last executing test programs: 5m51.497175789s ago: executing program 2 (id=1186): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r3) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x3}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 5m49.956262445s ago: executing program 2 (id=1193): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, 0x0, 0x0) 5m49.708397528s ago: executing program 2 (id=1196): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x14000000, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 5m48.529671272s ago: executing program 2 (id=1197): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80000) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, &(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006500)={0x90}, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000b800)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90}, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000500)="d64bff38bbc436af44fe1342b2cd4a7bde2de0a71d83b674ec05e5b8e9cad8b9bc73d760ca467cfbba03ef37cf4602af5a49d7f9f59268fcfa0712b9ead5f60cb2c1877e76504d1562895e60b8999362c230780a3f0b8d566dceca9669f07d59a36383c09ebc543b0b0741709e4f933d7020355ab62b4f93f8102e54f07b2d90842a0bbb79220f4ecade36125b44610cb89178f3d58391f35ebcecce651ce17483fd93", &(0x7f0000000180)=@udp6=r7, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_uring_enter(r4, 0x46f4, 0x925c, 0x6, &(0x7f0000000280), 0x8) lseek(r9, 0x851, 0x0) r10 = syz_clone(0x1088000, &(0x7f0000000700)="cbf281a1b95de4dd93264876b303c6b919dc254405a23e25c5e4a7648ae6a0e2d0730aebcb746e003b282bd345cb3d1f84cecc54138c3db03c7c61656bd2bc5e4a14ae47cd3e253dcb73ac56c76ecd94a6984b3bb8ae5af2ba968c5414c24a99c57117acdb55f4271e5288d41f631b955ecd35ab520d73f44260425d9d970dbb9a95136ee38f434fce6de3d99290598a7d5f6d0d74fe91bf74cfe1dc1ee93d6b9b5858c1b9f12a3173339d235630f9b28a98f9e1df34c79db60f4d29c1641e5d8b697beb1015", 0xc6, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)="900de1ba") r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) kcmp$KCMP_EPOLL_TFD(r10, r3, 0x7, r1, &(0x7f0000000800)={r11, r9, 0x6}) 5m47.091432676s ago: executing program 2 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 5m45.969956951s ago: executing program 2 (id=1209): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) (fail_nth: 5) 5m45.820069442s ago: executing program 32 (id=1209): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) (fail_nth: 5) 2m0.802014875s ago: executing program 3 (id=2160): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file2', [{0x20, ','}, {0x20, 'ext4\x00'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '(%'}, {0x20, '\x00'}, {0x20, 'ro\x00'}, {0x20, ':@'}, {0x20, 'trusted.overlay.upper\x00'}]}, 0x3e) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f", 0x30) write$qrtrtun(r0, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000c00)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec42474", 0x28d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2m0.546687158s ago: executing program 3 (id=2161): add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000140)=0x3, 0x0) bind$xdp(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000, 0x400}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1m59.833016992s ago: executing program 3 (id=2163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c0800450000480000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="dc00000090780900080a00000000000000000402131291d785d589547c592dcacf9f965fe399000045baa8373be7f498c8941107fbd915331b4d75938472ed7f04ac493351a021b1e7534bf123256e825f0c6938c8c7ef216aa13e6e7e6b3249f1e373d0751614bfc501fdfe819752e32000cebd7f4bc9f5d3e16a2f97d2d79213f643594b74584e91c2b2ab89852a662307649996bdf3bf59432e88366c1880aab0755f63b74c04cb99ef7e937aa036df9bdcbf42cc2b0d3f075e50eb13b6c3a75ce59befe4b73636d9831e191e91f93c713944bbcd8843a943f2aa5e98349f31a0709a460059e5b00c1a7c6f9a615d1acf1f99de5151d9a6c4e6ab9cd5f4fd6f12dce8e685a762af71649f7651799cb2f88a671e2d9472fdf3f2958f31bc876914e0c472d6f54b8afc150b7299377a64f23ad72c76034adf389cce09449f3154183637afce1da13fbd6246ee1720a143f94e9d736276c25152058e1bc5b43b4ce1babdf1cc8d35ab67470ad9186b72ccdaaddf8e1923ab6bb477c2bf9f932cd728084a52a598ebf350d72e9d310000000000000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x1000007, &(0x7f0000000900)=ANY=[@ANYBLOB="66643d4612e9eb8fe02ca04e83f6b5e86f42821d26e9d1897f891c054b85014bfc", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m59.009249826s ago: executing program 3 (id=2167): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket(0x1, 0x803, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000140)={0x10, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0xfd46, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) 1m55.157572449s ago: executing program 3 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES16, @ANYRESDEC, @ANYRESHEX], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) kcmp(r1, r1, 0x4, r0, r2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000000300)=[{&(0x7f0000000240)=""/72, 0x48}], 0x1, &(0x7f0000001a40)=[{&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)=""/163, 0xa3}, {&(0x7f0000000000)=""/44, 0x2c}], 0xa, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102384, 0x18ff0) 1m55.022428618s ago: executing program 3 (id=2183): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r2, 0x0) r3 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xf597) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b00010000000000000000000401"], 0x114}], 0x1, 0x0, 0x0, 0xc010}, 0x0) open(0x0, 0x147042, 0x0) 1m54.434893489s ago: executing program 33 (id=2183): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r2, 0x0) r3 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xf597) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b00010000000000000000000401"], 0x114}], 0x1, 0x0, 0x0, 0xc010}, 0x0) open(0x0, 0x147042, 0x0) 6.916706072s ago: executing program 1 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @initial, {0x9, 0x5}}, @val={0x0, 0x1, @random='|'}, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 6.892570951s ago: executing program 5 (id=2583): setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5fb5, 0x0, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1bdf83044f50cde", "5a38c600b36f727fda3c68510573b697", "3995ebbb", "5d779f5fc87845ce"}, 0x28) 6.688542307s ago: executing program 1 (id=2584): open(&(0x7f00000000c0)='./file0\x00', 0xc02, 0xf1) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000740)='./file0/../file0/../file0/../file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x48, 0x800, 0x7, 0x9, 0xffff, 0x100, 0x8, 0x3845}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 6.62102073s ago: executing program 1 (id=2586): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2001, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000001580)="3186", 0x2}], 0x1) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x24080) copy_file_range(r0, &(0x7f0000000000)=0x4, r1, 0x0, 0x5, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000009c0), 0x1, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010003cb2ba008ca0768a8c0ad010203010902120001081840400904"], &(0x7f0000000940)={0xfc57, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000400)={0x7}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0xfffc0000, @local, 0x3, 0x2}, 0x20) syz_usb_connect(0x2, 0x24, 0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000213202001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB="f30b16960b0d08e05e62b089444d30b29e9a8ae1e2b2a04e275eec929f3d5fd55fd0822563d545c5cf66bdb20e079b633780e7d5ca11d104d7eb45"], 0x38}}, 0x0) recvmsg(r4, &(0x7f0000000440)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/7, 0x7}], 0x20, &(0x7f0000000300)=""/194, 0xc2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000a00)=[0xffff, 0x0, 0x5, 0x80, 0x3, 0x101, 0xfffffffd, 0xff]) 4.628372741s ago: executing program 0 (id=2593): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x3, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0]) 4.582299923s ago: executing program 5 (id=2594): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r0) keyctl$restrict_keyring(0xa, r0, 0x0, &(0x7f0000000000)='id:cb2e') 4.420846913s ago: executing program 5 (id=2596): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1f, 0x0, 0x0, r1, 0x0, 0x0, 0x1f}) 4.245943742s ago: executing program 5 (id=2597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000680)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="c0615667818585a0608115a54cb57b7fe1e04c8883a4b013b7f6ecbc5f6e0a6b8a879aeb2116fa7933", 0x29}, {&(0x7f0000000240)}, {&(0x7f0000000280)="bd53fd6f530502d5ccb897ebf68a0f8e0f82d68ebd29f76f9bd188b0d0b9843b60debd", 0x23}, {&(0x7f0000000340)="e2115cbed85d9a29d3fc8a2c3680ecb959cff168d6e20bb9c472144b46e365bd", 0x20}, {&(0x7f0000000400)="1e6ea36e1930edb01e13f340d06b99b304f9e26159ba3f096cd16fc872c4b19cfe614e77c3e1c55b1b9e3fea85572f35a75fe32e067038d54fe5c150416634531e2a88eaab51b9cca7f555a7d8930c1eb8dc3683fa93165a0a11a194635352ca52ecb6d4efe826b5015cb4d82d0edbfd54e3ea94cd68c2ad330735bff6e845605c34928d718b55235642b883a26b18df51ffae78d6bbed8351ca97d55868f9e8fcf6e9bff59d8af9fba8d4a5eb91b7876a68b11867af7dca3caeb35e404f11ee95c526f8365d014fa0a8b7f4d43822473d23f00ae0717e6123ee98229ccdef8b9ee27bdb9fc07ac257d8d47708f924bf", 0xf0}], 0x5}, 0x4000) 4.200324643s ago: executing program 5 (id=2599): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xc5}}}}}]}}]}}, 0x0) mincore(&(0x7f000091d000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/133) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x4, 0x100018b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000eb"], 0x1c}}, 0x0) r6 = dup(r4) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e48, 0x10100, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)) timerfd_settime(r6, 0x4, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r4, 0x2cf1, 0x4100, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xffffffefffff8001, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "394653f5"}]}}, 0x0}, 0x0) 4.1190659s ago: executing program 6 (id=2600): socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a002903ffff"], 0x20}}, 0x0) 4.057650025s ago: executing program 6 (id=2601): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f000000b080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000001, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x7, &(0x7f00000003c0)) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="919f9d310cce9f6648ecb244243753b4c6", 0x11, 0xfffffffffffffffb) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x5}, 0x3, 0x2, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x9}) setresuid(0x0, 0x0, 0x0) 3.581712958s ago: executing program 0 (id=2603): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) execve(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="175d93a07457d10454f9c71d59000000ff00000040580000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000100)) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8a7, 0x5, &(0x7f0000000080)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r7, 0x0, 0x119) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x0) 3.506488429s ago: executing program 1 (id=2604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) close(r2) (async) syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x2000) r3 = fcntl$dupfd(r2, 0x406, r2) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000880)=0x4) (async, rerun: 64) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (rerun: 64) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000140)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) ioperm(0x0, 0x8, 0x400) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local={0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x1}}, 0xb8}}, 0x0) 3.33551239s ago: executing program 0 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_pts(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000380), 0x4001) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/13, 0xd}], 0x6, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="402106000000e9214138fe8295aef069ff802b4a0a0630165b015966c0f67a013006220336e2df9acb3dd854748a0508ea7541f4381315cf5f961b84707b6f54446b5f3f9a3d0ec272405d9e29551fc6e9bce745a9376a719b6e019c7dca7bfa"], &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000300000000000021fbffdc8cba"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xe1f, 0x8001, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0x3, [{@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9b}]}, @generic={0x83, 0x4, "7fa9"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x31, 0x38, 0x3, 0xc, 0x4048, 0xffffffffffffffff, 0x6, '\x00', r7, r4, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000bae4ccae7ca3aa56d6280f9802", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.246021739s ago: executing program 4 (id=2607): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x6, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1b) getpid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x4800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xc, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x20000, 0xffffffff, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", 'E\x00', {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x8440, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) shutdown(r3, 0x2) 2.152710393s ago: executing program 1 (id=2608): socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x7, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = dup2(r4, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)='system_u:object_r:initctl_t:s0\x00', 0x83c0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r8 = dup2(r7, r7) mq_notify(r8, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) mq_notify(r8, &(0x7f0000000300)={0x0, 0x22}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 2.133390134s ago: executing program 4 (id=2609): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0b0000000a000200aa"], 0x34}}, 0xfffff000) 2.072103783s ago: executing program 6 (id=2610): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x810, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1.897716185s ago: executing program 4 (id=2611): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc0305602, &(0x7f0000000200)={0x1}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000079c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000007c00)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0400afba", @ANYRES16=r4, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000900000005000000"], 0x28}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x80207450, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) write$cgroup_int(r6, &(0x7f0000000040)=0x15c, 0x12) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000080)='bridge0\x00') 1.86433671s ago: executing program 0 (id=2612): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c5deb316", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="48bff237c38060ff", 0xffffffda}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0, 0x0) 1.794919714s ago: executing program 6 (id=2613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x40145) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1, 0x470, 0x1, 0x8, 0x1b, "150fd59aa07723be5d8cfb1114c240ada267d0"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000018c0)=0x13) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550f, &(0x7f0000000500)) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfada}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x38f3, 0x0, 0x13, 0x0, 0x23) r6 = dup(r1) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r9, 0xda90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000000), 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000), 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000), 0x10) dup3(r8, r10, 0x0) 905.898533ms ago: executing program 4 (id=2614): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x2080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 532.81042ms ago: executing program 6 (id=2615): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000174d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 502.410241ms ago: executing program 0 (id=2616): syz_init_net_socket$netrom(0x6, 0x5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}]}, 0x78}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r5, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x2, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0xeb6d, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x76, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x400000ce, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0xffffffff, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa3, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x8000000c, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 489.739944ms ago: executing program 4 (id=2617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="ed94718e4c34a34fde365cc5fcfcb2cecaa1a65dc3fd4e8dd3d64da0974d1ab0befd0c624dcab3a8dd270f", 0x2b}, {&(0x7f0000000440)="76037e6702d5361094e3d651b2d4f648a214e52fb3c742ac8767fb165ec4503fce62ebbf9bc7431c2e2747c8f9d718629115b5532a5345e43546b9828a2187592997ec79dabd897f79b06125fd3565849449acee43906b", 0x57}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe0}}, @ip_retopts={{0xc5, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x7, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@broadcast, 0x20c9}, {@multicast2, 0xfffffff8}]}, @ssrr={0x89, 0x1b, 0x22, [@multicast2, @local, @empty, @empty, @local, @rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0x53, 0x0, 0x5, [0xc0, 0x6, 0x4, 0x0, 0x8, 0xd40]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x2}, {0x2, 0x3, "c3"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x130}, 0x4010) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'batadv0\x00', 0x200}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[], 0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x1, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setresgid(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r6, &(0x7f0000000040)=""/136, 0x88) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 425.778245ms ago: executing program 6 (id=2618): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x5, 0xfffffffe) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x800000, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000e431c2c334aa787c00", @ANYRES16=r7, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b0004000000"], 0x34}}, 0x3a) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBENT(r9, 0x4b47, 0x0) close(r9) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0xfff2}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 385.564143ms ago: executing program 5 (id=2619): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaac65) r3 = syz_io_uring_setup(0x1861, &(0x7f0000000080)={0x0, 0x4118, 0x20, 0x1, 0x1ad}, &(0x7f0000000100), &(0x7f0000000180)) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x80000001, 0x0, &(0x7f0000000240)=[r1, r1, r0, r4]}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000300)={0x8001, [0x10, 0x5, 0x5], [{0x8001, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x80, 0x800, 0x1, 0x1}, {0x3d9997a, 0x7, 0x1, 0x1}, {0x8e9, 0x7, 0x1, 0x1, 0x1}, {0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0x101, 0x3, 0x1, 0x1, 0x1, 0x1}, {0xc7, 0x0, 0x0, 0x1}, {0x7ff, 0x6, 0x1, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x10001, 0x1, 0x0, 0x1}, {0x2, 0xc8, 0x0, 0x0, 0x1}], 0x4000}) 228.13295ms ago: executing program 0 (id=2620): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f000000b080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000001, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x7, &(0x7f00000003c0)) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="919f9d310cce9f6648ecb244243753b4c6", 0x11, 0xfffffffffffffffb) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x5}, 0x3, 0x2, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x9}) setresuid(0x0, 0x0, 0x0) 153.794935ms ago: executing program 4 (id=2621): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsmount(r5, 0x1, 0x83) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 1 (id=2622): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x44}) kernel console output (not intermixed with test programs): 5] lo speed is unknown, defaulting to 1000 [ 528.165262][ T5885] usb 5-1: SerialNumber: syz [ 528.171648][ T5885] usb 5-1: config 0 descriptor?? [ 528.265444][T13195] lo speed is unknown, defaulting to 1000 [ 528.324730][ T5885] usb 5-1: NFC: intf ffff88805c1dd000 id ffffffff8f0ed700 [ 528.535863][ T29] audit: type=1400 audit(2000000789.791:1049): avc: denied { bind } for pid=13207 comm="syz.1.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.545302][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.556173][ T7936] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 528.693508][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.811950][ T7936] usb 4-1: Using ep0 maxpacket: 16 [ 528.825853][ T5885] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 528.826581][ T7936] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.845557][ T7936] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 528.861558][ T7936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 528.865102][ T5882] usb 5-1: USB disconnect, device number 52 [ 528.872886][ T7936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 528.893132][ T7936] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.916982][ T7936] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 528.927257][ T7936] usb 4-1: New USB device strings: Mfr=1, Product=20, SerialNumber=16 [ 528.938567][ T7936] usb 4-1: Product: syz [ 528.944949][ T7936] usb 4-1: Manufacturer: syz [ 528.950211][ T7936] usb 4-1: SerialNumber: syz [ 529.043294][ T7936] usb 4-1: config 0 descriptor?? [ 529.050796][ T5885] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 529.078705][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.100786][ T5885] usb 2-1: config 0 descriptor?? [ 529.332416][ T7936] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 529.350382][ T5885] kaweth 2-1:0.0: Firmware present in device. [ 529.361324][ T7936] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 529.396620][ T7936] usb 4-1: USB disconnect, device number 47 [ 529.526936][ T5885] kaweth 2-1:0.0: Statistics collection: 0 [ 529.541621][ T5885] kaweth 2-1:0.0: Multicast filter limit: 0 [ 529.572163][ T5885] kaweth 2-1:0.0: MTU: 0 [ 529.576456][ T5885] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 529.613751][T13218] nbd4: detected capacity change from 0 to 8 [ 529.661591][T13222] QAT: Device 8 not found [ 529.929120][T13223] block nbd4: shutting down sockets [ 529.929902][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.002254][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.008564][T13224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.026701][ T6736] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.036755][ T6736] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.047062][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.283429][T13229] QAT: Device 8 not found [ 530.344926][ T5885] kaweth 2-1:0.0: Error setting receive filter [ 530.352029][ T5885] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 530.388987][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.531695][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.597829][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.622638][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.639875][T13233] FAULT_INJECTION: forcing a failure. [ 530.639875][T13233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.653633][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.5.1948 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 530.655048][ T5885] usb 2-1: USB disconnect, device number 58 [ 530.664042][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.664058][T13233] Call Trace: [ 530.664065][T13233] [ 530.664072][T13233] dump_stack_lvl+0x16c/0x1f0 [ 530.664101][T13233] should_fail_ex+0x497/0x5b0 [ 530.664130][T13233] _copy_to_user+0x32/0xd0 [ 530.664149][T13233] simple_read_from_buffer+0xd0/0x160 [ 530.664172][T13233] proc_fail_nth_read+0x198/0x270 [ 530.664194][T13233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.664218][T13233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.664239][T13233] vfs_read+0x1df/0xbe0 [ 530.664263][T13233] ? __fget_files+0x1fc/0x3a0 [ 530.730268][T13233] ? __pfx___mutex_lock+0x10/0x10 [ 530.735275][T13233] ? __pfx_vfs_read+0x10/0x10 [ 530.739930][T13233] ? __fget_files+0x206/0x3a0 [ 530.744586][T13233] ksys_read+0x12b/0x250 [ 530.748814][T13233] ? __pfx_ksys_read+0x10/0x10 [ 530.753555][T13233] do_syscall_64+0xcd/0x250 [ 530.758034][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.763902][T13233] RIP: 0033:0x7f433c17d25c [ 530.768302][T13233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 530.787975][T13233] RSP: 002b:00007f433cf19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.796361][T13233] RAX: ffffffffffffffda RBX: 00007f433c335fa0 RCX: 00007f433c17d25c [ 530.804307][T13233] RDX: 000000000000000f RSI: 00007f433cf190a0 RDI: 0000000000000004 [ 530.812252][T13233] RBP: 00007f433cf19090 R08: 0000000000000000 R09: 0000000000000000 [ 530.820195][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.828140][T13233] R13: 0000000000000000 R14: 00007f433c335fa0 R15: 00007ffc66bd9378 [ 530.836096][T13233] [ 530.839142][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.860950][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.869379][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.878778][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.887158][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.896466][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.904608][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.914271][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.922294][ T6250] ldm_validate_partition_table(): Disk read failed. [ 530.929418][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.938778][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.946792][ T6250] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 530.956232][ T6250] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.964326][ T6250] Dev nbd4: unable to read RDB block 0 [ 530.970054][ T6250] nbd4: unable to read partition table [ 530.976041][ T6250] nbd4: partition table beyond EOD, truncated [ 530.987627][ T6250] ldm_validate_partition_table(): Disk read failed. [ 530.994892][ T6250] Dev nbd4: unable to read RDB block 0 [ 531.000600][ T6250] nbd4: unable to read partition table [ 531.006486][ T6250] nbd4: partition table beyond EOD, truncated [ 531.375872][ T29] audit: type=1326 audit(2000000792.631:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 531.399370][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.357800][ T29] audit: type=1326 audit(2000000792.631:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 532.381800][ T29] audit: type=1326 audit(2000000792.631:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 532.406125][ T29] audit: type=1326 audit(2000000792.631:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 532.429835][ T29] audit: type=1400 audit(2000000792.951:1054): avc: denied { getattr } for pid=13244 comm="syz.5.1954" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 532.452389][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.459666][ T29] audit: type=1400 audit(2000000792.951:1055): avc: denied { mounton } for pid=13244 comm="syz.5.1954" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 532.483597][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.495765][ T29] audit: type=1326 audit(2000000793.081:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 532.519509][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.526785][ T29] audit: type=1326 audit(2000000793.081:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz.3.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95237e819 code=0x7ffc0000 [ 532.550578][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.632759][T13269] : renamed from bond0 (while UP) [ 536.716155][T13320] QAT: Device 8 not found [ 536.739329][ T29] audit: type=1400 audit(2000000798.001:1058): avc: denied { bind } for pid=13317 comm="syz.4.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.204067][T13356] syz_tun (unregistering): left promiscuous mode [ 539.792893][T13377] QAT: Device 8 not found [ 541.206038][T13390] xt_TCPMSS: Only works on TCP SYN packets [ 541.218982][T13390] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 541.245390][T13390] CIFS mount error: No usable UNC path provided in device string! [ 541.245390][T13390] [ 541.255878][T13390] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 542.043837][ T29] audit: type=1400 audit(2000000803.301:1059): avc: denied { write } for pid=13393 comm="syz.1.1993" path="socket:[39497]" dev="sockfs" ino=39497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 542.990660][T13412] Cannot find del_set index 1 as target [ 543.601666][T13414] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 543.954332][T13419] QAT: Device 8 not found [ 546.985750][T13460] siw: device registration error -23 [ 549.476705][T13481] QAT: Device 8 not found [ 549.766772][T13482] QAT: Device 8 not found [ 551.683887][T13516] siw: device registration error -23 [ 552.801590][ T5882] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 553.273848][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.305286][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 553.334386][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.365240][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.409110][ T5882] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.435502][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.457762][ T5882] usb 6-1: config 0 descriptor?? [ 553.463464][T13529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 553.725064][T13553] siw: device registration error -23 [ 554.239612][ T5882] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 554.248822][ T5882] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 554.259913][ T5882] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 555.200648][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.213563][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.403027][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.403229][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.965451][ T7931] usb 6-1: USB disconnect, device number 37 [ 556.078519][T13594] QAT: Device 8 not found [ 556.486868][ T29] audit: type=1400 audit(2000000817.731:1060): avc: denied { search } for pid=5501 comm="dhcpcd" name="netdev:wlan7" dev="debugfs" ino=40119 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 556.652043][T13602] QAT: Device 8 not found [ 556.905934][T13601] QAT: Device 8 not found [ 557.983662][T13624] siw: device registration error -23 [ 559.894745][T13643] bridge_slave_0: entered promiscuous mode [ 560.427125][ T7935] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 560.562890][T13649] QAT: Device 8 not found [ 560.752512][ T7935] usb 5-1: device descriptor read/64, error -71 [ 560.969555][ T29] audit: type=1400 audit(2000000822.241:1061): avc: denied { sys_chroot } for pid=13654 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 561.012528][ T7935] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 561.036808][ T29] audit: type=1400 audit(2000000822.241:1062): avc: denied { setgid } for pid=13654 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 561.282170][ T29] audit: type=1400 audit(2000000822.241:1063): avc: denied { setrlimit } for pid=13654 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 561.331645][ T7935] usb 5-1: device descriptor read/64, error -71 [ 561.408471][T13666] binder: BINDER_SET_CONTEXT_MGR already set [ 561.415294][T13666] binder: 13665:13666 ioctl 4018620d 20000040 returned -16 [ 561.430801][T13669] binder: BINDER_SET_CONTEXT_MGR already set [ 561.437338][T13669] binder: 13668:13669 ioctl 4018620d 20000040 returned -16 [ 561.459241][T13669] FAULT_INJECTION: forcing a failure. [ 561.459241][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 561.471590][ T7935] usb usb5-port1: attempt power cycle [ 561.490529][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 561.525370][T13669] CPU: 0 UID: 0 PID: 13669 Comm: syz.0.2060 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 561.525397][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 561.525407][T13669] Call Trace: [ 561.525414][T13669] [ 561.525422][T13669] dump_stack_lvl+0x16c/0x1f0 [ 561.525450][T13669] should_fail_ex+0x497/0x5b0 [ 561.525475][T13669] ? fs_reclaim_acquire+0xae/0x150 [ 561.525501][T13669] should_failslab+0xc2/0x120 [ 561.525521][T13669] __kmalloc_noprof+0xcb/0x400 [ 561.525538][T13669] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 561.525562][T13669] tomoyo_realpath_from_path+0xb9/0x720 [ 561.525585][T13669] ? tomoyo_path_number_perm+0x235/0x590 [ 561.525606][T13669] ? tomoyo_path_number_perm+0x235/0x590 [ 561.525627][T13669] tomoyo_path_number_perm+0x248/0x590 [ 561.525646][T13669] ? tomoyo_path_number_perm+0x235/0x590 [ 561.525668][T13669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.525710][T13669] ? __pfx_lock_release+0x10/0x10 [ 561.525728][T13669] ? trace_lock_acquire+0x146/0x1e0 [ 561.525755][T13669] ? lock_acquire+0x2f/0xb0 [ 561.525773][T13669] ? __fget_files+0x40/0x3a0 [ 561.525801][T13669] ? __fget_files+0x206/0x3a0 [ 561.525830][T13669] security_file_ioctl+0x9b/0x240 [ 561.525855][T13669] __x64_sys_ioctl+0xb7/0x200 [ 561.525879][T13669] do_syscall_64+0xcd/0x250 [ 561.525903][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.525926][T13669] RIP: 0033:0x7f870577e819 [ 561.525942][T13669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.525960][T13669] RSP: 002b:00007f87035f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.525981][T13669] RAX: ffffffffffffffda RBX: 00007f8705935fa0 RCX: 00007f870577e819 [ 561.525995][T13669] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 561.526006][T13669] RBP: 00007f87035f6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.526017][T13669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.526028][T13669] R13: 0000000000000000 R14: 00007f8705935fa0 R15: 00007ffc253e6918 [ 561.526055][T13669] [ 561.526062][T13669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.762915][T13685] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 561.842193][ T7936] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 561.872007][ T7935] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 561.899144][ T7935] usb 5-1: device descriptor read/8, error -71 [ 561.970567][T13690] QAT: Device 8 not found [ 562.005481][ T7936] usb 6-1: Using ep0 maxpacket: 32 [ 562.011903][ T7936] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 562.011993][ T7936] usb 6-1: config 0 has no interface number 0 [ 562.012144][ T7936] usb 6-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.012233][ T7936] usb 6-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 562.012303][ T7936] usb 6-1: config 0 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 129, changing to 11 [ 562.012371][ T7936] usb 6-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 10062, setting to 1024 [ 562.012461][ T7936] usb 6-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.021187][ T7936] usb 6-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 562.021281][ T7936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.021345][ T7936] usb 6-1: Product: syz [ 562.021403][ T7936] usb 6-1: Manufacturer: syz [ 562.021462][ T7936] usb 6-1: SerialNumber: syz [ 562.044050][ T7936] usb 6-1: config 0 descriptor?? [ 562.048156][T13667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 562.069343][ T7936] option 6-1:0.188: GSM modem (1-port) converter detected [ 562.131905][ T7935] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 562.172562][ T7935] usb 5-1: device descriptor read/8, error -71 [ 562.252384][ T7936] usb 6-1: USB disconnect, device number 38 [ 562.253302][ T7936] option 6-1:0.188: device disconnected [ 562.292672][ T7935] usb usb5-port1: unable to enumerate USB device [ 562.606588][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.913332][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 564.743216][T13716] batman_adv: batadv1: Adding interface: netdevsim0 [ 564.749831][T13716] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.775734][T13716] batman_adv: batadv1: Interface activated: netdevsim0 [ 564.981734][ T5862] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 565.191568][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 565.198736][ T5862] usb 6-1: too many configurations: 235, using maximum allowed: 8 [ 565.551864][T13744] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2073'. [ 565.986665][T12929] wlan1: Trigger new scan to find an IBSS to join [ 566.073977][ T5862] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 566.081631][ T5862] usb 6-1: can't read configurations, error -61 [ 566.628362][ T5862] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 566.752368][T13755] QAT: Device 8 not found [ 567.891680][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 567.897462][ T5862] usb 6-1: too many configurations: 235, using maximum allowed: 8 [ 567.911107][ T5862] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 567.918719][ T5862] usb 6-1: can't read configurations, error -61 [ 567.925419][ T5862] usb usb6-port1: attempt power cycle [ 568.743457][ T6287] wlan1: Creating new IBSS network, BSSID f2:9a:a3:63:bf:0c [ 569.388555][T13783] lo speed is unknown, defaulting to 1000 [ 569.490493][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 569.794177][T13783] lo speed is unknown, defaulting to 1000 [ 570.560878][T13814] QAT: Device 8 not found [ 571.142262][ T7935] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 571.338132][T13839] QAT: Device 8 not found [ 571.581600][ T7935] usb 4-1: Using ep0 maxpacket: 8 [ 571.588152][ T7935] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.600385][ T7935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.624385][ T7935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.655558][ T7935] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.669332][ T7935] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.680298][ T7935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.738046][T13844] FAULT_INJECTION: forcing a failure. [ 571.738046][T13844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.758407][T13844] CPU: 1 UID: 0 PID: 13844 Comm: syz.4.2098 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 571.768853][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 571.778888][T13844] Call Trace: [ 571.782159][T13844] [ 571.785068][T13844] dump_stack_lvl+0x16c/0x1f0 [ 571.789727][T13844] should_fail_ex+0x497/0x5b0 [ 571.794385][T13844] _copy_to_user+0x32/0xd0 [ 571.798789][T13844] simple_read_from_buffer+0xd0/0x160 [ 571.804139][T13844] proc_fail_nth_read+0x198/0x270 [ 571.809141][T13844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.814664][T13844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.820184][T13844] vfs_read+0x1df/0xbe0 [ 571.824317][T13844] ? __fget_files+0x1fc/0x3a0 [ 571.828971][T13844] ? __pfx___mutex_lock+0x10/0x10 [ 571.833971][T13844] ? __pfx_vfs_read+0x10/0x10 [ 571.838623][T13844] ? __fget_files+0x206/0x3a0 [ 571.843281][T13844] ksys_read+0x12b/0x250 [ 571.847513][T13844] ? __pfx_ksys_read+0x10/0x10 [ 571.852256][T13844] do_syscall_64+0xcd/0x250 [ 571.856735][T13844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.862601][T13844] RIP: 0033:0x7ff661f7d25c [ 571.866991][T13844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 571.886583][T13844] RSP: 002b:00007ff662d79030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.894981][T13844] RAX: ffffffffffffffda RBX: 00007ff662135fa0 RCX: 00007ff661f7d25c [ 571.902925][T13844] RDX: 000000000000000f RSI: 00007ff662d790a0 RDI: 0000000000000004 [ 571.910878][T13844] RBP: 00007ff662d79090 R08: 0000000000000000 R09: 0000000000000000 [ 571.918834][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.926960][T13844] R13: 0000000000000000 R14: 00007ff662135fa0 R15: 00007ffd325a42c8 [ 571.934912][T13844] [ 572.022890][ T7935] usb 4-1: GET_CAPABILITIES returned 0 [ 572.036124][ T7935] usbtmc 4-1:16.0: can't read capabilities [ 572.213600][ T5862] usb 4-1: USB disconnect, device number 48 [ 572.374711][T13858] fuse: Bad value for 'user_id' [ 572.379631][T13858] fuse: Bad value for 'user_id' [ 572.654767][T13860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2099'. [ 572.668287][T13860] binder: BINDER_SET_CONTEXT_MGR already set [ 572.674354][T13860] binder: 13851:13860 ioctl 4018620d 200001c0 returned -16 [ 575.289401][T13875] kAFS: No cell specified [ 575.974365][T13872] QAT: Device 8 not found [ 576.332167][ T5862] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 576.400561][T13881] block device autoloading is deprecated and will be removed. [ 576.412672][T13881] syz.4.2104: attempt to access beyond end of device [ 576.412672][T13881] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 576.511781][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 576.520686][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.549787][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.787072][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.828411][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 576.939324][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.001683][ T5862] usb 4-1: string descriptor 0 read error: -71 [ 577.008244][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.017499][ T5862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.077040][ T5862] usb 4-1: config 0 descriptor?? [ 577.081391][T13904] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 577.087275][ T5862] usb 4-1: can't set config #0, error -71 [ 577.130309][ T5862] usb 4-1: USB disconnect, device number 49 [ 577.131025][T13909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.233603][T13915] QAT: failed to copy from user cfg_data. [ 577.752681][T13904] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 577.766745][T13904] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 577.770076][T13909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.851591][ T7931] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 578.022433][ T7931] usb 6-1: Using ep0 maxpacket: 32 [ 578.034487][ T7931] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 578.045630][ T7931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.055734][ T7931] usb 6-1: Product: syz [ 578.059905][ T7931] usb 6-1: Manufacturer: syz [ 578.064377][T13922] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2115'. [ 578.071516][ T7931] usb 6-1: SerialNumber: syz [ 578.090539][ T7931] usb 6-1: config 0 descriptor?? [ 578.093112][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 578.726675][ T7935] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 578.972754][ T7935] usb 4-1: config 0 has no interfaces? [ 579.012809][ T7935] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 579.066325][T13947] @: renamed from vlan0 (while UP) [ 579.082814][ T7935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.090950][ T7935] usb 4-1: SerialNumber: syz [ 579.105697][ T7931] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:72:36:ee:a4:a2 [ 579.154458][ T7935] usb 4-1: config 0 descriptor?? [ 579.174588][ T7931] rtl8150 6-1:0.0: eth1: rtl8150 is detected [ 579.212782][ T7931] usb 6-1: USB disconnect, device number 42 [ 579.389826][T13934] netlink: 'syz.3.2112': attribute type 11 has an invalid length. [ 579.423851][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2112'. [ 579.463298][T13963] Device name cannot be null; rc = [-22] [ 579.476480][T13934] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2112'. [ 579.496259][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2123'. [ 579.600611][ T5862] usb 4-1: USB disconnect, device number 50 [ 581.086069][T14004] 9pnet: Unknown protocol version 9p200 [ 581.621904][T14007] QAT: Device 8 not found [ 582.031451][T14010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2133'. [ 582.523933][T14026] siw: device registration error -23 [ 583.601581][ T5885] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 583.764736][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.812271][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00a8, bcdDevice=b9.47 [ 583.872189][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.878212][T14033] gretap0: entered promiscuous mode [ 583.894372][T14033] macsec1: entered promiscuous mode [ 583.899731][T14033] macsec1: entered allmulticast mode [ 583.910721][ T5885] usb 4-1: Product: syz [ 583.951623][T14033] gretap0: entered allmulticast mode [ 584.003248][T14033] gretap0: left allmulticast mode [ 584.020368][T14033] gretap0: left promiscuous mode [ 584.102507][T14038] loop8: detected capacity change from 0 to 7 [ 584.159666][T14038] Dev loop8: unable to read RDB block 7 [ 584.187369][T14038] loop8: AHDI p1 p3 p4 [ 584.256519][ T5885] usb 4-1: Manufacturer: syz [ 584.261157][ T5885] usb 4-1: SerialNumber: syz [ 584.277574][T14038] loop8: partition table partially beyond EOD, truncated [ 584.281296][ T5885] usb 4-1: config 0 descriptor?? [ 584.311725][ T5885] dvb-usb: found a 'Terratec Cinergy S2 USB HD' in warm state. [ 584.329550][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 584.339667][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 584.356196][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 584.378405][ T5885] dvb-usb: Terratec Cinergy S2 USB HD error while loading driver (-19) [ 584.388681][T14038] loop8: p1 start 975770946 is beyond EOD, truncated [ 584.395758][T14038] loop8: p3 start 6514546 is beyond EOD, truncated [ 585.422229][ T7935] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 585.601069][ T7931] usb 4-1: USB disconnect, device number 51 [ 585.682286][ T7935] usb 1-1: Using ep0 maxpacket: 16 [ 585.700454][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 585.885684][ T7935] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 585.994974][ T7935] usb 1-1: config 0 has no interface number 0 [ 586.027000][ T7935] usb 1-1: New USB device found, idVendor=6213, idProduct=9015, bcdDevice=f0.02 [ 586.036129][ T7935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.045142][ T7935] usb 1-1: Product: syz [ 586.049328][ T7935] usb 1-1: Manufacturer: syz [ 586.053987][ T7935] usb 1-1: SerialNumber: syz [ 586.580833][ T7935] usb 1-1: config 0 descriptor?? [ 586.628017][ T7935] usb 1-1: bad CDC descriptors [ 586.774984][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 586.815944][T14081] ALSA: mixer_oss: invalid index 100000 [ 586.849575][T14088] tmpfs: Unknown parameter 'indo64' [ 586.894073][ T7931] usb 1-1: USB disconnect, device number 44 [ 587.242516][ T7935] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 587.584587][T14092] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2154'. [ 587.655177][ T7935] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 587.672146][ T7935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.701530][ T7935] usb 5-1: Product: syz [ 587.705733][ T7935] usb 5-1: Manufacturer: syz [ 587.710318][ T7935] usb 5-1: SerialNumber: syz [ 588.031058][ T7935] usb 5-1: config 0 descriptor?? [ 588.137215][ T29] audit: type=1800 audit(2000000849.411:1064): pid=14106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2156" name="/" dev="fuse" ino=1 res=0 errno=0 [ 588.263118][ T7935] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 588.338884][ T7935] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 588.390050][ T7935] usb-storage 5-1:0.0: USB Mass Storage device detected [ 588.426638][ T7935] usb-storage 5-1:0.0: device ignored [ 589.000019][ T7935] usb 5-1: USB disconnect, device number 57 [ 589.452446][ T29] audit: type=1400 audit(2000000850.511:1065): avc: denied { bind } for pid=14117 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.554781][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2159'. [ 590.327356][T14141] loop8: detected capacity change from 0 to 7 [ 590.364231][T14141] Dev loop8: unable to read RDB block 7 [ 590.372604][T14141] loop8: AHDI p1 p3 p4 [ 590.383660][T14141] loop8: partition table partially beyond EOD, truncated [ 590.399668][T14141] loop8: p1 start 975770946 is beyond EOD, truncated [ 590.406608][T14141] loop8: p3 start 6514546 is beyond EOD, truncated [ 590.505046][ T29] audit: type=1400 audit(2000000851.771:1066): avc: denied { append } for pid=14147 comm="syz.5.2165" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 590.545708][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2165'. [ 590.578792][ T29] audit: type=1400 audit(2000000851.811:1067): avc: denied { map } for pid=14147 comm="syz.5.2165" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 590.629231][T14150] FAULT_INJECTION: forcing a failure. [ 590.629231][T14150] name failslab, interval 1, probability 0, space 0, times 0 [ 590.645848][T14156] FAULT_INJECTION: forcing a failure. [ 590.645848][T14156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.670747][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.1.2166 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 590.681202][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.691272][T14150] Call Trace: [ 590.694551][T14150] [ 590.697488][T14150] dump_stack_lvl+0x16c/0x1f0 [ 590.702172][T14150] should_fail_ex+0x497/0x5b0 [ 590.706888][T14150] ? fs_reclaim_acquire+0xae/0x150 [ 590.712001][T14150] should_failslab+0xc2/0x120 [ 590.716673][T14150] __kmalloc_node_noprof+0xd1/0x430 [ 590.721862][T14150] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 590.727315][T14150] __kvmalloc_node_noprof+0xad/0x1a0 [ 590.732596][T14150] ? __pfx_macvtap_setup+0x10/0x10 [ 590.737717][T14150] alloc_netdev_mqs+0xbbc/0x1510 [ 590.742680][T14150] rtnl_create_link+0xc10/0xfa0 [ 590.747553][T14150] rtnl_newlink+0xa93/0x1c50 [ 590.752162][T14150] ? __pfx_rtnl_newlink+0x10/0x10 [ 590.757212][T14150] ? __pfx___lock_acquire+0x10/0x10 [ 590.762417][T14150] ? cred_has_capability.isra.0+0x192/0x2f0 [ 590.768323][T14150] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 590.774583][T14150] ? find_held_lock+0x2d/0x110 [ 590.779359][T14150] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 590.784509][T14150] ? __pfx_lock_release+0x10/0x10 [ 590.789538][T14150] ? trace_lock_acquire+0x146/0x1e0 [ 590.794731][T14150] ? __pfx_rtnl_newlink+0x10/0x10 [ 590.799748][T14150] rtnetlink_rcv_msg+0x95b/0xea0 [ 590.804678][T14150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.810136][T14150] netlink_rcv_skb+0x16b/0x440 [ 590.814889][T14150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.820338][T14150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.825645][T14150] ? netlink_deliver_tap+0x1ae/0xd30 [ 590.830920][T14150] netlink_unicast+0x53c/0x7f0 [ 590.835676][T14150] ? __pfx_netlink_unicast+0x10/0x10 [ 590.840955][T14150] netlink_sendmsg+0x8b8/0xd70 [ 590.845716][T14150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.850996][T14150] ____sys_sendmsg+0xaaf/0xc90 [ 590.855922][T14150] ? copy_msghdr_from_user+0x10b/0x160 [ 590.861363][T14150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.866648][T14150] ___sys_sendmsg+0x135/0x1e0 [ 590.871321][T14150] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.876513][T14150] ? __pfx_lock_release+0x10/0x10 [ 590.881523][T14150] ? trace_lock_acquire+0x146/0x1e0 [ 590.886716][T14150] ? __fget_files+0x206/0x3a0 [ 590.891388][T14150] __sys_sendmsg+0x16e/0x220 [ 590.895963][T14150] ? __pfx___sys_sendmsg+0x10/0x10 [ 590.901070][T14150] do_syscall_64+0xcd/0x250 [ 590.905562][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.911469][T14150] RIP: 0033:0x7f37e357e819 [ 590.915872][T14150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.935465][T14150] RSP: 002b:00007f37e42df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.943865][T14150] RAX: ffffffffffffffda RBX: 00007f37e3735fa0 RCX: 00007f37e357e819 [ 590.951819][T14150] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 590.959774][T14150] RBP: 00007f37e42df090 R08: 0000000000000000 R09: 0000000000000000 [ 590.967727][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.975682][T14150] R13: 0000000000000000 R14: 00007f37e3735fa0 R15: 00007fff0594a8d8 [ 590.983652][T14150] [ 591.130966][T14156] CPU: 0 UID: 0 PID: 14156 Comm: syz.4.2168 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 591.141421][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 591.151485][T14156] Call Trace: [ 591.154764][T14156] [ 591.157694][T14156] dump_stack_lvl+0x16c/0x1f0 [ 591.162387][T14156] should_fail_ex+0x497/0x5b0 [ 591.167049][T14156] _copy_from_user+0x2e/0xd0 [ 591.171626][T14156] sctp_setsockopt+0x204a/0xb810 [ 591.176577][T14156] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 591.183357][T14156] ? __pfx_sctp_setsockopt+0x10/0x10 [ 591.188661][T14156] ? selinux_socket_setsockopt+0x6a/0x80 [ 591.194309][T14156] ? sock_common_setsockopt+0x2e/0xf0 [ 591.199695][T14156] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 591.205605][T14156] do_sock_setsockopt+0x222/0x480 [ 591.210817][T14156] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 591.216372][T14156] ? lock_acquire+0x2f/0xb0 [ 591.220886][T14156] __sys_setsockopt+0x1a0/0x230 [ 591.225757][T14156] __x64_sys_setsockopt+0xbd/0x160 [ 591.230871][T14156] ? do_syscall_64+0x91/0x250 [ 591.235576][T14156] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.240782][T14156] do_syscall_64+0xcd/0x250 [ 591.245291][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.251179][T14156] RIP: 0033:0x7ff661f7e819 [ 591.255584][T14156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.275192][T14156] RSP: 002b:00007ff662d79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.283599][T14156] RAX: ffffffffffffffda RBX: 00007ff662135fa0 RCX: 00007ff661f7e819 [ 591.291554][T14156] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000005 [ 591.299507][T14156] RBP: 00007ff662d79090 R08: 0000000000000008 R09: 0000000000000000 [ 591.307464][T14156] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 591.315432][T14156] R13: 0000000000000000 R14: 00007ff662135fa0 R15: 00007ffd325a42c8 [ 591.323394][T14156] [ 591.326468][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.398238][ T7932] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 591.960111][T14172] netlink: 'syz.1.2172': attribute type 10 has an invalid length. [ 592.971539][ T7932] usb 6-1: Using ep0 maxpacket: 16 [ 592.980088][ T7932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.991880][ T7932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.007858][ T7932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.021547][ T7932] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 593.023611][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 593.032898][ T7932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.062706][ T7932] usb 6-1: config 0 descriptor?? [ 593.191605][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 593.264070][T14195] QAT: Device 8 not found [ 594.364582][ T7932] usbhid 6-1:0.0: can't add hid device: -71 [ 594.370703][ T7932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 594.389721][ T7932] usb 6-1: USB disconnect, device number 43 [ 594.409308][ T5885] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 594.429676][ T5885] usb 2-1: can't read configurations, error -71 [ 594.980817][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.084902][ T5885] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 595.159726][T14220] QAT: Device 8 not found [ 595.219007][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.295735][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.312209][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 595.332880][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.351541][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 595.371525][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.412415][ T5885] usb 2-1: config 0 descriptor?? [ 595.425015][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 595.737848][T14210] input: syz1 as /devices/virtual/input/input57 [ 596.093885][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.864412][T11846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.874809][T11846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.884374][T11846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.893940][T11846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.907239][T11846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.916088][T11846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.947776][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 596.956965][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 596.998765][ T79] bridge_slave_1: left allmulticast mode [ 597.005352][ T79] bridge_slave_1: left promiscuous mode [ 597.014710][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.142338][ T79] bridge_slave_0: left allmulticast mode [ 597.154070][ T79] bridge_slave_0: left promiscuous mode [ 597.159759][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.186004][T14244] FAULT_INJECTION: forcing a failure. [ 597.186004][T14244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.201432][T14244] CPU: 0 UID: 0 PID: 14244 Comm: syz.0.2191 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 597.211955][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 597.222028][T14244] Call Trace: [ 597.225328][T14244] [ 597.228253][T14244] dump_stack_lvl+0x16c/0x1f0 [ 597.232915][T14244] should_fail_ex+0x497/0x5b0 [ 597.237573][T14244] ? fs_reclaim_acquire+0xae/0x150 [ 597.242665][T14244] should_fail_alloc_page+0xe7/0x130 [ 597.247939][T14244] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 597.254107][T14244] __alloc_pages_noprof+0x190/0x25a0 [ 597.259409][T14244] ? find_held_lock+0x2d/0x110 [ 597.264161][T14244] ? __up_read+0x1fb/0x760 [ 597.268554][T14244] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 597.274262][T14244] ? __pfx___might_resched+0x10/0x10 [ 597.279535][T14244] __folio_alloc_noprof+0x11/0x90 [ 597.284536][T14244] alloc_migration_target+0x2a7/0x6d0 [ 597.289888][T14244] migrate_pages_batch+0x3bb/0x31b0 [ 597.295074][T14244] ? __pfx_alloc_migration_target+0x10/0x10 [ 597.300950][T14244] ? __pfx_migrate_pages_batch+0x10/0x10 [ 597.306576][T14244] migrate_pages_sync+0x131/0x910 [ 597.311598][T14244] ? __pfx_alloc_migration_target+0x10/0x10 [ 597.317478][T14244] ? __walk_page_range+0x59b/0x770 [ 597.322578][T14244] ? vma_migratable+0x11d/0x4f0 [ 597.327429][T14244] ? __pfx_migrate_pages_sync+0x10/0x10 [ 597.332962][T14244] ? queue_pages_test_walk+0x279/0x410 [ 597.338408][T14244] ? __pfx_find_vma+0x10/0x10 [ 597.343079][T14244] ? walk_page_test+0x9b/0x180 [ 597.347831][T14244] migrate_pages+0x1a57/0x2200 [ 597.352584][T14244] ? __pfx_alloc_migration_target+0x10/0x10 [ 597.358484][T14244] ? __pfx_migrate_pages+0x10/0x10 [ 597.363586][T14244] ? __pfx___up_read+0x10/0x10 [ 597.368400][T14244] do_migrate_pages+0x474/0x6f0 [ 597.373240][T14244] ? __pfx_do_migrate_pages+0x10/0x10 [ 597.378610][T14244] ? do_raw_spin_lock+0x12d/0x2c0 [ 597.383622][T14244] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.388980][T14244] ? cap_capable+0x1cf/0x240 [ 597.393574][T14244] ? security_capable+0x250/0x260 [ 597.398603][T14244] kernel_migrate_pages+0x5b2/0x750 [ 597.403800][T14244] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 597.409530][T14244] ? ksys_write+0x1ba/0x250 [ 597.414023][T14244] ? __pfx_ksys_write+0x10/0x10 [ 597.418880][T14244] __x64_sys_migrate_pages+0x96/0x100 [ 597.424240][T14244] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.429427][T14244] do_syscall_64+0xcd/0x250 [ 597.433937][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.439823][T14244] RIP: 0033:0x7f870577e819 [ 597.444230][T14244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.463826][T14244] RSP: 002b:00007f87035f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 597.472225][T14244] RAX: ffffffffffffffda RBX: 00007f8705935fa0 RCX: 00007f870577e819 [ 597.480179][T14244] RDX: 00000000200002c0 RSI: 0000000000000003 RDI: 0000000000000000 [ 597.488133][T14244] RBP: 00007f87035f6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.496088][T14244] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000002 [ 597.504058][T14244] R13: 0000000000000000 R14: 00007f8705935fa0 R15: 00007ffc253e6918 [ 597.512119][T14244] [ 597.515268][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.015106][ T5192] bcm5974 2-1:0.0: could not read from device [ 598.047532][ T5885] usb 2-1: USB disconnect, device number 60 [ 598.071207][ T6250] bcm5974 2-1:0.0: could not read from device [ 598.102214][ T5192] bcm5974 2-1:0.0: could not read from device [ 598.770906][T12451] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.063876][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.078212][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.081697][T11846] Bluetooth: hci4: command tx timeout [ 599.100928][ T79] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 599.111239][ T79] bond0 (unregistering): Released all slaves [ 599.128682][ T79] bond1 (unregistering): Released all slaves [ 599.281216][T14234] lo speed is unknown, defaulting to 1000 [ 599.288299][T14234] lo speed is unknown, defaulting to 1000 [ 599.297551][T14268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 600.561685][ T5862] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 600.629792][T14293] netlink: 'syz.1.2200': attribute type 3 has an invalid length. [ 600.637803][T14293] netlink: 'syz.1.2200': attribute type 3 has an invalid length. [ 600.647362][T14293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'. [ 600.741772][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 600.766537][ T5862] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 600.980141][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.051659][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.076165][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.111900][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.121584][ T5885] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 601.124104][T14234] chnl_net:caif_netlink_parms(): no params data found [ 601.140158][ T5862] usb 5-1: Product: syz [ 601.151157][ T5862] usb 5-1: Manufacturer: syz [ 601.161618][T11846] Bluetooth: hci4: command tx timeout [ 601.174647][ T5862] usb 5-1: SerialNumber: syz [ 601.289843][ T5885] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 601.310655][ T5885] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 601.342733][ T79] hsr_slave_0: left promiscuous mode [ 601.348635][ T79] hsr_slave_1: left promiscuous mode [ 601.354116][ T5885] usb 2-1: config 201 has no interface number 0 [ 601.354149][ T5885] usb 2-1: config 201 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 601.354170][ T5885] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 601.354197][ T5885] usb 2-1: config 201 interface 249 has no altsetting 0 [ 601.356189][ T5885] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 601.404371][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.486247][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.511081][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.724802][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.751341][ T79] veth1_macvtap: left promiscuous mode [ 601.757226][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.757586][ T79] veth0_macvtap: left promiscuous mode [ 601.770015][ T5885] usb 2-1: Product: syz [ 601.771355][ T79] veth1_vlan: left promiscuous mode [ 601.780760][ T5885] usb 2-1: Manufacturer: syz [ 601.780952][ T79] veth0_vlan: left promiscuous mode [ 601.789622][ T5885] usb 2-1: SerialNumber: syz [ 601.869531][ T5862] usb 5-1: 0:2 : does not exist [ 602.917182][ T5862] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 603.031751][ T5862] usb 5-1: USB disconnect, device number 58 [ 603.142145][ T79] team0 (unregistering): Port device team_slave_1 removed [ 603.196409][ T79] team0 (unregistering): Port device team_slave_0 removed [ 603.250241][T11846] Bluetooth: hci4: command tx timeout [ 603.495842][ T5885] ath6kl: Failed to submit usb control message: -71 [ 603.520438][ T5885] ath6kl: unable to send the bmi data to the device: -71 [ 603.556481][ T5885] ath6kl: Unable to send get target info: -71 [ 603.577353][ T5885] ath6kl: Failed to init ath6kl core: -71 [ 603.588879][ T5885] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 603.611829][ T5885] usb 2-1: USB disconnect, device number 61 [ 603.867371][ T29] audit: type=1400 audit(2000000866.150:1068): avc: denied { accept } for pid=14322 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 603.947145][T14336] vivid-003: disconnect [ 603.951901][T14336] vivid-003: reconnect [ 604.150478][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.187671][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.209073][T14234] bridge_slave_0: entered allmulticast mode [ 604.240088][T14234] bridge_slave_0: entered promiscuous mode [ 604.268700][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.281021][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.322039][T14234] bridge_slave_1: entered allmulticast mode [ 604.328871][T14234] bridge_slave_1: entered promiscuous mode [ 604.516142][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.575742][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.764546][T14234] team0: Port device team_slave_0 added [ 604.826274][T14234] team0: Port device team_slave_1 added [ 605.407232][T11846] Bluetooth: hci4: command tx timeout [ 605.420361][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.428085][ T5862] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 605.511619][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.546896][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.894593][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.011491][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.092703][ T5862] usb 2-1: config index 0 descriptor too short (expected 1792, got 441) [ 606.101085][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.111376][ T5862] usb 2-1: config 0 has no interfaces? [ 606.116909][ T5862] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 606.126282][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.154568][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.215385][ T5862] usb 2-1: config 0 descriptor?? [ 606.253290][ T29] audit: type=1400 audit(2000000868.530:1069): avc: denied { setopt } for pid=14378 comm="syz.0.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 606.254278][T14379] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2214'. [ 606.291544][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2214'. [ 606.442298][T14367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.451378][T14367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.475646][T14234] hsr_slave_0: entered promiscuous mode [ 606.495838][T14234] hsr_slave_1: entered promiscuous mode [ 606.507308][T14234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.516202][T14367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.525866][T14367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.534528][T14234] Cannot create hsr debugfs directory [ 606.548332][ T7932] usb 2-1: USB disconnect, device number 62 [ 607.169362][ T29] audit: type=1400 audit(2000000869.350:1070): avc: denied { execute } for pid=14401 comm="syz.4.2220" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 607.531661][ T5882] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 607.693450][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 607.726205][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 607.748754][T14234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.813589][ T5882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.849125][ T5882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 607.871399][T14234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 607.880218][ T5882] usb 2-1: string descriptor 0 read error: -71 [ 607.984958][ T5882] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 607.994457][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.007767][ T5882] usb 2-1: can't set config #1, error -71 [ 608.023772][T14234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 608.030592][ T5882] usb 2-1: USB disconnect, device number 63 [ 608.045061][T14234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 608.122311][T14426] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2224'. [ 608.795789][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.807076][T14234] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.826185][T14234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.836927][T14234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.318784][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.325918][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.388535][ T29] audit: type=1400 audit(2000000871.530:1071): avc: denied { write } for pid=14424 comm="syz.5.2223" name="task" dev="proc" ino=42661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 609.465899][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.473037][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.480573][ T29] audit: type=1400 audit(2000000871.530:1072): avc: denied { add_name } for pid=14424 comm="syz.5.2223" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 609.518761][ T29] audit: type=1400 audit(2000000871.530:1073): avc: denied { create } for pid=14424 comm="syz.5.2223" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 609.541785][T14431] netlink: 'syz.5.2223': attribute type 4 has an invalid length. [ 609.549553][T14431] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2223'. [ 609.566988][ T29] audit: type=1400 audit(2000000871.530:1074): avc: denied { associate } for pid=14424 comm="syz.5.2223" name="blkio.bfq.io_serviced_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 609.646983][T14443] QAT: Device 8 not found [ 609.984377][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.259529][ T7932] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 610.561796][ T7932] usb 6-1: device descriptor read/64, error -71 [ 610.883125][T14234] veth0_vlan: entered promiscuous mode [ 610.899382][T14234] veth1_vlan: entered promiscuous mode [ 610.911847][ T7936] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 610.919576][ T7932] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 610.950515][T14234] veth0_macvtap: entered promiscuous mode [ 610.990600][T14234] veth1_macvtap: entered promiscuous mode [ 611.034581][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.095077][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.101611][ T7932] usb 6-1: device descriptor read/64, error -71 [ 611.105157][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.122230][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.132392][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.151659][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.157772][ T7936] usb 2-1: Using ep0 maxpacket: 8 [ 611.162156][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.177421][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.178442][ T7936] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 611.188289][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.218796][ T7936] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 611.230813][ T7936] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.231668][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.248240][ T7936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.258603][ T7932] usb usb6-port1: attempt power cycle [ 611.271881][ T7936] usb 2-1: Product: 젋逺湰î期ç½í¦å»œç²¥Þ™ì¶˜ç›µåš¹ê¨³âƒæ¤ë‡‘î½è•èŽ£ã¼ï¢¡ê¦¥ê³¼ë¯—涣պዩ摴᳄鰈ﯥ碻븜촫뚭ç‹ã²Ÿà¥ªßˆê³¶àªã®›å’¹ê¼ˆï€æ‰¤å†ç‡•á±ˆë–‘ë¦çŸáŒ±è‚´è½„ᇞ췋í®ê¯½ì°‡î½‚姭೬ꢽừ䴧误䫬싪ࡖ촊ֶ藀劑毆熷羞㹳䇿悘烰줙Ύᛔ⣽ݩ禰猘欳㿻â¢ï¦å—’；㉉鰈詴똵硱♑཮⌰꼘烺堕Î榛 [ 611.338366][T14234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.364682][ T7936] usb 2-1: Manufacturer: ෆ飜 [ 611.369665][ T7936] usb 2-1: SerialNumber: ဌ [ 611.414647][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.425545][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.435725][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.446207][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.456813][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.467370][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.477544][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.488151][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.499251][T14234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.509077][T14234] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.518135][T14234] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.552239][T14234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.560947][T14234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.097232][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2234'. [ 612.381661][ T7190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.395071][ T7190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.400032][T12929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.410298][T12929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.639579][ T7936] cdc_ncm 2-1:1.0: bind() failure [ 612.647850][ T7936] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 612.667790][ T7936] cdc_ncm 2-1:1.1: bind() failure [ 612.771614][ T5882] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 613.005596][ T7936] usb 2-1: USB disconnect, device number 64 [ 613.011678][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 613.015404][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.038335][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.168039][ T5882] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 613.191170][ T5882] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 613.214453][ T5882] usb 5-1: Product: syz [ 613.221838][ T5882] usb 5-1: Manufacturer: syz [ 613.239963][ T5882] usb 5-1: config 0 descriptor?? [ 613.776871][ T5882] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 613.849875][T14531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 613.856425][T14531] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 613.886225][T14531] vhci_hcd vhci_hcd.0: Device attached [ 613.934336][T14531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.048795][ T29] audit: type=1400 audit(2000000876.320:1075): avc: denied { connect } for pid=14499 comm="syz.4.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 614.068981][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.077727][T14541] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.099159][ T966] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 614.142986][T14547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.231819][ T7932] vhci_hcd: vhci_device speed not set [ 614.236424][T14541] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.291828][ T7932] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 614.308289][T14547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.316892][ T966] usb 6-1: Using ep0 maxpacket: 32 [ 614.335844][T14531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.353201][T14531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.397408][ T5882] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 614.405639][ T5882] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 614.412825][ T966] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 614.420946][ T966] usb 6-1: config 0 has no interface number 0 [ 614.427138][ T966] usb 6-1: config 0 interface 12 has no altsetting 0 [ 614.465588][ T5882] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -71 [ 614.496642][ T5882] usb 5-1: USB disconnect, device number 59 [ 614.502719][T14531] vhci_hcd vhci_hcd.0: port 0 already used [ 614.506032][ T966] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 614.518306][ T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.526375][ T966] usb 6-1: Product: syz [ 614.530549][ T966] usb 6-1: Manufacturer: syz [ 614.535215][ T966] usb 6-1: SerialNumber: syz [ 614.545551][ T966] usb 6-1: config 0 descriptor?? [ 614.763159][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.782125][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.141589][T14534] vhci_hcd: connection reset by peer [ 615.157697][ T6223] vhci_hcd: stop threads [ 615.162566][ T6223] vhci_hcd: release socket [ 615.167034][ T6223] vhci_hcd: disconnect device [ 615.254852][ T966] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 615.262853][ T966] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 615.270193][ T966] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 615.311890][ T966] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 615.360755][ T966] usb 6-1: USB disconnect, device number 47 [ 615.731320][T14592] netlink: 'syz.0.2252': attribute type 1 has an invalid length. [ 615.739199][T14592] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.2252'. [ 616.561644][ T29] audit: type=1400 audit(2000000878.830:1076): avc: denied { execute } for pid=14603 comm="syz.6.2256" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=44640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 616.587225][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.758228][ T29] audit: type=1400 audit(2000000879.030:1077): avc: denied { mount } for pid=14607 comm="syz.6.2258" name="/" dev="hugetlbfs" ino=44659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 617.247578][ T29] audit: type=1400 audit(2000000879.360:1078): avc: denied { listen } for pid=14607 comm="syz.6.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 617.449669][ T29] audit: type=1400 audit(2000000879.360:1079): avc: denied { write } for pid=14607 comm="syz.6.2258" path="socket:[44673]" dev="sockfs" ino=44673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 617.473273][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.530289][ T7930] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 617.708410][ T7930] usb 2-1: Using ep0 maxpacket: 16 [ 617.723168][ T7930] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 617.734716][ T7930] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 617.745303][ T7930] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.773266][ T7930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.773298][ T7930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.773320][ T7930] usb 2-1: Product: syz [ 617.773337][ T7930] usb 2-1: Manufacturer: syz [ 617.773353][ T7930] usb 2-1: SerialNumber: syz [ 618.137015][T14633] siw: device registration error -23 [ 618.290082][ T7930] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 618.725022][T14658] QAT: Device 8 not found [ 619.402074][ T7932] vhci_hcd: vhci_device speed not set [ 620.376422][ T7930] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 620.750551][ T7930] usb 2-1: USB disconnect, device number 65 [ 622.679926][T14715] QAT: Device 8 not found [ 622.947616][T14712] atomic_op ffff88805caf1198 conn xmit_atomic 0000000000000000 [ 623.113325][T14691] tty tty23: ldisc open failed (-12), clearing slot 22 [ 623.140337][T14722] loop8: detected capacity change from 0 to 7 [ 623.150860][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.177131][T14722] Dev loop8: unable to read RDB block 7 [ 623.183089][T14722] loop8: unable to read partition table [ 623.188894][T14722] loop8: partition table beyond EOD, truncated [ 623.220253][T14722] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 623.220253][T14722] ) failed (rc=-5) [ 623.440605][ T29] audit: type=1400 audit(2000000885.710:1080): avc: denied { audit_write } for pid=14735 comm="syz.4.2284" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 624.072643][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.271386][T14749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2286'. [ 624.931686][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 624.961556][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 625.752470][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 625.761680][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 625.925638][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 625.934839][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 625.987003][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2288'. [ 626.041274][ T29] audit: type=1400 audit(2000000888.310:1081): avc: denied { write } for pid=14772 comm="syz.5.2290" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 626.071665][ T5862] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 626.221527][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 626.230307][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 626.263826][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 626.282225][ T7930] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 626.302422][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 626.330082][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 626.381826][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 626.418881][ T5862] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 626.434245][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.448784][ T5862] usb 1-1: Product: syz [ 626.453761][ T5862] usb 1-1: Manufacturer: syz [ 626.459233][ T5862] usb 1-1: SerialNumber: syz [ 626.461822][ T7930] usb 2-1: Using ep0 maxpacket: 32 [ 626.471334][ T5862] usb 1-1: config 0 descriptor?? [ 626.483787][ T7930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 626.494792][ T7930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 626.507310][ T7930] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=58.6f [ 626.518404][ T7930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.544485][ T7930] usb 2-1: Product: syz [ 626.549876][ T7930] usb 2-1: Manufacturer: syz [ 626.571987][ T7930] usb 2-1: SerialNumber: syz [ 626.589949][ T7930] usb 2-1: config 0 descriptor?? [ 626.605369][ T7930] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 626.615069][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 626.648677][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 626.668407][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 626.688366][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 626.688441][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 626.701809][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 626.714568][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 626.753317][ T7930] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 626.780356][ T7930] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 626.923766][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.930075][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.946647][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.952516][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 626.953333][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.968546][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.979258][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 626.987237][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.000172][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.008555][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.026192][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.037377][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.062043][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.070118][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.078171][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.088738][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.104685][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.121220][ T5862] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 627.139651][ T5862] input input58: Timeout waiting for response from device. [ 627.177861][ T5862] usb 1-1: USB disconnect, device number 45 [ 627.196635][ T966] usb 2-1: USB disconnect, device number 66 [ 627.218925][ T966] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 627.249500][ T966] keyspan 2-1:0.0: device disconnected [ 627.585475][T14809] netlink: 'syz.4.2295': attribute type 11 has an invalid length. [ 627.593426][T14809] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2295'. [ 628.462006][ T29] audit: type=1400 audit(2000000890.700:1082): avc: denied { connect } for pid=14821 comm="syz.4.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 628.938125][T14831] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 628.946986][T14831] overlayfs: missing 'lowerdir' [ 628.954066][ T29] audit: type=1400 audit(2000000890.710:1083): avc: denied { getopt } for pid=14821 comm="syz.4.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 629.261553][ T966] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 629.471936][ T7930] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 629.681947][ T7930] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 629.693327][ T7930] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 629.724558][ T7930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.744042][ T7930] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 629.764339][ T7930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.787375][ T7930] usb 5-1: Product: syz [ 629.798361][ T7930] usb 5-1: Manufacturer: syz [ 629.818142][ T7930] usb 5-1: SerialNumber: syz [ 629.847067][ T7930] usb 5-1: config 0 descriptor?? [ 629.881109][ T7930] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 629.920997][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 629.976448][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 630.019617][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 630.061416][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 630.120450][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 630.166034][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 630.216688][ T7930] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 630.261391][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 630.297881][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 630.339122][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 630.373628][ T29] audit: type=1400 audit(2000000892.590:1084): avc: denied { execute_no_trans } for pid=14861 comm="syz.0.2308" path="/511/file2" dev="tmpfs" ino=2753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 630.432432][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 630.440322][ T7930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 630.455199][ T7930] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 630.602087][ T7930] usb 5-1: USB disconnect, device number 60 [ 630.797541][ T7930] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 630.809588][ T7930] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 630.819704][ T7930] keyspan 5-1:0.0: device disconnected [ 630.887751][ T7190] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.910593][T14873] netlink: 'syz.6.2310': attribute type 11 has an invalid length. [ 630.918807][T14873] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2310'. [ 631.657711][ T966] usb 6-1: device not accepting address 48, error -71 [ 632.010026][T14893] FAULT_INJECTION: forcing a failure. [ 632.010026][T14893] name failslab, interval 1, probability 0, space 0, times 0 [ 632.420977][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 632.776239][T14893] CPU: 0 UID: 0 PID: 14893 Comm: syz.5.2316 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 632.786688][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.796759][T14893] Call Trace: [ 632.800037][T14893] [ 632.802972][T14893] dump_stack_lvl+0x16c/0x1f0 [ 632.807657][T14893] should_fail_ex+0x497/0x5b0 [ 632.812353][T14893] should_failslab+0xc2/0x120 [ 632.817030][T14893] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 632.822404][T14893] ? skb_clone+0x190/0x3f0 [ 632.826822][T14893] skb_clone+0x190/0x3f0 [ 632.831065][T14893] netlink_deliver_tap+0xabd/0xd30 [ 632.836276][T14893] netlink_unicast+0x6b4/0x7f0 [ 632.841053][T14893] ? __pfx_netlink_unicast+0x10/0x10 [ 632.846345][T14893] ? genl_rcv_msg+0x4bd/0x800 [ 632.851031][T14893] netlink_ack+0x6a8/0xb90 [ 632.855472][T14893] netlink_rcv_skb+0x348/0x440 [ 632.860243][T14893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.865270][T14893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.870573][T14893] ? down_read+0xc9/0x330 [ 632.874919][T14893] ? __pfx_down_read+0x10/0x10 [ 632.879687][T14893] ? netlink_deliver_tap+0x1ae/0xd30 [ 632.884982][T14893] genl_rcv+0x28/0x40 [ 632.889014][T14893] netlink_unicast+0x53c/0x7f0 [ 632.893788][T14893] ? __pfx_netlink_unicast+0x10/0x10 [ 632.899089][T14893] netlink_sendmsg+0x8b8/0xd70 [ 632.903862][T14893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.909164][T14893] ____sys_sendmsg+0xaaf/0xc90 [ 632.913936][T14893] ? copy_msghdr_from_user+0x10b/0x160 [ 632.919395][T14893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.924697][T14893] ___sys_sendmsg+0x135/0x1e0 [ 632.929374][T14893] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.934583][T14893] ? __pfx_lock_release+0x10/0x10 [ 632.939608][T14893] ? trace_lock_acquire+0x146/0x1e0 [ 632.944823][T14893] ? __fget_files+0x206/0x3a0 [ 632.949512][T14893] __sys_sendmsg+0x16e/0x220 [ 632.954102][T14893] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.959233][T14893] do_syscall_64+0xcd/0x250 [ 632.963744][T14893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.969640][T14893] RIP: 0033:0x7f433c17e819 [ 632.974057][T14893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.993666][T14893] RSP: 002b:00007f433cf19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.002093][T14893] RAX: ffffffffffffffda RBX: 00007f433c335fa0 RCX: 00007f433c17e819 [ 633.010089][T14893] RDX: 0000000020000010 RSI: 0000000020001000 RDI: 0000000000000003 [ 633.018061][T14893] RBP: 00007f433cf19090 R08: 0000000000000000 R09: 0000000000000000 [ 633.026032][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.034007][T14893] R13: 0000000000000000 R14: 00007f433c335fa0 R15: 00007ffc66bd9378 [ 633.041994][T14893] [ 634.802180][T14929] QAT: Device 8 not found [ 635.200697][T14935] : renamed from bond0 (while UP) [ 635.854312][T14910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.103314][T14961] lo speed is unknown, defaulting to 1000 [ 637.113689][T14961] lo speed is unknown, defaulting to 1000 [ 639.240947][T14984] input: syz1 as /devices/virtual/input/input59 [ 639.977203][T14984] cgroup2: Unknown parameter 'eemory_hugetlb_accounting' [ 639.994036][ T29] audit: type=1400 audit(2000000903.255:1085): avc: denied { mounton } for pid=14983 comm="syz.6.2335" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 640.829749][ T29] audit: type=1400 audit(2000000904.105:1086): avc: denied { read } for pid=15019 comm="syz.0.2339" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 640.889706][ T29] audit: type=1400 audit(2000000904.105:1087): avc: denied { open } for pid=15019 comm="syz.0.2339" path="/516/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 640.962680][T15023] block device autoloading is deprecated and will be removed. [ 641.850464][T15067] netlink: 'syz.4.2347': attribute type 11 has an invalid length. [ 641.858733][T15067] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2347'. [ 642.666468][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 644.412923][T15109] QAT: Device 8 not found [ 647.002819][ T29] audit: type=1400 audit(2000000910.285:1088): avc: denied { map } for pid=15171 comm="syz.5.2366" path="socket:[45668]" dev="sockfs" ino=45668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 647.141663][ T29] audit: type=1400 audit(2000000910.285:1089): avc: denied { read accept } for pid=15171 comm="syz.5.2366" path="socket:[45668]" dev="sockfs" ino=45668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 647.239208][ T29] audit: type=1400 audit(2000000910.505:1090): avc: denied { accept } for pid=15185 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 649.054586][ T7930] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 649.162472][T15233] QAT: failed to copy from user cfg_data. [ 649.201690][ T7930] usb 6-1: device descriptor read/64, error -71 [ 649.321716][ T5882] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 649.441563][ T7930] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 649.481590][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 649.488109][ T5882] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 649.499908][ T5882] usb 2-1: config 0 has no interface number 0 [ 649.518988][ T5882] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 649.538634][ T5882] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 649.555875][ T5882] usb 2-1: config 0 interface 41 has no altsetting 0 [ 649.582442][ T5882] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 649.644491][ T7930] usb 6-1: device descriptor read/64, error -71 [ 649.649316][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.672571][ T5882] usb 2-1: Product: syz [ 649.689617][ T5882] usb 2-1: Manufacturer: syz [ 649.701395][ T5882] usb 2-1: SerialNumber: syz [ 649.722243][ T5882] usb 2-1: config 0 descriptor?? [ 649.735087][T15226] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 649.749405][T15226] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 649.831861][ T7930] usb usb6-port1: attempt power cycle [ 649.969171][T15226] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.004074][T15226] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.242932][ T7930] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 650.359928][ T7930] usb 6-1: device descriptor read/8, error -71 [ 650.633315][ T5882] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 650.871562][ T7930] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 650.922641][ T7930] usb 6-1: device descriptor read/8, error -71 [ 651.042824][ T7930] usb usb6-port1: unable to enumerate USB device [ 651.672598][ T966] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 651.881009][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.025997][ T5882] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 652.048477][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.071944][ T966] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 652.071996][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.074704][ T966] usb 5-1: config 0 descriptor?? [ 652.157676][ T29] audit: type=1400 audit(2000000915.435:1091): avc: denied { read } for pid=15313 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 652.158563][T15314] netlink: 'syz.5.2390': attribute type 10 has an invalid length. [ 652.165630][T15314] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.217944][T15314] : (slave team0): Enslaving as an active interface with an up link [ 652.427848][ T29] audit: type=1400 audit(2000000915.695:1092): avc: denied { ioctl } for pid=15224 comm="syz.1.2377" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 652.951189][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.988530][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.268744][ T5882] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 653.286657][ T5882] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 653.305162][ T966] elo 0003:04E7:0030.0018: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 653.318092][ T5882] usb 2-1: USB disconnect, device number 67 [ 653.635329][T15351] pim6reg: entered allmulticast mode [ 653.723460][T14206] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 653.763157][ T29] audit: type=1326 audit(2000000917.045:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140f77e819 code=0x7ffc0000 [ 653.822921][ T29] audit: type=1326 audit(2000000917.075:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140f77e819 code=0x7ffc0000 [ 653.902625][T14206] usb 1-1: Using ep0 maxpacket: 8 [ 653.917910][T14206] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.021190][T14206] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.041145][T14206] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.056302][T14206] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.206476][T14206] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.216002][T14206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.331691][T14206] usb 1-1: GET_CAPABILITIES returned 0 [ 656.293420][T14206] usbtmc 1-1:16.0: can't read capabilities [ 656.340730][ T7932] usb 5-1: USB disconnect, device number 61 [ 656.747508][T15382] QAT: Device 8 not found [ 656.828139][ T5882] usb 1-1: USB disconnect, device number 46 [ 656.961548][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2406'. [ 657.983699][T15420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.032397][T15420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.359636][ T29] audit: type=1400 audit(2000000922.175:1095): avc: denied { read } for pid=15428 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.369237][T15432] QAT: failed to copy from user cfg_data. [ 659.418798][ T29] audit: type=1400 audit(2000000922.175:1096): avc: denied { accept } for pid=15428 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.429829][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 662.966994][T15491] QAT: Device 8 not found [ 664.772397][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 665.023338][ T6287] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 665.976992][ T29] audit: type=1400 audit(2000000929.255:1097): avc: denied { ioctl } for pid=15565 comm="syz.4.2436" path="socket:[47877]" dev="sockfs" ino=47877 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 666.069326][T15574] [U] vÔ3 [ 667.010120][T15587] wireguard0: entered promiscuous mode [ 667.157252][T15587] wireguard0: entered allmulticast mode [ 667.731070][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 667.754609][T15599] bridge_slave_1: left allmulticast mode [ 667.776667][T15599] bridge_slave_1: left promiscuous mode [ 667.791848][T15599] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.822398][T15599] bridge_slave_0: left allmulticast mode [ 667.828285][T15599] bridge_slave_0: left promiscuous mode [ 667.834833][T15599] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.422378][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'. [ 668.455395][ T29] audit: type=1400 audit(2000000931.705:1098): avc: denied { nlmsg_read } for pid=15608 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 668.546498][T15613] binder: 15612:15613 ioctl c0286405 20000200 returned -22 [ 668.565709][ T29] audit: type=1400 audit(2000000931.715:1099): avc: denied { read } for pid=15608 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 668.601277][T15616] binder: 15612:15616 ioctl c0189375 20000440 returned -22 [ 668.670221][T15613] binder_alloc: 15612: binder_alloc_buf, no vma [ 668.904838][T15623] SET target dimension over the limit! [ 669.500773][T15645] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 669.842618][T15644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=15644 comm=syz.5.2454 [ 671.055857][T15680] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 671.138664][T15680] syz.1.2462 (15680): drop_caches: 2 [ 671.479318][T15687] FAULT_INJECTION: forcing a failure. [ 671.479318][T15687] name failslab, interval 1, probability 0, space 0, times 0 [ 671.492548][T15687] CPU: 0 UID: 0 PID: 15687 Comm: syz.0.2463 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 671.502993][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 671.513064][T15687] Call Trace: [ 671.516431][T15687] [ 671.519358][T15687] dump_stack_lvl+0x16c/0x1f0 [ 671.524041][T15687] should_fail_ex+0x497/0x5b0 [ 671.528739][T15687] ? __pfx___lock_acquire+0x10/0x10 [ 671.533942][T15687] should_failslab+0xc2/0x120 [ 671.538601][T15687] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 671.543948][T15687] ? dst_alloc+0x99/0x1a0 [ 671.548255][T15687] dst_alloc+0x99/0x1a0 [ 671.552417][T15687] rt_dst_alloc+0x35/0x3a0 [ 671.556815][T15687] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 671.562777][T15687] ? lock_acquire.part.0+0x335/0x380 [ 671.568040][T15687] ip_route_output_key_hash+0x138/0x2e0 [ 671.573567][T15687] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 671.579618][T15687] ip_route_output_flow+0x27/0x150 [ 671.584895][T15687] ip_tunnel_xmit+0x1975/0x3580 [ 671.589727][T15687] ? lock_acquire.part.0+0x11b/0x380 [ 671.594988][T15687] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 671.600185][T15687] ? stack_depot_save_flags+0x31b/0x8f0 [ 671.605739][T15687] __gre_xmit+0x8bc/0xc00 [ 671.610070][T15687] ? __pfx___gre_xmit+0x10/0x10 [ 671.614900][T15687] ? __pfx_skb_network_protocol+0x10/0x10 [ 671.620599][T15687] ? lock_acquire.part.0+0x11b/0x380 [ 671.625871][T15687] ipgre_xmit+0x52f/0xb20 [ 671.630189][T15687] dev_hard_start_xmit+0x9a/0x7b0 [ 671.635203][T15687] __dev_queue_xmit+0x7f0/0x43e0 [ 671.640123][T15687] ? __pfx___dev_queue_xmit+0x10/0x10 [ 671.645475][T15687] ? rcu_is_watching+0x12/0xc0 [ 671.650227][T15687] ? trace_kmalloc+0x2d/0xd0 [ 671.654797][T15687] ? __kmalloc_node_track_caller_noprof+0x22d/0x430 [ 671.661361][T15687] ? pskb_expand_head+0x243/0x1260 [ 671.666461][T15687] ? skb_release_data+0x565/0x730 [ 671.671561][T15687] ? kmalloc_reserve+0x13c/0x2c0 [ 671.676475][T15687] ? skb_headers_offset_update+0x129/0x260 [ 671.682266][T15687] ? pskb_expand_head+0x639/0x1260 [ 671.687369][T15687] ? __pfx_pskb_expand_head+0x10/0x10 [ 671.692724][T15687] ? __asan_memcpy+0x3c/0x60 [ 671.697313][T15687] __bpf_redirect+0x71c/0xfc0 [ 671.701986][T15687] bpf_clone_redirect+0x2cb/0x3d0 [ 671.707034][T15687] bpf_prog_81ed5507648eb997+0x5f/0x64 [ 671.712487][T15687] ? __pfx___lock_acquire+0x10/0x10 [ 671.717690][T15687] ? __pfx___lock_acquire+0x10/0x10 [ 671.722869][T15687] ? find_held_lock+0x2d/0x110 [ 671.727660][T15687] ? bpf_test_timer_enter+0x9d/0x180 [ 671.732923][T15687] ? __pfx_lock_release+0x10/0x10 [ 671.737937][T15687] ? trace_lock_acquire+0x146/0x1e0 [ 671.743113][T15687] ? bpf_test_timer_enter+0x9d/0x180 [ 671.748388][T15687] ? ktime_get+0x206/0x300 [ 671.752796][T15687] ? lockdep_hardirqs_on+0x7c/0x110 [ 671.757974][T15687] ? read_tsc+0x9/0x20 [ 671.762036][T15687] ? __pfx___cant_migrate+0x10/0x10 [ 671.767216][T15687] bpf_test_run+0x49d/0xa90 [ 671.771705][T15687] ? __pfx_bpf_test_run+0x10/0x10 [ 671.776720][T15687] ? __asan_memset+0x23/0x50 [ 671.781297][T15687] bpf_prog_test_run_skb+0xb8d/0x2270 [ 671.786651][T15687] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 671.792447][T15687] ? fput+0x67/0x440 [ 671.796319][T15687] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 671.802115][T15687] __sys_bpf+0xfc6/0x49c0 [ 671.806456][T15687] ? __pfx_lock_release+0x10/0x10 [ 671.811475][T15687] ? __pfx___sys_bpf+0x10/0x10 [ 671.816217][T15687] ? vfs_write+0x306/0x1150 [ 671.820709][T15687] ? __mutex_unlock_slowpath+0x164/0x690 [ 671.826338][T15687] ? fput+0x67/0x440 [ 671.830210][T15687] ? ksys_write+0x1ba/0x250 [ 671.834692][T15687] ? __pfx_ksys_write+0x10/0x10 [ 671.839524][T15687] __x64_sys_bpf+0x78/0xc0 [ 671.843920][T15687] ? lockdep_hardirqs_on+0x7c/0x110 [ 671.849095][T15687] do_syscall_64+0xcd/0x250 [ 671.853588][T15687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.859479][T15687] RIP: 0033:0x7f870577e819 [ 671.863871][T15687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.883457][T15687] RSP: 002b:00007f87035f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.891847][T15687] RAX: ffffffffffffffda RBX: 00007f8705935fa0 RCX: 00007f870577e819 [ 671.899820][T15687] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 671.907779][T15687] RBP: 00007f87035f6090 R08: 0000000000000000 R09: 0000000000000000 [ 671.915749][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.923783][T15687] R13: 0000000000000000 R14: 00007f8705935fa0 R15: 00007ffc253e6918 [ 671.931739][T15687] [ 673.307416][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 674.185366][ T29] audit: type=1400 audit(2000000937.462:1100): avc: denied { mounton } for pid=15760 comm="syz.4.2477" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.685450][ T7930] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 674.707682][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 675.042781][ T7930] usb 5-1: device descriptor read/64, error -32 [ 675.291773][ T7930] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 675.507148][T15806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2484'. [ 675.531800][ T7930] usb 5-1: Using ep0 maxpacket: 8 [ 675.539071][T15806] 1ªX¹¦À: renamed from 60ªX¹¦À [ 675.550304][ T7930] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 675.562827][T15806] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 675.601315][ T7930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.637835][ T7930] usb 5-1: Product: syz [ 675.646629][ T7930] usb 5-1: Manufacturer: syz [ 675.651259][ T7930] usb 5-1: SerialNumber: syz [ 675.771594][ T7930] usb 5-1: config 0 descriptor?? [ 676.545048][ T7930] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 677.711934][ T966] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 677.751268][ T29] audit: type=1400 audit(2000000941.022:1101): avc: denied { read write } for pid=15823 comm="syz.5.2491" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.967750][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 678.000460][ T966] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 678.018092][ T29] audit: type=1400 audit(2000000941.022:1102): avc: denied { open } for pid=15823 comm="syz.5.2491" path="/247/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 678.044401][ T966] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 678.087515][ T966] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 678.137554][ T7930] gspca_sunplus: reg_w_riv err -110 [ 678.137613][ T966] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 678.143043][ T7930] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 678.415195][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 678.599786][ T966] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 678.614881][ T966] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 678.633578][ T966] usb 1-1: Product: syz [ 678.637772][ T966] usb 1-1: Manufacturer: syz [ 678.842353][T14206] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 679.001777][ T966] usb 1-1: SerialNumber: syz [ 679.010803][ T966] usb 1-1: config 0 descriptor?? [ 679.018171][ T966] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 679.059921][ T966] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 679.171833][T14206] usb 2-1: Using ep0 maxpacket: 8 [ 679.178426][T14206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.188710][T14206] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 679.219055][T14206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.254515][T14206] usb 2-1: config 0 descriptor?? [ 679.273811][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.274977][T14206] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 679.403903][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.432153][T15822] ldusb 1-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 679.460328][ T7930] usb 5-1: USB disconnect, device number 63 [ 679.906840][ T966] usb 1-1: USB disconnect, device number 47 [ 679.919715][ T966] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 680.177757][T15897] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 680.701672][T14206] usb 2-1: USB disconnect, device number 68 [ 681.334545][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'. [ 681.651564][ T966] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 681.860886][ T966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.163684][ T966] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 682.173786][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.207018][ T966] usb 6-1: config 0 descriptor?? [ 682.218546][ T966] pwc: Askey VC010 type 2 USB webcam detected. [ 682.236839][T15937] FAULT_INJECTION: forcing a failure. [ 682.236839][T15937] name failslab, interval 1, probability 0, space 0, times 0 [ 682.256293][T15937] CPU: 0 UID: 0 PID: 15937 Comm: syz.4.2511 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 682.266748][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 682.276799][T15937] Call Trace: [ 682.280057][T15937] [ 682.282965][T15937] dump_stack_lvl+0x16c/0x1f0 [ 682.287631][T15937] should_fail_ex+0x497/0x5b0 [ 682.292289][T15937] ? find_held_lock+0x2d/0x110 [ 682.297041][T15937] should_failslab+0xc2/0x120 [ 682.301786][T15937] __kmalloc_noprof+0xcb/0x400 [ 682.306543][T15937] ? __pfx_lock_release+0x10/0x10 [ 682.311555][T15937] dev_prep_valid_name.constprop.0+0x170/0x6d0 [ 682.317691][T15937] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 682.324364][T15937] ? lockdep_init_map_type+0x16d/0x7d0 [ 682.329812][T15937] ? lockdep_init_map_type+0x16d/0x7d0 [ 682.335246][T15937] register_netdevice+0x4b6/0x1e90 [ 682.340338][T15937] ? __pfx_register_netdevice+0x10/0x10 [ 682.345858][T15937] ? dev_addr_mod+0x321/0x5b0 [ 682.350535][T15937] ip6gre_newlink_common.constprop.0+0x178/0x370 [ 682.356880][T15937] ? __pfx_ip6gre_newlink_common.constprop.0+0x10/0x10 [ 682.363745][T15937] ? ip6gre_tunnel_find+0x369/0x440 [ 682.368921][T15937] ip6gre_newlink+0x12b/0x360 [ 682.373596][T15937] rtnl_newlink+0xb88/0x1c50 [ 682.378192][T15937] ? __pfx_ip6gre_newlink+0x10/0x10 [ 682.383381][T15937] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.388400][T15937] ? __pfx___lock_acquire+0x10/0x10 [ 682.393583][T15937] ? cred_has_capability.isra.0+0x192/0x2f0 [ 682.399456][T15937] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 682.405694][T15937] ? find_held_lock+0x2d/0x110 [ 682.410484][T15937] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 682.415592][T15937] ? __pfx_lock_release+0x10/0x10 [ 682.420608][T15937] ? trace_lock_acquire+0x146/0x1e0 [ 682.425793][T15937] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.430807][T15937] rtnetlink_rcv_msg+0x95b/0xea0 [ 682.435752][T15937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.441193][T15937] ? __pfx___lock_acquire+0x10/0x10 [ 682.446389][T15937] ? __pfx___lock_acquire+0x10/0x10 [ 682.451590][T15937] ? __pfx_sock_has_perm+0x10/0x10 [ 682.456705][T15937] ? __lock_acquire+0xcc5/0x3c40 [ 682.461624][T15937] netlink_rcv_skb+0x16b/0x440 [ 682.466377][T15937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.471813][T15937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.477090][T15937] ? netlink_deliver_tap+0x1ae/0xd30 [ 682.482361][T15937] netlink_unicast+0x53c/0x7f0 [ 682.487105][T15937] ? __pfx_netlink_unicast+0x10/0x10 [ 682.492370][T15937] netlink_sendmsg+0x8b8/0xd70 [ 682.497132][T15937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.502417][T15937] ____sys_sendmsg+0xaaf/0xc90 [ 682.507158][T15937] ? copy_msghdr_from_user+0x10b/0x160 [ 682.512601][T15937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.517871][T15937] ___sys_sendmsg+0x135/0x1e0 [ 682.522523][T15937] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.527700][T15937] ? __pfx_lock_release+0x10/0x10 [ 682.532698][T15937] ? trace_lock_acquire+0x146/0x1e0 [ 682.537898][T15937] ? __fget_files+0x206/0x3a0 [ 682.542575][T15937] __sys_sendmsg+0x16e/0x220 [ 682.547138][T15937] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.552241][T15937] do_syscall_64+0xcd/0x250 [ 682.556722][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.562599][T15937] RIP: 0033:0x7ff661f7e819 [ 682.567003][T15937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.586602][T15937] RSP: 002b:00007ff662d79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.594991][T15937] RAX: ffffffffffffffda RBX: 00007ff662135fa0 RCX: 00007ff661f7e819 [ 682.602937][T15937] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 682.610895][T15937] RBP: 00007ff662d79090 R08: 0000000000000000 R09: 0000000000000000 [ 682.618873][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.626848][T15937] R13: 0000000000000000 R14: 00007ff662135fa0 R15: 00007ffd325a42c8 [ 682.634824][T15937] [ 682.645781][ T966] pwc: send_video_command error -71 [ 682.651938][ T966] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 682.659485][ T966] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 682.676732][ T966] usb 6-1: USB disconnect, device number 54 [ 683.141777][ T966] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 683.294273][ T966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.312277][ T966] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 683.351522][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.377245][ T966] usb 6-1: config 0 descriptor?? [ 683.404530][ T966] pwc: Askey VC010 type 2 USB webcam detected. [ 683.908088][ T966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 683.918926][ T966] pwc: recv_control_msg error -32 req 02 val 2700 [ 684.088544][ T966] pwc: recv_control_msg error -32 req 02 val 2c00 [ 684.114680][ T966] pwc: recv_control_msg error -32 req 04 val 1000 [ 684.122514][ T966] pwc: recv_control_msg error -32 req 04 val 1300 [ 684.137883][ T966] pwc: recv_control_msg error -32 req 04 val 1400 [ 684.353615][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 684.372462][T15929] netlink: 'syz.5.2510': attribute type 1 has an invalid length. [ 684.421503][ T5882] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 684.458885][ T966] pwc: recv_control_msg error -71 req 02 val 2100 [ 684.500016][ T966] pwc: recv_control_msg error -71 req 04 val 1500 [ 684.519797][ T966] pwc: recv_control_msg error -71 req 02 val 2500 [ 684.520754][T14206] IPVS: starting estimator thread 0... [ 684.541659][ T966] pwc: recv_control_msg error -71 req 02 val 2400 [ 684.550439][ T966] pwc: recv_control_msg error -71 req 02 val 2600 [ 684.557825][ T966] pwc: recv_control_msg error -71 req 02 val 2900 [ 684.567500][ T966] pwc: recv_control_msg error -71 req 02 val 2800 [ 684.575319][ T966] pwc: recv_control_msg error -71 req 04 val 1100 [ 684.582382][ T966] pwc: recv_control_msg error -71 req 04 val 1200 [ 684.594675][ T966] pwc: Registered as video103. [ 684.602078][ T966] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 684.624538][T15969] IPVS: using max 37 ests per chain, 88800 per kthread [ 684.628276][ T966] usb 6-1: USB disconnect, device number 55 [ 684.681759][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 684.692268][ T5882] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 684.700910][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.736440][ T5882] usb 1-1: config 0 has no interface number 0 [ 684.762913][ T5882] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.776293][ T5882] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.789111][ T5882] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 684.804979][ T5882] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.818946][ T5882] usb 1-1: config 0 interface 52 has no altsetting 0 [ 684.829395][ T5882] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 684.839679][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.858593][ T5882] usb 1-1: config 0 descriptor?? [ 685.095334][ T5882] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input61 [ 685.484505][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.423762][ T966] usb 1-1: USB disconnect, device number 48 [ 688.608946][ T29] audit: type=1400 audit(2000000951.882:1103): avc: denied { bind } for pid=16013 comm="syz.5.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.516349][T16041] netlink: 'syz.4.2534': attribute type 11 has an invalid length. [ 689.524349][T16041] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2534'. [ 690.827551][T16054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2537'. [ 690.889640][T16054] netlink: 'syz.4.2537': attribute type 3 has an invalid length. [ 690.984445][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2537'. [ 692.007313][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 692.161586][T10707] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 692.317864][T10707] usb 2-1: Using ep0 maxpacket: 8 [ 692.331826][T10707] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 692.361902][T10707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.385605][T10707] usb 2-1: Product: syz [ 692.408322][T10707] usb 2-1: Manufacturer: syz [ 692.428870][T10707] usb 2-1: SerialNumber: syz [ 692.466116][T10707] usb 2-1: config 0 descriptor?? [ 692.614059][T10707] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 693.315596][T16099] FAULT_INJECTION: forcing a failure. [ 693.315596][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 693.376013][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.6.2543 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 693.386477][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 693.396549][T16099] Call Trace: [ 693.399830][T16099] [ 693.402768][T16099] dump_stack_lvl+0x16c/0x1f0 [ 693.407450][T16099] should_fail_ex+0x497/0x5b0 [ 693.412130][T16099] ? fs_reclaim_acquire+0xae/0x150 [ 693.417253][T16099] should_failslab+0xc2/0x120 [ 693.421939][T16099] __kmalloc_node_noprof+0xd1/0x430 [ 693.427143][T16099] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 693.432613][T16099] __kvmalloc_node_noprof+0xad/0x1a0 [ 693.437966][T16099] alloc_netdev_mqs+0xf82/0x1510 [ 693.442932][T16099] rtnl_create_link+0xc10/0xfa0 [ 693.447809][T16099] rtnl_newlink+0xa93/0x1c50 [ 693.450112][T16101] FAULT_INJECTION: forcing a failure. [ 693.450112][T16101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.452494][T16099] ? __pfx_rtnl_newlink+0x10/0x10 [ 693.452529][T16099] ? __pfx___lock_acquire+0x10/0x10 [ 693.475706][T16099] ? cred_has_capability.isra.0+0x192/0x2f0 [ 693.481596][T16099] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 693.487839][T16099] ? find_held_lock+0x2d/0x110 [ 693.492606][T16099] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 693.497716][T16099] ? __pfx_lock_release+0x10/0x10 [ 693.502727][T16099] ? trace_lock_acquire+0x146/0x1e0 [ 693.507921][T16099] ? __pfx_rtnl_newlink+0x10/0x10 [ 693.512937][T16099] rtnetlink_rcv_msg+0x95b/0xea0 [ 693.517886][T16099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 693.523371][T16099] netlink_rcv_skb+0x16b/0x440 [ 693.528132][T16099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 693.533588][T16099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.538874][T16099] ? netlink_deliver_tap+0x1ae/0xd30 [ 693.544152][T16099] netlink_unicast+0x53c/0x7f0 [ 693.548908][T16099] ? __pfx_netlink_unicast+0x10/0x10 [ 693.554203][T16099] netlink_sendmsg+0x8b8/0xd70 [ 693.558964][T16099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.564247][T16099] ____sys_sendmsg+0xaaf/0xc90 [ 693.569001][T16099] ? copy_msghdr_from_user+0x10b/0x160 [ 693.574454][T16099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.579829][T16099] ___sys_sendmsg+0x135/0x1e0 [ 693.584508][T16099] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.589717][T16099] ? __pfx_lock_release+0x10/0x10 [ 693.594741][T16099] ? trace_lock_acquire+0x146/0x1e0 [ 693.599947][T16099] ? __fget_files+0x206/0x3a0 [ 693.604796][T16099] __sys_sendmsg+0x16e/0x220 [ 693.609372][T16099] ? __pfx___sys_sendmsg+0x10/0x10 [ 693.614479][T16099] do_syscall_64+0xcd/0x250 [ 693.618982][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.624866][T16099] RIP: 0033:0x7f140f77e819 [ 693.629268][T16099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.648861][T16099] RSP: 002b:00007f1410646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.657261][T16099] RAX: ffffffffffffffda RBX: 00007f140f935fa0 RCX: 00007f140f77e819 [ 693.665229][T16099] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 693.673184][T16099] RBP: 00007f1410646090 R08: 0000000000000000 R09: 0000000000000000 [ 693.681138][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.689092][T16099] R13: 0000000000000000 R14: 00007f140f935fa0 R15: 00007ffeed34e7c8 [ 693.697059][T16099] [ 693.750611][T16101] CPU: 1 UID: 0 PID: 16101 Comm: syz.4.2544 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 693.753164][T10707] gspca_vc032x: reg_w err -110 [ 693.761053][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 693.761071][T16101] Call Trace: [ 693.761078][T16101] [ 693.761086][T16101] dump_stack_lvl+0x16c/0x1f0 [ 693.766092][T10707] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 693.775961][T16101] should_fail_ex+0x497/0x5b0 [ 693.775998][T16101] _copy_to_user+0x32/0xd0 [ 693.776017][T16101] simple_read_from_buffer+0xd0/0x160 [ 693.776039][T16101] proc_fail_nth_read+0x198/0x270 [ 693.776060][T16101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.776081][T16101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.776100][T16101] vfs_read+0x1df/0xbe0 [ 693.776123][T16101] ? __fget_files+0x1fc/0x3a0 [ 693.776145][T16101] ? __pfx___mutex_lock+0x10/0x10 [ 693.776165][T16101] ? __pfx_vfs_read+0x10/0x10 [ 693.776193][T16101] ? __fget_files+0x206/0x3a0 [ 693.776221][T16101] ksys_read+0x12b/0x250 [ 693.776242][T16101] ? __pfx_ksys_read+0x10/0x10 [ 693.776270][T16101] do_syscall_64+0xcd/0x250 [ 693.776293][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.776315][T16101] RIP: 0033:0x7ff661f7d25c [ 693.776331][T16101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 693.891954][T16101] RSP: 002b:00007ff662d79030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.900381][T16101] RAX: ffffffffffffffda RBX: 00007ff662135fa0 RCX: 00007ff661f7d25c [ 693.908364][T16101] RDX: 000000000000000f RSI: 00007ff662d790a0 RDI: 0000000000000006 [ 693.916362][T16101] RBP: 00007ff662d79090 R08: 0000000000000000 R09: 0000000000000000 [ 693.924350][T16101] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 693.932597][T16101] R13: 0000000000000000 R14: 00007ff662135fa0 R15: 00007ffd325a42c8 [ 693.940598][T16101] [ 695.163985][T16143] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 695.240614][T10707] usb 2-1: USB disconnect, device number 69 [ 695.931716][T10707] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 696.061556][T10707] usb 5-1: device descriptor read/64, error -71 [ 696.402818][T10707] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 696.411676][ T7190] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 696.561553][T10707] usb 5-1: device descriptor read/64, error -71 [ 696.691777][T10707] usb usb5-port1: attempt power cycle [ 697.181558][T10707] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 697.207792][T10707] usb 5-1: device descriptor read/8, error -71 [ 697.443339][T10707] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 697.468105][T10707] usb 5-1: device descriptor read/8, error -71 [ 697.572317][T10707] usb usb5-port1: unable to enumerate USB device [ 698.171929][T16206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2558'. [ 699.770399][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'. [ 699.785789][T14206] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 699.912169][T16267] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2569'. [ 699.951716][T14206] usb 2-1: Using ep0 maxpacket: 32 [ 699.961080][T14206] usb 2-1: New USB device found, idVendor=05da, idProduct=00b6, bcdDevice=cd.b7 [ 699.983880][T14206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.008767][T14206] usb 2-1: Product: syz [ 700.052073][T14206] usb 2-1: Manufacturer: syz [ 700.077060][T14206] usb 2-1: SerialNumber: syz [ 700.122476][T14206] usb 2-1: config 0 descriptor?? [ 700.148794][T14206] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 700.183584][T16272] netlink: 'syz.0.2570': attribute type 18 has an invalid length. [ 700.200903][ T29] audit: type=1400 audit(2000000963.462:1104): avc: denied { getattr } for pid=16271 comm="syz.0.2570" path="socket:[50520]" dev="sockfs" ino=50520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 700.333712][T16275] 9pnet_fd: Insufficient options for proto=fd [ 700.392356][T16251] 9pnet: Unknown protocol version 9p200 [ 700.399623][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2567'. [ 700.441798][T10707] usb 2-1: USB disconnect, device number 70 [ 700.805524][ T29] audit: type=1400 audit(2000000964.072:1105): avc: denied { create } for pid=16279 comm="syz.6.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 701.547377][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 701.891514][ T5882] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 702.021526][ T5882] usb 1-1: device descriptor read/64, error -71 [ 702.261553][ T5882] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 702.431550][ T5882] usb 1-1: device descriptor read/64, error -71 [ 702.542047][ T5882] usb usb1-port1: attempt power cycle [ 702.882357][ T5882] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 702.912541][ T5882] usb 1-1: device descriptor read/8, error -71 [ 703.631509][ T5885] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 703.639081][ T5882] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 703.662004][ T5882] usb 1-1: device descriptor read/8, error -71 [ 703.785415][ T5882] usb usb1-port1: unable to enumerate USB device [ 703.822594][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 703.853894][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 703.860161][ T5885] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=ad.c0 [ 703.870402][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.881719][ T5885] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 703.906850][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 704.902933][ T5885] cxusb: set interface failed [ 704.912674][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 704.919852][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 704.940662][ T5885] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 704.965916][ T5885] usb 2-1: media controller created [ 704.993364][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.039892][ T5885] DVB: Unable to find symbol lgdt330x_attach() [ 705.046543][ T5885] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 705.058946][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 705.075391][ T5885] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 705.118603][ T5885] usb 2-1: USB disconnect, device number 71 [ 705.160896][ T5885] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 705.206663][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2595'. [ 705.486714][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2600'. [ 705.661729][T14206] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 705.823162][T14206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.835062][T14206] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 705.845285][T14206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.858450][T14206] usb 6-1: config 0 descriptor?? [ 706.995798][T16381] xt_addrtype: ipv6 does not support BROADCAST matching [ 707.397753][T14206] uclogic 0003:28BD:0042.0019: interface is invalid, ignoring [ 707.625107][T16389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 707.650328][T16389] overlayfs: missing 'lowerdir' [ 707.831462][ T29] audit: type=1400 audit(2000000971.102:1106): avc: denied { ioctl } for pid=16390 comm="syz.4.2611" path="socket:[51391]" dev="sockfs" ino=51391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 708.355606][ T966] usb 6-1: USB disconnect, device number 56 [ 709.262782][ T29] audit: type=1400 audit(2000000972.532:1107): avc: denied { attach_queue } for pid=16415 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 709.521540][T16433] block nbd4: Device being setup by another task [ 709.622994][T16430] [ 709.625356][T16430] ====================================================== [ 709.632379][T16430] WARNING: possible circular locking dependency detected [ 709.639393][T16430] 6.12.0-syzkaller-08446-g228a1157fb9f #0 Not tainted [ 709.646125][T16430] ------------------------------------------------------ [ 709.653124][T16430] syz.4.2621/16430 is trying to acquire lock: [ 709.659184][T16430] ffff888144b8acf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 709.669503][T16430] [ 709.669503][T16430] but task is already holding lock: [ 709.676853][T16430] ffff888144b8a7c8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 709.688272][T16430] [ 709.688272][T16430] which lock already depends on the new lock. [ 709.688272][T16430] [ 709.698657][T16430] [ 709.698657][T16430] the existing dependency chain (in reverse order) is: [ 709.707649][T16430] [ 709.707649][T16430] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 709.716236][T16430] blk_mq_submit_bio+0x1fb6/0x24c0 [ 709.721872][T16430] __submit_bio+0x384/0x540 [ 709.727225][T16430] submit_bio_noacct_nocheck+0x698/0xd70 [ 709.733630][T16430] submit_bio_noacct+0x93a/0x1e20 [ 709.739259][T16430] block_read_full_folio+0x812/0xa50 [ 709.745073][T16430] filemap_read_folio+0xc6/0x2a0 [ 709.750524][T16430] filemap_get_pages+0x155f/0x1be0 [ 709.756147][T16430] filemap_read+0x3ca/0xd70 [ 709.761168][T16430] blkdev_read_iter+0x187/0x480 [ 709.766539][T16430] vfs_read+0x87f/0xbe0 [ 709.771462][T16430] ksys_read+0x12b/0x250 [ 709.776208][T16430] do_syscall_64+0xcd/0x250 [ 709.781236][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.787638][T16430] [ 709.787638][T16430] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 709.796147][T16430] down_read+0x9a/0x330 [ 709.800809][T16430] filemap_fault+0x62c/0x2820 [ 709.806010][T16430] __do_fault+0x10a/0x490 [ 709.810849][T16430] do_pte_missing+0xec5/0x3e70 [ 709.816127][T16430] __handle_mm_fault+0x100a/0x2a10 [ 709.821742][T16430] handle_mm_fault+0x3fa/0xaa0 [ 709.827014][T16430] do_user_addr_fault+0x7a3/0x13f0 [ 709.832628][T16430] exc_page_fault+0x5c/0xc0 [ 709.837636][T16430] asm_exc_page_fault+0x26/0x30 [ 709.842990][T16430] rep_movs_alternative+0x30/0x70 [ 709.848521][T16430] _copy_from_user+0x9a/0xd0 [ 709.853611][T16430] move_addr_to_kernel+0x68/0x160 [ 709.859153][T16430] __sys_connect+0xb0/0x170 [ 709.864165][T16430] __x64_sys_connect+0x72/0xb0 [ 709.869434][T16430] do_syscall_64+0xcd/0x250 [ 709.874442][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.880924][T16430] [ 709.880924][T16430] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 709.888461][T16430] __might_fault+0x11b/0x190 [ 709.893560][T16430] _copy_from_user+0x29/0xd0 [ 709.898651][T16430] __blk_trace_setup+0xa8/0x180 [ 709.904010][T16430] blk_trace_ioctl+0x163/0x290 [ 709.909278][T16430] blkdev_ioctl+0x109/0x6d0 [ 709.914279][T16430] __x64_sys_ioctl+0x190/0x200 [ 709.919548][T16430] do_syscall_64+0xcd/0x250 [ 709.924556][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.930951][T16430] [ 709.930951][T16430] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 709.938746][T16430] __mutex_lock+0x19b/0xa60 [ 709.943755][T16430] blk_register_queue+0x13c/0x550 [ 709.949286][T16430] add_disk_fwnode+0x785/0x1300 [ 709.954640][T16430] brd_alloc.isra.0+0x5a2/0x840 [ 709.959993][T16430] brd_init+0x12b/0x1d0 [ 709.964650][T16430] do_one_initcall+0x128/0x700 [ 709.969919][T16430] kernel_init_freeable+0x5c7/0x900 [ 709.975638][T16430] kernel_init+0x1c/0x2b0 [ 709.980487][T16430] ret_from_fork+0x45/0x80 [ 709.985420][T16430] ret_from_fork_asm+0x1a/0x30 [ 709.990709][T16430] [ 709.990709][T16430] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 709.998249][T16430] __lock_acquire+0x249e/0x3c40 [ 710.003605][T16430] lock_acquire.part.0+0x11b/0x380 [ 710.009221][T16430] __mutex_lock+0x19b/0xa60 [ 710.014233][T16430] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.020723][T16430] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 710.026773][T16430] nbd_start_device+0x15b/0xd70 [ 710.032131][T16430] nbd_ioctl+0x21a/0xfd0 [ 710.036874][T16430] blkdev_ioctl+0x276/0x6d0 [ 710.041876][T16430] __x64_sys_ioctl+0x190/0x200 [ 710.047155][T16430] do_syscall_64+0xcd/0x250 [ 710.052164][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.058562][T16430] [ 710.058562][T16430] other info that might help us debug this: [ 710.058562][T16430] [ 710.068765][T16430] Chain exists of: [ 710.068765][T16430] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53 [ 710.068765][T16430] [ 710.083534][T16430] Possible unsafe locking scenario: [ 710.083534][T16430] [ 710.090965][T16430] CPU0 CPU1 [ 710.096307][T16430] ---- ---- [ 710.101647][T16430] lock(&q->q_usage_counter(io)#53); [ 710.107003][T16430] lock(mapping.invalidate_lock#2); [ 710.114797][T16430] lock(&q->q_usage_counter(io)#53); [ 710.122671][T16430] lock(&q->sysfs_lock); [ 710.126982][T16430] [ 710.126982][T16430] *** DEADLOCK *** [ 710.126982][T16430] [ 710.135103][T16430] 4 locks held by syz.4.2621/16430: [ 710.140277][T16430] #0: ffff888025ad5998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 710.149565][T16430] #1: ffff888025ad58d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 710.160426][T16430] #2: ffff888144b8a7c8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 710.172259][T16430] #3: ffff888144b8a800 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 710.184333][T16430] [ 710.184333][T16430] stack backtrace: [ 710.190212][T16430] CPU: 0 UID: 0 PID: 16430 Comm: syz.4.2621 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 710.200602][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 710.210645][T16430] Call Trace: [ 710.213932][T16430] [ 710.216847][T16430] dump_stack_lvl+0x116/0x1f0 [ 710.221511][T16430] print_circular_bug+0x419/0x5d0 [ 710.226517][T16430] check_noncircular+0x31a/0x400 [ 710.231442][T16430] ? __pfx_check_noncircular+0x10/0x10 [ 710.236895][T16430] ? add_lock_to_list+0x17d/0x390 [ 710.241911][T16430] __lock_acquire+0x249e/0x3c40 [ 710.246748][T16430] ? __pfx___lock_acquire+0x10/0x10 [ 710.251941][T16430] ? __pfx_stack_trace_save+0x10/0x10 [ 710.257303][T16430] ? stack_depot_save_flags+0x28/0x8f0 [ 710.262754][T16430] ? __lock_acquire+0x2077/0x3c40 [ 710.267759][T16430] lock_acquire.part.0+0x11b/0x380 [ 710.272852][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.278990][T16430] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 710.284621][T16430] ? rcu_is_watching+0x12/0xc0 [ 710.289371][T16430] ? trace_lock_acquire+0x146/0x1e0 [ 710.294558][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.300798][T16430] ? lock_acquire+0x2f/0xb0 [ 710.305280][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.311433][T16430] __mutex_lock+0x19b/0xa60 [ 710.315921][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.322059][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.328202][T16430] ? __pfx___mutex_lock+0x10/0x10 [ 710.333218][T16430] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.339358][T16430] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 710.345327][T16430] ? __mutex_trylock_common+0xea/0x250 [ 710.350770][T16430] ? __pfx___mutex_trylock_common+0x10/0x10 [ 710.356671][T16430] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 710.362375][T16430] ? rcu_is_watching+0x12/0xc0 [ 710.367123][T16430] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 710.373534][T16430] ? __pfx___mutex_trylock_common+0x10/0x10 [ 710.379413][T16430] ? avc_has_perm_noaudit+0x61/0x3a0 [ 710.384700][T16430] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 710.390403][T16430] ? __pfx___mutex_lock+0x10/0x10 [ 710.395410][T16430] ? trace_contention_end+0xea/0x140 [ 710.400678][T16430] ? __mutex_lock+0x1cc/0xa60 [ 710.405349][T16430] ? nbd_ioctl+0x151/0xfd0 [ 710.409747][T16430] ? __pfx___mutex_lock+0x10/0x10 [ 710.414781][T16430] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 710.420375][T16430] nbd_start_device+0x15b/0xd70 [ 710.425255][T16430] ? bpf_lsm_capable+0x9/0x10 [ 710.429928][T16430] nbd_ioctl+0x21a/0xfd0 [ 710.434157][T16430] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 710.440662][T16430] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 710.447160][T16430] ? __pfx_nbd_ioctl+0x10/0x10 [ 710.451906][T16430] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 710.458745][T16430] ? __pfx_lock_release+0x10/0x10 [ 710.463755][T16430] ? __pfx_nbd_ioctl+0x10/0x10 [ 710.468500][T16430] blkdev_ioctl+0x276/0x6d0 [ 710.473262][T16430] ? __pfx_blkdev_ioctl+0x10/0x10 [ 710.478273][T16430] ? selinux_file_ioctl+0x180/0x270 [ 710.483456][T16430] ? selinux_file_ioctl+0xb4/0x270 [ 710.488552][T16430] ? __pfx_blkdev_ioctl+0x10/0x10 [ 710.493573][T16430] __x64_sys_ioctl+0x190/0x200 [ 710.498327][T16430] do_syscall_64+0xcd/0x250 [ 710.502815][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.508693][T16430] RIP: 0033:0x7ff661f7e819 [ 710.513103][T16430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.532721][T16430] RSP: 002b:00007ff662d79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.541127][T16430] RAX: ffffffffffffffda RBX: 00007ff662135fa0 RCX: 00007ff661f7e819 [ 710.549107][T16430] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 710.557088][T16430] RBP: 00007ff661ff175e R08: 0000000000000000 R09: 0000000000000000 [ 710.565048][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.573002][T16430] R13: 0000000000000000 R14: 00007ff662135fa0 R15: 00007ffd325a42c8 [ 710.580955][T16430] [ 710.930210][T11846] block nbd4: Receive control failed (result -32) [ 710.930293][T16430] block nbd4: shutting down sockets