038628][T10462] do_syscall_64+0xcd/0x250 [ 415.043125][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.049006][T10462] RIP: 0033:0x7fa655780849 [ 415.053405][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.073001][T10462] RSP: 002b:00007fa656512058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.081488][T10462] RAX: ffffffffffffffda RBX: 00007fa655945fa0 RCX: 00007fa655780849 [ 415.089445][T10462] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 415.097416][T10462] RBP: 00007fa6565120a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.105401][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.113382][T10462] R13: 0000000000000000 R14: 00007fa655945fa0 R15: 00007ffefc914eb8 [ 415.121354][T10462] [ 415.162417][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 415.186433][ T29] audit: type=1326 audit(1732949146.055:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556d580849 code=0x0 [ 415.324726][T10467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.336177][T10467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.343017][T10467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.639879][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 415.646939][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 415.831333][T10481] netlink: 'syz.4.1193': attribute type 11 has an invalid length. [ 415.849481][T10481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'. [ 416.588830][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.686788][ T29] audit: type=1400 audit(1732949147.485:759): avc: denied { write } for pid=10486 comm="syz.3.1195" name="snmp6" dev="proc" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 416.994702][T10491] mkiss: ax0: crc mode is auto. [ 417.438328][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 417.445557][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 417.482866][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 418.614004][T10516] FAULT_INJECTION: forcing a failure. [ 418.614004][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 418.626729][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.0.1203 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 418.637140][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.647193][T10516] Call Trace: [ 418.650476][T10516] [ 418.653403][T10516] dump_stack_lvl+0x16c/0x1f0 [ 418.658099][T10516] should_fail_ex+0x497/0x5b0 [ 418.662797][T10516] ? fs_reclaim_acquire+0xae/0x150 [ 418.667925][T10516] should_failslab+0xc2/0x120 [ 418.672610][T10516] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 418.678333][T10516] ? find_held_lock+0x2d/0x110 [ 418.683104][T10516] ? proc_alloc_inode+0x25/0x200 [ 418.688051][T10516] ? __pfx_proc_lookupfd+0x10/0x10 [ 418.693166][T10516] ? __pfx_proc_alloc_inode+0x10/0x10 [ 418.698539][T10516] proc_alloc_inode+0x25/0x200 [ 418.703303][T10516] alloc_inode+0x5d/0x230 [ 418.707637][T10516] new_inode+0x22/0x210 [ 418.711799][T10516] ? __pfx_proc_lookupfd+0x10/0x10 [ 418.716916][T10516] proc_pid_make_inode+0x22/0x160 [ 418.721939][T10516] ? do_raw_spin_unlock+0x172/0x230 [ 418.727143][T10516] proc_fd_instantiate+0x57/0x240 [ 418.732177][T10516] proc_lookupfd+0x120/0x230 [ 418.736771][T10516] ? __pfx_proc_lookupfd+0x10/0x10 [ 418.741900][T10516] lookup_open.isra.0+0x92d/0x14c0 [ 418.747055][T10516] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 418.752616][T10516] ? path_openat+0x88a/0x2d60 [ 418.757325][T10516] ? mnt_get_write_access+0x20c/0x300 [ 418.762724][T10516] path_openat+0x904/0x2d60 [ 418.767241][T10516] ? __pfx_path_openat+0x10/0x10 [ 418.772298][T10516] do_filp_open+0x20c/0x470 [ 418.776808][T10516] ? __pfx_do_filp_open+0x10/0x10 [ 418.781835][T10516] ? lock_release+0x3e5/0x6f0 [ 418.786524][T10516] ? __pfx_kfree_link+0x10/0x10 [ 418.791390][T10516] ? alloc_fd+0x41f/0x760 [ 418.795729][T10516] do_sys_openat2+0x17a/0x1e0 [ 418.800429][T10516] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.805634][T10516] ? __pfx_lock_release+0x10/0x10 [ 418.810686][T10516] __x64_sys_openat+0x175/0x210 [ 418.815542][T10516] ? __pfx___x64_sys_openat+0x10/0x10 [ 418.820922][T10516] ? rcu_read_unlock_trace_special+0x2aa/0x3f0 [ 418.827093][T10516] ? rcu_is_watching+0x12/0xc0 [ 418.831955][T10516] do_syscall_64+0xcd/0x250 [ 418.836471][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.842394][T10516] RIP: 0033:0x7ff530d7f1b0 [ 418.846829][T10516] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 8f 02 00 8b 44 [ 418.866438][T10516] RSP: 002b:00007ff531aa4f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 418.874856][T10516] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff530d7f1b0 [ 418.882829][T10516] RDX: 0000000000000002 RSI: 00007ff531aa4fc0 RDI: 00000000ffffff9c [ 418.890800][T10516] RBP: 00007ff531aa4fc0 R08: 0000000000000000 R09: 0000000000000000 [ 418.898841][T10516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 418.906808][T10516] R13: 0000000000000000 R14: 00007ff530f46160 R15: 00007ffde9bede18 [ 418.914793][T10516] [ 419.071211][T10522] tipc: Started in network mode [ 419.076180][T10522] tipc: Node identity ac1414aa, cluster identity 4711 [ 419.085469][T10522] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.092989][T10522] tipc: Enabled bearer , priority 10 [ 419.232412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.340682][ T5946] IPVS: starting estimator thread 0... [ 419.370442][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.452003][T10527] IPVS: using max 24 ests per chain, 57600 per kthread [ 419.520459][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.671761][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.810448][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.951378][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.110926][ T25] tipc: Node number set to 2886997162 [ 420.230446][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.382603][ T29] audit: type=1400 audit(1732949151.255:760): avc: denied { read } for pid=10542 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.500453][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.700472][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 420.859160][ T25] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 420.878520][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.908926][ T25] usb 1-1: Product: syz [ 420.944465][ T25] usb 1-1: Manufacturer: syz [ 420.953931][ T25] usb 1-1: SerialNumber: syz [ 420.973635][ T25] usb 1-1: config 0 descriptor?? [ 421.040474][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.224771][T10549] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 421.250562][T10549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 421.382729][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.393310][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.439164][ T25] usb 1-1: Firmware: major: 121, minor: 0, hardware type: ATUSB (0) [ 421.583430][ T5946] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 422.015999][ T5946] usb 2-1: device descriptor read/64, error -71 [ 422.290609][ T5946] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 422.340038][ T25] usb 1-1: failed to fetch extended address, random address set [ 422.431218][ T5946] usb 2-1: device descriptor read/64, error -71 [ 422.545765][ T5946] usb usb2-port1: attempt power cycle [ 422.787660][T10571] FAULT_INJECTION: forcing a failure. [ 422.787660][T10571] name failslab, interval 1, probability 0, space 0, times 0 [ 422.800740][T10571] CPU: 0 UID: 0 PID: 10571 Comm: syz.4.1220 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 422.811176][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.821239][T10571] Call Trace: [ 422.824519][T10571] [ 422.827455][T10571] dump_stack_lvl+0x16c/0x1f0 [ 422.832150][T10571] should_fail_ex+0x497/0x5b0 [ 422.836849][T10571] should_failslab+0xc2/0x120 [ 422.841539][T10571] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 422.847351][T10571] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.852555][T10571] ? __alloc_skb+0x2b1/0x380 [ 422.857155][T10571] __alloc_skb+0x2b1/0x380 [ 422.861575][T10571] ? __pfx___alloc_skb+0x10/0x10 [ 422.866516][T10571] ? rt6_nlmsg_size+0xb0/0x450 [ 422.871287][T10571] ? rt6_nh_age_exceptions+0x90/0xc0 [ 422.876577][T10571] ? notifier_call_chain+0x36c/0x410 [ 422.881873][T10571] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 422.887359][T10571] inet6_rt_notify+0xc7/0x260 [ 422.892054][T10571] fib6_del+0xf56/0x1760 [ 422.896307][T10571] ? __pfx_fib6_del+0x10/0x10 [ 422.900987][T10571] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.906367][T10571] ? lock_acquire+0x2f/0xb0 [ 422.910873][T10571] ? ip6_route_del+0xe14/0x1fa0 [ 422.915735][T10571] ip6_route_del+0x18f2/0x1fa0 [ 422.920511][T10571] ? __pfx_ip6_route_del+0x10/0x10 [ 422.925633][T10571] ? lock_acquire+0x2f/0xb0 [ 422.930125][T10571] ? l3mdev_fib_table_by_index+0x58/0x1f0 [ 422.935842][T10571] ipv6_route_ioctl+0x4a6/0x600 [ 422.940687][T10571] ? find_held_lock+0x2d/0x110 [ 422.945444][T10571] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 422.950892][T10571] ? find_held_lock+0x2d/0x110 [ 422.955657][T10571] ? __might_fault+0xe3/0x190 [ 422.960325][T10571] ? __might_fault+0xe3/0x190 [ 422.965002][T10571] inet6_ioctl+0x269/0x2b0 [ 422.969405][T10571] ? __pfx_inet6_ioctl+0x10/0x10 [ 422.974335][T10571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.980217][T10571] sock_do_ioctl+0x116/0x280 [ 422.984798][T10571] ? __pfx_sock_do_ioctl+0x10/0x10 [ 422.989904][T10571] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 422.996408][T10571] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 423.002902][T10571] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 423.009742][T10571] sock_ioctl+0x228/0x6c0 [ 423.014061][T10571] ? __pfx_sock_ioctl+0x10/0x10 [ 423.018912][T10571] ? selinux_file_ioctl+0x180/0x270 [ 423.024097][T10571] ? selinux_file_ioctl+0xb4/0x270 [ 423.029198][T10571] ? __pfx_sock_ioctl+0x10/0x10 [ 423.034042][T10571] __x64_sys_ioctl+0x190/0x200 [ 423.038798][T10571] do_syscall_64+0xcd/0x250 [ 423.043292][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.049173][T10571] RIP: 0033:0x7f9002d80849 [ 423.053581][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.073272][T10571] RSP: 002b:00007f9003b8a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.081676][T10571] RAX: ffffffffffffffda RBX: 00007f9002f45fa0 RCX: 00007f9002d80849 [ 423.089642][T10571] RDX: 0000000020000000 RSI: 000000000000890c RDI: 0000000000000003 [ 423.097609][T10571] RBP: 00007f9003b8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 423.105568][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.113522][T10571] R13: 0000000000000000 R14: 00007f9002f45fa0 R15: 00007ffcb6b18d08 [ 423.121507][T10571] [ 423.125931][ T25] usb 1-1: USB disconnect, device number 27 [ 423.191274][ T5946] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 423.227360][ T5946] usb 2-1: device descriptor read/8, error -71 [ 423.560694][ T5946] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 423.730850][ T5946] usb 2-1: device descriptor read/8, error -71 [ 423.852161][ T5946] usb usb2-port1: unable to enumerate USB device [ 423.904004][T10587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.913040][T10587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.955533][ T29] audit: type=1400 audit(1732949154.825:761): avc: denied { setopt } for pid=10588 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 424.034879][ T29] audit: type=1400 audit(1732949154.905:762): avc: denied { ioctl } for pid=10578 comm="syz.3.1222" path="socket:[27588]" dev="sockfs" ino=27588 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 424.078629][T10593] FAULT_INJECTION: forcing a failure. [ 424.078629][T10593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.123311][T10593] CPU: 1 UID: 0 PID: 10593 Comm: syz.0.1225 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 424.133742][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.143774][T10593] Call Trace: [ 424.147028][T10593] [ 424.149941][T10593] dump_stack_lvl+0x16c/0x1f0 [ 424.154601][T10593] should_fail_ex+0x497/0x5b0 [ 424.159260][T10593] _copy_from_user+0x2e/0xd0 [ 424.163824][T10593] copy_msghdr_from_user+0x99/0x160 [ 424.169085][T10593] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 424.174883][T10593] ___sys_sendmsg+0xff/0x1e0 [ 424.179447][T10593] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.184622][T10593] ? __pfx_lock_release+0x10/0x10 [ 424.189630][T10593] ? trace_lock_acquire+0x14e/0x1f0 [ 424.194831][T10593] ? __fget_files+0x206/0x3a0 [ 424.199513][T10593] __sys_sendmsg+0x16e/0x220 [ 424.204349][T10593] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.209442][T10593] ? syscall_user_dispatch+0x7a/0x130 [ 424.214889][T10593] do_syscall_64+0xcd/0x250 [ 424.219378][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.225254][T10593] RIP: 0033:0x7ff530d80849 [ 424.229647][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.249227][T10593] RSP: 002b:00007ff531aa5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.257612][T10593] RAX: ffffffffffffffda RBX: 00007ff530f46160 RCX: 00007ff530d80849 [ 424.265555][T10593] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000a [ 424.273498][T10593] RBP: 00007ff531aa50a0 R08: 0000000000000000 R09: 0000000000000000 [ 424.281451][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.289400][T10593] R13: 0000000000000000 R14: 00007ff530f46160 R15: 00007ffde9bede18 [ 424.297357][T10593] [ 424.300636][ C1] net_ratelimit: 2 callbacks suppressed [ 424.300645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.325611][T10589] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 424.476305][T10601] FAULT_INJECTION: forcing a failure. [ 424.476305][T10601] name failslab, interval 1, probability 0, space 0, times 0 [ 424.630446][T10601] CPU: 0 UID: 0 PID: 10601 Comm: syz.1.1228 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 424.640908][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.650967][T10601] Call Trace: [ 424.654242][T10601] [ 424.657173][T10601] dump_stack_lvl+0x16c/0x1f0 [ 424.661863][T10601] should_fail_ex+0x497/0x5b0 [ 424.666550][T10601] ? fs_reclaim_acquire+0xae/0x150 [ 424.671678][T10601] should_failslab+0xc2/0x120 [ 424.676358][T10601] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 424.681735][T10601] ? rcu_is_watching+0x12/0xc0 [ 424.686508][T10601] ? security_file_alloc+0x34/0x2b0 [ 424.691717][T10601] security_file_alloc+0x34/0x2b0 [ 424.696748][T10601] init_file+0x93/0x480 [ 424.700918][T10601] alloc_empty_file+0x91/0x1e0 [ 424.705688][T10601] alloc_file_pseudo+0x147/0x210 [ 424.710633][T10601] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 424.716097][T10601] ? alloc_fd+0x41f/0x760 [ 424.720428][T10601] ? __pfx_lock_release+0x10/0x10 [ 424.725463][T10601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 424.730850][T10601] __anon_inode_getfile+0x136/0x3d0 [ 424.736058][T10601] ? _raw_spin_unlock+0x28/0x50 [ 424.740912][T10601] ? __pfx___anon_inode_getfile+0x10/0x10 [ 424.746646][T10601] anon_inode_getfd+0x52/0xb0 [ 424.751320][T10601] map_create+0xd6b/0x1f20 [ 424.755745][T10601] ? __pfx_avc_has_perm+0x10/0x10 [ 424.760778][T10601] ? trace_lock_acquire+0x14e/0x1f0 [ 424.765990][T10601] ? __pfx_map_create+0x10/0x10 [ 424.770849][T10601] ? lock_acquire+0x2f/0xb0 [ 424.775349][T10601] ? __might_fault+0xe3/0x190 [ 424.780039][T10601] ? selinux_bpf+0xde/0x130 [ 424.784556][T10601] __sys_bpf+0x4391/0x49c0 [ 424.788975][T10601] ? __pfx_lock_release+0x10/0x10 [ 424.794004][T10601] ? __pfx___sys_bpf+0x10/0x10 [ 424.798771][T10601] ? vfs_write+0x306/0x1150 [ 424.803278][T10601] ? __mutex_unlock_slowpath+0x164/0x690 [ 424.808930][T10601] ? fput+0x67/0x440 [ 424.812914][T10601] ? ksys_write+0x1ba/0x250 [ 424.817401][T10601] ? __pfx_ksys_write+0x10/0x10 [ 424.822237][T10601] __x64_sys_bpf+0x78/0xc0 [ 424.826644][T10601] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.831834][T10601] do_syscall_64+0xcd/0x250 [ 424.836345][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.842228][T10601] RIP: 0033:0x7f19b5d80849 [ 424.846634][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.866226][T10601] RSP: 002b:00007f19b3bf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.874623][T10601] RAX: ffffffffffffffda RBX: 00007f19b5f45fa0 RCX: 00007f19b5d80849 [ 424.882576][T10601] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000000 [ 424.890531][T10601] RBP: 00007f19b3bf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 424.898483][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.906436][T10601] R13: 0000000000000000 R14: 00007f19b5f45fa0 R15: 00007ffc39c85538 [ 424.914423][T10601] [ 424.935660][ T5936] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 425.184849][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 425.227674][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.238664][ T29] audit: type=1400 audit(1732949156.095:763): avc: denied { getopt } for pid=10606 comm="syz.2.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 425.238723][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 425.270146][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 425.283002][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 425.298598][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 425.320484][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.402715][ T5936] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 425.411840][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 425.419946][ T5936] usb 4-1: Product: syz [ 425.424168][ T5936] usb 4-1: Manufacturer: syz [ 425.429385][ T5936] usb 4-1: SerialNumber: syz [ 425.450795][ T5936] usb 4-1: config 0 descriptor?? [ 425.506774][ T29] audit: type=1400 audit(1732949156.375:764): avc: denied { read } for pid=10613 comm="syz.1.1232" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 425.553680][T10618] 9pnet_fd: Insufficient options for proto=fd [ 425.903172][ T5936] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 425.917390][ T5936] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 425.988385][T10628] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.034762][T10628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 426.103812][ T5936] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 426.162745][ T5936] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 426.208502][ T5936] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 426.276512][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1237'. [ 426.304311][ T5936] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 426.310444][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1237'. [ 426.350433][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.870497][ T5885] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 426.935471][ T5936] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 426.956039][ T5936] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 426.987398][ T5936] usb 4-1: USB disconnect, device number 20 [ 427.032136][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.038916][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 427.197935][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.208134][ T5885] usb 2-1: config 0 descriptor?? [ 427.400443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.771010][ T5885] (null): keene_cmd_main failed (-110) [ 427.777816][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 427.811232][ T5885] video4linux radio48: keene_cmd_main failed (-32) [ 427.825527][ T5885] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 427.877775][ T5885] usb 2-1: USB disconnect, device number 29 [ 428.059196][T10665] CIFS: Unable to determine destination address [ 428.430586][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.715412][T10667] 9pnet_fd: Insufficient options for proto=fd [ 428.924884][T10675] overlayfs: missing 'lowerdir' [ 428.930512][ T29] audit: type=1400 audit(1732949160.773:765): avc: denied { write } for pid=10668 comm="syz.4.1246" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 428.953494][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.470427][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.735043][T10674] mkiss: ax0: crc mode is auto. [ 429.743351][T10674] netlink: 'syz.4.1246': attribute type 21 has an invalid length. [ 429.751312][T10674] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1246'. [ 429.761074][T10674] netlink: 'syz.4.1246': attribute type 21 has an invalid length. [ 429.768913][T10674] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1246'. [ 430.510422][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.560414][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.761307][ T5946] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 431.770490][ T29] audit: type=1400 audit(1732949163.623:766): avc: denied { map } for pid=10710 comm="syz.3.1255" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 431.837070][T10709] netlink: 2052 bytes leftover after parsing attributes in process `syz.2.1254'. [ 431.867404][T10709] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 431.930694][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 431.960081][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 432.070284][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.111992][ T5946] usb 2-1: Product: syz [ 432.118786][ T5946] usb 2-1: Manufacturer: syz [ 432.135642][ T5946] usb 2-1: SerialNumber: syz [ 432.142759][ T5946] usb 2-1: config 0 descriptor?? [ 432.153139][ T5946] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 432.590484][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.637906][T10725] overlayfs: missing 'lowerdir' [ 433.100306][T10731] netlink: 'syz.4.1261': attribute type 11 has an invalid length. [ 433.188443][T10734] overlayfs: failed to resolve './file0': -2 [ 433.278399][T10737] syzkaller1: entered promiscuous mode [ 433.287408][T10737] syzkaller1: entered allmulticast mode [ 433.630455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.022353][T10743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.104978][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.139412][ T5946] gspca_sonixj: reg_w1 err -110 [ 434.160741][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.200863][ T5946] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 434.670429][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.804254][ T29] audit: type=1326 audit(1732949166.673:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9002d80849 code=0x7ffc0000 [ 434.835208][ T29] audit: type=1326 audit(1732949166.673:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9002d80849 code=0x7ffc0000 [ 434.894072][ T29] audit: type=1326 audit(1732949166.763:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9002d7f1b0 code=0x7ffc0000 [ 434.934069][ T29] audit: type=1326 audit(1732949166.763:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9002d82077 code=0x7ffc0000 [ 434.957444][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.040747][ T29] audit: type=1326 audit(1732949166.763:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9002d80849 code=0x7ffc0000 [ 435.069063][ T29] audit: type=1326 audit(1732949166.763:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9002d82077 code=0x7ffc0000 [ 435.326113][ T29] audit: type=1326 audit(1732949166.763:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9002d7f4aa code=0x7ffc0000 [ 435.710409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.140411][ T29] audit: type=1326 audit(1732949166.763:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9002d80849 code=0x7ffc0000 [ 436.179528][T10771] overlayfs: missing 'lowerdir' [ 436.187612][ T1856] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 436.201939][ T5946] usb 2-1: USB disconnect, device number 30 [ 436.250193][ T29] audit: type=1326 audit(1732949166.763:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9002d80849 code=0x7ffc0000 [ 436.366843][ T1856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.375367][ T1856] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 436.385990][ T1856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.412673][ T1856] usb 4-1: config 0 descriptor?? [ 436.750433][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.074394][T10785] overlay: Unknown parameter 'measure' [ 437.144051][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 437.144082][ T29] audit: type=1400 audit(1732949168.973:786): avc: denied { create } for pid=10783 comm="syz.1.1276" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 437.170995][ T1856] (null): keene_cmd_main failed (-110) [ 437.200854][ T1856] video4linux radio48: keene_cmd_main failed (-71) [ 437.207783][ T1856] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 437.230665][ T1856] usb 4-1: USB disconnect, device number 21 [ 437.475291][ T29] audit: type=1400 audit(1732949169.343:787): avc: denied { setopt } for pid=10795 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 437.633772][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 437.790426][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.797733][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 437.809120][ T5885] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 437.818016][ T5885] usb 1-1: config 0 has no interface number 0 [ 437.853296][ T5885] usb 1-1: config 0 interface 22 has no altsetting 0 [ 437.865970][ T5885] usb 1-1: New USB device found, idVendor=bb6f, idProduct=9304, bcdDevice=b9.26 [ 437.889381][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.927015][ T5885] usb 1-1: Product: syz [ 437.944182][ T5885] usb 1-1: Manufacturer: syz [ 437.948979][ T5885] usb 1-1: SerialNumber: syz [ 437.963605][ T5885] usb 1-1: config 0 descriptor?? [ 437.980039][ T5885] usb-storage 1-1:0.22: USB Mass Storage device detected [ 438.199006][ T5946] usb 1-1: USB disconnect, device number 28 [ 438.551187][ T5885] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 438.720456][ T5885] usb 5-1: Invalid ep0 maxpacket: 32 [ 438.840462][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.872564][ T5885] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 439.050482][ T5885] usb 5-1: Invalid ep0 maxpacket: 32 [ 439.056579][ T5885] usb usb5-port1: attempt power cycle [ 439.192334][T10790] ipvlan2: entered promiscuous mode [ 439.200744][T10790] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 439.207933][T10790] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 439.416476][ T5885] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 439.443349][ T29] audit: type=1400 audit(1732949171.283:788): avc: denied { ioctl } for pid=10809 comm="syz.1.1282" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 439.468448][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.617574][ T5885] usb 5-1: Invalid ep0 maxpacket: 32 [ 439.635408][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.642151][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.762931][ T29] audit: type=1400 audit(1732949171.383:789): avc: denied { bind } for pid=10809 comm="syz.1.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 439.782915][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.880427][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.929989][ T5885] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 439.940052][T10810] mkiss: ax0: crc mode is auto. [ 439.959689][ T5885] usb 5-1: Invalid ep0 maxpacket: 32 [ 439.981359][ T5885] usb usb5-port1: unable to enumerate USB device [ 440.047802][T10810] capability: warning: `syz.1.1282' uses 32-bit capabilities (legacy support in use) [ 440.057638][ T5946] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 440.346461][ T5946] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 440.354873][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.370576][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 440.381816][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.393419][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.410793][ T5946] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.431035][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.458863][ T5946] usb 4-1: config 0 descriptor?? [ 440.466635][T10818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 440.894996][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 440.903384][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 440.911273][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.952152][ T5946] usb 4-1: USB disconnect, device number 22 [ 441.950428][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.530750][ T29] audit: type=1400 audit(1732949175.365:790): avc: denied { sendto } for pid=9 comm="kworker/0:1" saddr=fe80::1c daddr=ff02::1:ff00:bb netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 442.673616][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 443.000417][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.185516][ T29] audit: type=1400 audit(1732949176.055:791): avc: denied { view } for pid=10859 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 443.204743][ T5946] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 443.215216][T10860] FAULT_INJECTION: forcing a failure. [ 443.215216][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 443.257081][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.3.1296 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 443.267532][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.277596][T10860] Call Trace: [ 443.280879][T10860] [ 443.283811][T10860] dump_stack_lvl+0x16c/0x1f0 [ 443.288508][T10860] should_fail_ex+0x497/0x5b0 [ 443.293207][T10860] ? fs_reclaim_acquire+0xae/0x150 [ 443.298499][T10860] should_failslab+0xc2/0x120 [ 443.303168][T10860] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 443.308524][T10860] ? getname_flags.part.0+0x4c/0x550 [ 443.313811][T10860] getname_flags.part.0+0x4c/0x550 [ 443.318924][T10860] getname_flags+0x93/0xf0 [ 443.323320][T10860] user_path_at+0x24/0x60 [ 443.327627][T10860] __x64_sys_mount+0x1fc/0x320 [ 443.332376][T10860] ? __pfx___x64_sys_mount+0x10/0x10 [ 443.337643][T10860] do_syscall_64+0xcd/0x250 [ 443.342143][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.348018][T10860] RIP: 0033:0x7f556d580849 [ 443.352510][T10860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.372118][T10860] RSP: 002b:00007f556e2d1058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.380540][T10860] RAX: ffffffffffffffda RBX: 00007f556d745fa0 RCX: 00007f556d580849 [ 443.388516][T10860] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 443.396478][T10860] RBP: 00007f556e2d10a0 R08: 0000000020000400 R09: 0000000000000000 [ 443.404475][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.412433][T10860] R13: 0000000000000000 R14: 00007f556d745fa0 R15: 00007ffffed245d8 [ 443.420402][T10860] [ 443.553218][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 443.565527][ T5946] usb 5-1: no configurations [ 443.575847][ T5946] usb 5-1: can't read configurations, error -22 [ 443.623835][T10867] TCP: out of memory -- consider tuning tcp_mem [ 443.720729][ T5946] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 443.913156][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 443.919626][ T5946] usb 5-1: no configurations [ 443.930920][ T5946] usb 5-1: can't read configurations, error -22 [ 443.938885][ T5946] usb usb5-port1: attempt power cycle [ 443.971407][ T29] audit: type=1400 audit(1732949177.847:792): avc: denied { listen } for pid=10877 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.040434][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.100516][ T5885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 444.282056][ T5885] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 444.290175][ T5885] usb 2-1: config 0 has no interface number 0 [ 444.310426][ T5946] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 444.318427][ T5885] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 444.339920][ T5885] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 444.354351][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 444.370485][ T5946] usb 5-1: no configurations [ 444.382411][ T5946] usb 5-1: can't read configurations, error -22 [ 444.415569][ T5885] usb 2-1: config 0 interface 48 has no altsetting 0 [ 444.427172][ T5885] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 444.466269][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.506251][ T5885] usb 2-1: config 0 descriptor?? [ 444.570502][ T5946] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 444.601276][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 444.606993][ T5946] usb 5-1: no configurations [ 444.620389][ T5946] usb 5-1: can't read configurations, error -22 [ 444.639490][ T5946] usb usb5-port1: unable to enumerate USB device [ 444.935195][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.950722][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.963125][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.981994][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.009803][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.070434][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 445.112542][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.131975][ T5885] usb 2-1: string descriptor 0 read error: -71 [ 445.167588][ T5885] pegasus 2-1:0.48: probe with driver pegasus failed with error -71 [ 445.178105][ T5885] usb 2-1: USB disconnect, device number 31 [ 446.120430][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.420447][ T5885] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 446.752239][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 446.773126][ T5885] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 447.150417][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.650514][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 447.658122][ T5885] usb 1-1: can't read configurations, error -61 [ 448.220417][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.270458][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.370455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.420428][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.470435][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.570432][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.620438][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.670462][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.770426][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.820419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.870437][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.970454][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 461.020424][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 462.070504][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.170468][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 464.220409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.270509][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.370448][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.420417][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.470413][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.570420][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.620406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.670398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.770422][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.820415][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.870408][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.970416][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.020405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 478.070420][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 479.170455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 480.220405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 481.270423][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.370523][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 483.420405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 484.471896][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 485.570430][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 486.620404][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 487.670418][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 488.770405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 489.820410][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 490.870537][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 491.970407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 493.020453][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 494.070410][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 495.170411][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 496.220395][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 497.270396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 498.370480][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 499.420453][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 500.470399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 501.570452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 502.620394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 503.670391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 504.770407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 505.820390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 506.870403][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 507.970411][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 509.020394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 510.070390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 511.170400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 512.220435][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 513.270391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 514.370395][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.420390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.472064][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 517.570409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 518.620400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 519.670394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 520.770403][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 521.820390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 522.870387][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 523.970419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 525.020402][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 526.070424][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 527.170454][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 528.220429][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 529.270387][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 530.370430][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 531.420398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 532.470396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 533.570412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 534.620380][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 535.670383][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 536.770390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 537.820398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 538.870443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 539.970476][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 541.020383][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 542.074366][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 543.170397][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 544.220581][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 545.270426][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 546.370411][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 547.420382][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 548.470400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 549.570399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 550.620383][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 551.670387][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 552.770405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 552.870289][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 552.877236][ C1] rcu: 0-...!: (0 ticks this GP) idle=ccd4/1/0x4000000000000000 softirq=36796/36796 fqs=0 [ 552.888374][ C1] rcu: (detected by 1, t=10506 jiffies, g=30629, q=66 ncpus=2) [ 552.896011][ C1] Sending NMI from CPU 1 to CPUs 0: [ 552.896036][ C0] NMI backtrace for cpu 0 [ 552.896045][ C0] CPU: 0 UID: 0 PID: 10917 Comm: syz.3.1304 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 552.896065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 552.896073][ C0] RIP: 0010:trace_hrtimer_cancel+0x2e/0x220 [ 552.896096][ C0] Code: 89 fd 53 e8 b4 da 12 00 66 90 e8 ad da 12 00 48 c7 c3 0c d9 03 00 e8 a1 da 12 00 65 8b 1b bf 07 00 00 00 89 de e8 d2 dc 12 00 <83> fb 07 0f 87 a7 01 00 00 e8 84 da 12 00 89 db be 08 00 00 00 48 [ 552.896109][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000046 [ 552.896121][ C0] RAX: 0000000000010001 RBX: 0000000000000000 RCX: ffffffff817beaae [ 552.896130][ C0] RDX: ffff888026eb0000 RSI: 0000000000000007 RDI: 0000000000000005 [ 552.896139][ C0] RBP: ffff888035616340 R08: 0000000000000005 R09: 0000000000000007 [ 552.896148][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888035616340 [ 552.896157][ C0] R13: ffff8880b862cb00 R14: ffff8880b862ca00 R15: ffffffff893c4970 [ 552.896167][ C0] FS: 00007f556e2b06c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 552.896182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.896192][ C0] CR2: 0000000020f5dfe4 CR3: 000000005feec000 CR4: 00000000003526f0 [ 552.896201][ C0] DR0: 0000000000000060 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.896209][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 552.896218][ C0] Call Trace: [ 552.896223][ C0] [ 552.896230][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 552.896249][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 552.896263][ C0] ? nmi_handle+0x1ac/0x5d0 [ 552.896280][ C0] ? trace_hrtimer_cancel+0x2e/0x220 [ 552.896297][ C0] ? default_do_nmi+0x6a/0x160 [ 552.896312][ C0] ? exc_nmi+0x170/0x1e0 [ 552.896326][ C0] ? end_repeat_nmi+0xf/0x53 [ 552.896339][ C0] ? __pfx_advance_sched+0x10/0x10 [ 552.896357][ C0] ? trace_hrtimer_cancel+0x2e/0x220 [ 552.896374][ C0] ? trace_hrtimer_cancel+0x2e/0x220 [ 552.896391][ C0] ? trace_hrtimer_cancel+0x2e/0x220 [ 552.896408][ C0] ? trace_hrtimer_cancel+0x2e/0x220 [ 552.896426][ C0] [ 552.896430][ C0] [ 552.896435][ C0] __hrtimer_run_queues+0x484/0xae0 [ 552.896455][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 552.896472][ C0] ? read_tsc+0x9/0x20 [ 552.896492][ C0] hrtimer_interrupt+0x392/0x8e0 [ 552.896513][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 552.896530][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 552.896547][ C0] [ 552.896551][ C0] [ 552.896556][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.896575][ C0] RIP: 0010:__might_resched+0x65/0x5e0 [ 552.896596][ C0] Code: 48 c1 eb 03 48 c7 44 24 20 90 df 5c 81 48 01 d8 c7 00 f1 f1 f1 f1 c7 40 04 00 f3 f3 f3 e8 43 cf d2 09 85 c0 0f 85 fd 03 00 00 36 cf d2 09 85 c0 0f 85 47 04 00 00 65 4c 8b 3d f6 f8 a6 7e 49 [ 552.896607][ C0] RSP: 0018:ffffc9001ea6fc18 EFLAGS: 00000246 [ 552.896617][ C0] RAX: 0000000000000000 RBX: 1ffff92003d4df85 RCX: 0000000000000001 [ 552.896625][ C0] RDX: 0000000000000000 RSI: ffffffff8b6ce300 RDI: ffffffff8bd1e5c0 [ 552.896634][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 552.896642][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8c9baf40 [ 552.896649][ C0] R13: 0000000000000b82 R14: 0000000020229500 R15: ffff888035ff7880 [ 552.896662][ C0] ? __might_resched+0x473/0x5e0 [ 552.896678][ C0] ? __pfx___might_resched+0x10/0x10 [ 552.896693][ C0] ? __pfx___might_resched+0x10/0x10 [ 552.896708][ C0] __might_fault+0x83/0x190 [ 552.896727][ C0] do_recvmmsg+0x321/0x740 [ 552.896744][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 552.896758][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 552.896772][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 552.896790][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 552.896803][ C0] ? __pfx_lock_release+0x10/0x10 [ 552.896818][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 552.896833][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 552.896848][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 552.896862][ C0] do_syscall_64+0xcd/0x250 [ 552.896882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.896900][ C0] RIP: 0033:0x7f556d580849 [ 552.896911][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.896923][ C0] RSP: 002b:00007f556e2b0058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 552.896935][ C0] RAX: ffffffffffffffda RBX: 00007f556d746080 RCX: 00007f556d580849 [ 552.896943][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 552.896952][ C0] RBP: 00007f556d5f3986 R08: 0000000000000000 R09: 0000000000000000 [ 552.896960][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 552.896968][ C0] R13: 0000000000000001 R14: 00007f556d746080 R15: 00007ffffed245d8 [ 552.896981][ C0] [ 552.897031][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g30629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 553.387080][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=31480 [ 553.395046][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g30629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 553.406402][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 553.416373][ C1] rcu: RCU grace-period kthread stack dump: [ 553.422252][ C1] task:rcu_preempt state:I stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 553.432440][ C1] Call Trace: [ 553.435714][ C1] [ 553.438643][ C1] __schedule+0xe58/0x5ad0 [ 553.443073][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 553.448290][ C1] ? __pfx___schedule+0x10/0x10 [ 553.453143][ C1] ? schedule+0x298/0x350 [ 553.457470][ C1] ? __pfx_lock_release+0x10/0x10 [ 553.462495][ C1] ? lock_acquire+0x2f/0xb0 [ 553.466993][ C1] ? schedule+0x1fd/0x350 [ 553.471325][ C1] schedule+0xe7/0x350 [ 553.475393][ C1] schedule_timeout+0x124/0x280 [ 553.480238][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 553.485613][ C1] ? __pfx_process_timeout+0x10/0x10 [ 553.490900][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.496709][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 553.502168][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 553.506932][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 553.512212][ C1] ? rcu_gp_init+0xc82/0x1630 [ 553.516887][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.522089][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.527894][ C1] rcu_gp_kthread+0x271/0x380 [ 553.532573][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.537769][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.542970][ C1] ? __kthread_parkme+0x148/0x220 [ 553.547998][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.553192][ C1] kthread+0x2c1/0x3a0 [ 553.557256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.562451][ C1] ? __pfx_kthread+0x10/0x10 [ 553.567046][ C1] ret_from_fork+0x45/0x80 [ 553.571463][ C1] ? __pfx_kthread+0x10/0x10 [ 553.576050][ C1] ret_from_fork_asm+0x1a/0x30 [ 553.580824][ C1] [ 553.820392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 554.870380][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 555.970393][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 557.020378][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 558.070379][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 559.170386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 560.220377][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 561.270407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 562.370401][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available