last executing test programs: 13.239829518s ago: executing program 1 (id=1549): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023, 0xa6e6, 0x0, 0x0, 0x0, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000180)={0x0, @data}) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8}}, 0x20050800) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000080)={0x20, 0x30, 0x19, "772495e6fc5c55667cddc63ed438ec7e5937cede0c86d658cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.699766279s ago: executing program 1 (id=1555): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) lsetxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "017ed557992185fdb57ad3026841ebf009eb36ac"}, 0x15, 0x1) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x24, 0x3, 0x8001000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x6}}, 0x50) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0x6, @pix_mp={0x0, 0x16db8f77, 0x31363553, 0x5, 0x1, [{0x7, 0xfffffff7}, {0x1e4, 0xb5}, {0x400, 0xff}, {0x80000001, 0x40}, {0x4, 0xb186}, {0x6, 0x22f4}, {0x5, 0xf}, {0x46d00, 0x101}], 0x81, 0x8, 0x7, 0x2, 0x1}}) r7 = openat$cgroup_pressure(r5, &(0x7f0000000340)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000040)={'full', 0x20, 0x100001, 0x20, 0x9}, 0x2f) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 11.346270426s ago: executing program 3 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000003c0)='rxrpc\x00', 0x0, &(0x7f0000000440)="67f59d399cd12590212fa1b2fd5a8c48785011add8ca6e72d73a0fb39cea5e03b6e09436ee52a927", 0x28, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x5ea4, 0x1, 0x2ae2, 0x7ff, 0x9, 0x1, 0x40}, 0x20) socket$kcm(0x10, 0x2, 0x0) 9.618920332s ago: executing program 1 (id=1561): madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r0 = fanotify_init(0x2, 0x400) ioctl$int_out(r0, 0x5462, &(0x7f0000000500)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000000), &(0x7f0000000200)=@tcp6, 0x3}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0201000000000904080001030000000905", @ANYBLOB="8fcfef"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x90c, 0x424000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) fcntl$notify(r4, 0x402, 0x8000002d) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=local']) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}}) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r7, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x700, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x15, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}}]}, 0x38}, 0x1, 0x7}, 0x0) 9.616409618s ago: executing program 4 (id=1563): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x803, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, 0x0, &(0x7f00000002c0)) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r8, 0x20049549e2a2d659) fchown(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r8}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1) 9.363260152s ago: executing program 3 (id=1564): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a7ed577a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='fuseblk\x00', 0x200011, 0x0) 8.662825778s ago: executing program 4 (id=1566): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getresuid(&(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000280)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x8, &(0x7f0000000740)=0x20000410000002) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) io_setup(0x5, 0x0) inotify_init() ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0) 8.603543385s ago: executing program 3 (id=1567): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000140)="cc", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'crc32c-generic\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="b9ffffff", @ANYRES16=r9, @ANYBLOB="0100000000000000008014000000080001000000000008001c00", @ANYRES32=r10, @ANYBLOB], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet(r11, 0x0, 0x0) sendto$inet(r11, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) readv(r11, 0x0, 0x0) 7.007881556s ago: executing program 3 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = gettid() tkill(r2, 0x16) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) sched_setscheduler(r2, 0x5, &(0x7f00000000c0)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000000) 5.244278747s ago: executing program 4 (id=1574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = io_uring_setup(0x7202, &(0x7f0000000100)={0x0, 0xa6a5, 0x1000, 0x2, 0x145, 0x0, r1}) recvmmsg$unix(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000003240), 0x0, &(0x7f0000003e80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003f00), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003f80)=""/19, 0x13}, {&(0x7f0000003fc0)=""/22, 0x16}, {0x0}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/58, 0x3a}, {&(0x7f0000005100)=""/161, 0xa1}], 0x6, &(0x7f0000005240)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x10000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003cc0)=[{0x5, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000540)=""/240, 0xf0}], &(0x7f00000006c0)=[0x7fffffff, 0x8, 0x1]}, {0x1, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/238, 0xee}], &(0x7f0000000740)=[0x1, 0x84b8]}, {0x2, 0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000008c0)=""/46, 0x2e}, {&(0x7f0000000900)=""/4096, 0x1000}], &(0x7f0000001940)=[0x1, 0x81]}, {0x2, 0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/158, 0x9e}, {&(0x7f0000001a40)=""/205, 0xcd}], &(0x7f0000001b80)=[0xfffffffffffffffb, 0x5, 0xfffffffffffffffc, 0x4, 0x6, 0x0]}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)}, {0x1, 0x0, 0x0, &(0x7f0000003780)=[{0x0}], 0x0}, {0x5, 0x1, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003800)=""/18, 0x12}, {&(0x7f00000039c0)=""/232, 0xe8}, {&(0x7f0000003ac0)=""/111, 0x6f}, {&(0x7f0000003b40)=""/125, 0x7d}, {&(0x7f0000003bc0)=""/52, 0x34}], &(0x7f0000003c80)=[0x8864, 0xfffffffffffffffe]}], 0x7) syz_usb_connect(0x2, 0x36, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.2172506s ago: executing program 3 (id=1575): sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0xfffffffffffffff8, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x30}}, 0x0) syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0d24b2002987f91c"}}}, 0xe) 4.321847718s ago: executing program 1 (id=1576): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x803, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r8, 0x20049549e2a2d659) fchown(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r8}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1) 4.060591351s ago: executing program 2 (id=1577): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.971316573s ago: executing program 2 (id=1578): socket(0x2c, 0x3, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) (async, rerun: 64) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000280), 0x4) (async, rerun: 64) close(0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}}, 0x40000880) (async, rerun: 64) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async, rerun: 64) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r0, 0x4}], 0x1, 0x0, &(0x7f0000000380)={[0x8000000000000001]}, 0x8) (async) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close(0x4) 3.908669805s ago: executing program 0 (id=1579): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1]) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') read$FUSE(r2, &(0x7f0000005cc0)={0x2020}, 0x2020) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x2000001e}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000600)={0xa0000010}) epoll_wait(r7, &(0x7f0000000180)=[{}], 0x1, 0x10000400) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x1, 0x7, 0x9, 0x1, 0xe, "4134ff0fcd0ffb93eb4ef0c692ec6b26c54295"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@redirect_dir_nofollow}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) mknod$loop(&(0x7f00000001c0)='./bus\x00', 0x6000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 3.812929438s ago: executing program 2 (id=1580): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0xb0ce81821db1894f}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x1e0, 0xf0, 0xffffffff, 0x1e0, 0x0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e23, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @gre_key=0x1}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff], [], 'wg1\x00', 'ip6gre0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@broadcast, @gre_key=0x1, @gre_key=0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0x0, 0x0, 0xff000000], 'lo\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) io_uring_setup(0x3183, &(0x7f0000000000)={0x0, 0x4720, 0x0, 0x1, 0x395}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd483f", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) 3.488597819s ago: executing program 0 (id=1581): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c492eb0165203d36be0100000000000000e1100ad985544d00", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x2000000000000000, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.350780273s ago: executing program 0 (id=1582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x8, 0x1}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, 0x0, 0x0, 0x14a, 0x0) 3.350151838s ago: executing program 1 (id=1583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224"], 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630106000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x2a, 0x2, 0x0) r3 = fanotify_init(0x4, 0x40000) fanotify_mark(r3, 0x105, 0x4800003a, r1, 0x0) 3.073431968s ago: executing program 2 (id=1584): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x75, &(0x7f0000000680)=""/117, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000740)={0xa, 0x8}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x7, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r0, r0, 0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x5, 0x7, 0x9}, {0x2, 0x3, 0xa, 0xc}, {0x4, 0x2, 0x1, 0xc}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40505330, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r7 = socket(0x40000000015, 0x805, 0x0) getsockopt(r7, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x10, 0x0, 0x1e2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) chdir(&(0x7f00000000c0)='./file0\x00') io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.363651453s ago: executing program 3 (id=1585): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3080}], 0x1, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffe, "00207d2000000000201b14700c1e0ac74f000000001200000100000900"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x28, 0x0, &(0x7f0000000000)=[@acquire, @request_death, @clear_death], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}}, 0x8081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000009d40)=[{{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000640)="3aed923b942ccfcfed4ddc2ada1c54fbd041515f7d02580803674a127f5e39edd4f39995c41dbb24930fc69f227c025ae36dd5fbd2a1eff97e81d6ed0877e6f4b1ab153955e849895ba9cfff8a9d9d6f9e222847310ec0111ec778606cb4f50adba774cca1de4341dfb1defba3503ad33528c9b73a8d69e469b35cdb1f8e29e7", 0x80}, {&(0x7f00000007c0)="a0d51f068be59f3f0439b4e44b70e2d73381ec47f6b150d2f4e88766b62dcdfd56f9628298584870a07bf990452f1f659363eaf1457e55bd3a8ee1a21b1df8575c1dd3443b6dee54af78f721fcd2f4be1e3db8f4a8025c3508216328ac745c9b8df85674c1d3773f62510658185b66da229e48856d890d19c4cb3314337f67de1b13156217c36dd850a68085b54772968d0c9455006b64d41a9a3f55f663b49cf3d9bc03a34a22c291de533918d66ca871754079bd8ca3f2ef0bd2f0098f8e661ea60b39f818ac11135e09f5f47bfe3f611924a2311c66e50f8a7492416d", 0xde}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f00000006c0)="350744e2c81617f97c3838109d33b03071e5150abe392a5fc1d3e8d5cd0eb30a4add53cb494cdbbe7ee6292cd0dc6ec4ddcf951b3faf44c9b70b1ba6f6f68d91f8fa0b2888aaf8670091f4e40880fe870da992c1ded678c40a0f43e4a4bde775a0accb893a37d82852ca4d8dddf79a6d4a90dab7d5f3d2c456ec131a448ed4e7766b8aca8f2a081196edea1aa6d40ce0eb7cb3f59b791f8eab9ec1c5c10af50fffe12b71035b", 0xa6}], 0x4, &(0x7f0000003c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ff000000000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x40004}}, {{&(0x7f0000003d80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004f80)=[{&(0x7f0000003e00)="d9cba1325a6e52fbd774db1bc3f8329c44795e2040c464ec2cd62772107c72bfc2a5e0209f54f35b92285ffad2ca269ba732ef319975b1afa2822fc9b813eb728db4f78c8a4a01aafca46f15dabb41f8880f65bb110075f6e8d7337086e85ad117b0c5b7ed", 0x65}, {&(0x7f0000003e80)="0de8dc4c068e5946564d1a457047900781415ad4c00dc3f7a063ca5791f810a0ec739e40ad72c01b09d1e5ae39d751d5891888a39639d1da34d1edb587440b3700b075a9dba5157dc06e09e638280e5dc211ef24db33bf", 0x57}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)="9907738d58cd185fa75a7d88dd0dc014bc6b97d883d7dfe0dfb44be539bd52e5c23e089e1be456ea59380a117b03f2aa6b784a30ddcf8cbd68fddc5bd47261af3a2e27eef958a6863a3bb82104f01b250ea93e13ae5961c0a8d5163f13ea795c974761b912407d721e99303b57cf8eda5092fe3012276014ddc7d731f4d2d395bc61ab84710233343305b47a9397f2ac9a1a7079e67bf89f452c6b5d9cb1d24e9f0d1c37a53607f6858201933a140350abd1187715eb26c955b5194436f73512dfc7f79c5f3b7e8b66703b295ee37772cfed468572c210f064b599d40a6be04653c61d79e2f0ac995355281990c2c7abf6834cfc6e64951c9dfe24e92f93668afc1a5eed8c8b3111393f81d030f0c4fe7897fb6cc6a663d31df55fefecfe6745f7330661ff2a72ccfe4c66fd7e033f8b9311206b7dada593e273ff0f81a4f84d7b08456db4abfd787eee979f3a361b2d221f9dd3e11a92a5b7102d2b7b2c9075cb673eada6d6d57989b7a815abf159557f5637f76272dec9720464edbdaf25eaf67c161ce7ef3e3fb62d0c802cc953541bdee1a3205bfbd1e199df7f1bc5f160ff96f2e555023ef1d2e171e5bcbcf196b28c3af25f184684694544a7735ab45743066340d70fbdf0eff15d4b346790abc38e6979cc29f49176d8fdf020ea6ec17479e9ebf5879ccc325d3da93ac57ce1bc49aff4ac527695f4256cd8df47af1adf4d9134d8bb6b2475e45471047404ad1a049ba047604b3ed431dfe49a8881bd0f19836e0a0653d59438ff30d49a373e96cdbc1eeaa3c1ac9ed98138eb338b8497cb11d0e126884aa95f336d1867dc215cd8ca565cd9863037b2c29853f1ffb53595adf5a1f97a390035980b383c404ce06340c28585b6b42ed59de1d2fed61c9388f453dbb95c37027d15dff1b059906240adf4eb74ada73c9389e0f28e798e8243cddbfbc7e1360d99bae37036eb000a3eaaa03fb6c2e6c6e82184d0361989de14464c33dd8a641e9a809c77023404ea4137756737249ab8c722521e07fd4d0c6e13db7cff5d27962b529088129708dce4f3d066ee26e1f89ebbda5a0c131ceed880552ab449fc17f6b8a6ede2975aecf7c4a620fe84c0d98f288b683a87e47412a1fbdcc5ebb2ae105a3dc812fa50aa569ff5301bf7b88b2d0d099cb5e18a05b4469f0f973c1401c6f311fab2df8107e3c7803476432549cd4963017ef2d93bbbc656e28eeac06fb982f28818f0784c3002739c04cd972f5f248509a081387fe7c53fedf852b50194d31be511896a2db3f37101804d3eaa018c9784e9fed599a8ae619fe8ec2b95d433c3160dbc9bad1f17aef58d6c99463ac5361001abb76848eb507614304c9e6ffdcd762a8b98df160ba8bf11a7fd6982873e4b9dec2a81015e1f64a677dbc8c4474f1b715b192cee12333678d13fc075aa6d567a73979fcfca48d3a4dff8c3698377974ca3c5a929cbe06d7138b2425b9d2c01a23ada614f389cb6ddef73b137da5cf3f9e64b72de8b6e24d056628aab007a2736d46eca9341947ccce72915c8d648ce18969dd4b4a9f3f2852c313a6e9fd258a9cdbece9818a03b9f9ab90a9d3f4dd7052c0dded75b0db62dccbff14e9e1d7a0ad50092cf9e0c79f0da61cf2e90f91f41de18063c05afe3aea4f08e82ccbf4f709520363f83d49889cbf69ede6fa4fe610b5aae63ff0b3a261924dd586d86b516c3f1315b15b8a86fc76ccedf46fe72504d8c1aa80a70d62dc95e223b50cfcb4d461e20d46ae6621b48a97a7f6279eea52d4f6b2ef54993124db46e51a53ade95ffdd5cf9c90dfa18aeded97b591ba4427a7dd5496f09ff968aa6e1e5ee53aeb0d682d9ef75febdf7d6574dc2f8152e35a7241b98c5a0d4db78a73bd489f964f046f2ba85ba086d82f8ed8ddd3c888dbe3fb153be64a882a3aee0c7d1a23155e23585765409d4a83b824327f2158db5ef04b9b5933f389ebf6074483229a7885feaa11f7fd238d3a2e07bcf4b8c672f745a7f5631c5cf2870a8658fdd372caf01cbe3cc4ddb144620c3a6b78293c7712ff19c04febfb74adcaf14c4e7417023f13b471574bae19925e689de604af69ea68f0f2133ceb1bd7607f7ccf3644f9ff489cd73e0e8f86928e2caf2f55735e155b773d114466b67af5af3ab0616e763ec7ac7f719909432803de389a214bb489a31adfd74a8bf9b67b1f4199fb2691d50f9e3c6c09ae61e2fe22815dfb2647e3949b599e598340f64f440dad50043b21a6029257ab82a464bb7406c8323a56abf0973e1ccb9f1803fc1b863384a92020056de801d06374c629b724a4b493a7ef8a8dfae42347645e1eec49fc41e1630efca6509ee2ff6168e3311ab238f1ca06eaa5c80abedf7082a046a26cfc6b39d03e2251398c5429b0f9abe2e65250645459fa0987540ce9a7251fd145654ec703fedc0341d9efa57e595b9b20335197650fe191e7182710f65e4d7d87d7dc40074a621dfc04048a298d7d7255dec83907e0c8f09788fcba60d19714cbfb5a7a57676eeb355e9def532a6f9d21aab15496e46282bf724cbbb4ca51b3bf629cad10b8b6209132d512f63d47fd35f9d25ba6adc148cd1317014e78d056465af7eb2c4576a8a03cbfa50580d6fbf3d4eefe9e069cc581ac34b3c94ff269111bd013a6a9d666daadab4092e1e9a34bc54efd47d7e2b28f02606cdd7087d57399ff7ea547b82ce2440f26e1c383b8797d94c4cd713e6fecf8e03d28e356fe5351cf30ce76064e23ab35b7a0017924763585372ddb436e3774048e54af0628fd1977ae87bcb15f4a149e8091db678ef29e40adc74f9a35374563dbab759deecdbabbd7860f11d99f1a95513efe0b32264e4ad395bf3fd52a58f69b94bfe67b45d8a9b855c62d8dce58dd6eb6ab3d1f3e08626d797137bec720d34baa4476be1138ace0784b55c9de5d8bef1a1d5847b85edc770611bad96d7c4eac7365aa17337af3d1943384ff474c99a99f6b280fbbc9b90d46938297ed06f33aaab4cb975d624b1db63a761e6e8aff6cc797788c8a6cc059b6c189bda1569751bba233739e626713fce6144ebc2d64535b0ff1e5c0a9e1d303409146767595056635c121088db8c67ad003960b6f9d44e89cfa2f209db87b3165a42319c2b349a3bb97bca92f55b54c8bb3553eaaf8daa80bc3aadd80b1573905a7a5729188fc9f7e1553c0e4014f9a6da0291836a6dcbeec905017bf74c2b22bd72c986e8b280185a0783e91781b11c80079518e72b79530a2dcdda63d0e124fcfa4e1db328493c67c82748cdf766c45748988b6d6419505ef96f162d001e059dd3cd1f57e723d578ad01f94aed3c1682fa6ed72067839f0d7ffe60bb40bb25d342c8844070a8b368ff40b06440074a58eb7f67af646550a51ed320ec6d20228cd2590bb46a427195b27ff1709e1027ce21ae076699d8ef3af797d70ce0dc1ce2ed161d32eb2cc3b664840b8950e1889e94183262aaa964d21b4f5f77c46cd1795854240135684eaf60b3af0b16f2507cc7ec0b503562b9d6ed381f82cad8d3f3e3257af07d64b3fd14734cd0f669ef12289e981c86ab023369ed165a8ceb0d8dd8d11f863cfc015daf3a1e6f04338c879fac7ce262b398aba26adc3c8a5e6652647fd660cc7669b599fe64554c4bad3af19c9806bd45ffb557f20c53a96c5f68aabcefc8271c722e4ad51ad3a561102336c577756bd704899b11e5a684492f13d49ffe40d9b28206c2dd89fb419d1dfeb028565a2cda5c845cdfc6d73bd81ac5445d8c9c6a09adbb86325eeef3f2d57f2ab831c9a50c18f510386cb9e0ff2bd565f972f22ecf3391ad2f47142524146bd762dfb7cbe1de44b1211f9b5dba1ab21d6487650c55f51d47f27410532813335f41041aceafe0d7780680b5a7820beb57dd56816bef86f00fd45e90c2983a18dfa5fcbf262e64d15a1e1269002a73037990f8e872e9071544f1c9a2c139ec46ed8ecbf4d5c5cba350b816a6221a8eceb83bd8b07d9e6d137634603791531a9ba54e2e630b4d33a463720a79c9dca527921bb427d0b52755f26532204c504662fa2e265c9416e57830c6cc66ffc81e82ecbdad29f583310b0c84296758a0ca36a9ec8629b92dbcafd39c4059dd669a174ccddc7ea3694124aca4adbe3d002f625ed0caf0b5ba67a72a9c605f0df890a94d4a0f19ed7b84c5f70a835af5f68226433d1ada76cddcb2900deb87cf4bf856345ba24f607f4add84618560a2a71205318513eccb5dfa14f167dee23075b5e58c6af56e5d4044935669761fc6ce512d995f44ef5a5b2a7e88e7e03f6cde7b272efcd8e7ebe9e4c85665a8624b89c9071bacf2a292d7bb2365a3688e0e93b3459b1190005d24752b5700c32c99729756bbc48b0d1336745a4b95b72a106446fec0203facc8be4b4718af4300e3b8eecec62b373ad3d2e8904308c0bf0c5add1f331ab56358967494b34e35d09a8b50bd2f689f10dd8e2fd376e9c1b4c6bef32eb57f4d53a023e356ad38f28ca58aa08cb3e4d499c3a21e9916b8f7562a9c69da1e4d99f20d28e8b17c457005c01e1bc76ec4c07af0f1041fd7dcb107a3250a56c6417ef38cf8d49e9019092c25ed4aa87e8ab5cf29bc03a6bd4b39c038bd6d5763bd217df5791881474f56d2d406f5e09ebd349b7a763655ccc322571ff2a3b6270c5272bf8decd8adcffb0664804952890db4a4c9ca2e96e97501051c653be66ba312fef888f50216d9b3bbb722c612869f2c5fb03efbed32d8b56baea45eee341145f7fd9a27842faa2579c34a7c26a4bcdf65da2c90a5662a19442b56bb685ebe14aa24dbe82c810cab81f8f9a1cbaefe0f8a29233ac44dc9f557eb295a09f908191daf4aa1a508d6205207e059997de4e358a0d3c746c9b8b2bb694bb233a7680ca44eebf810fe49d844a771ff630845aa2d08f2a0187849ac6fcedea108841ceeb6fe21fd11a4014309a86e5bb3434d6b372048a7a83bd073e792bf0596765a0858386be1af4b6a0976c0671fcc272eaed6385c20431da7af64cb64af422aadd62116ff3c2d604f1e184ea118e7f441e6c8409c407ce69957cb525cd77ead2c5d152313a8b2f86ed6a4ad2f6b6d6b7f90de5bf39de66af4bbe4316c08527d7c0e8a9ff5d15257a9f77b39ffd2f74e78019f532718af6b10e992573e72ab237ca4cb4fbff4e60b0e8c65cdf55ed7145161a681dffe4dcfe99bba14ac3e3cdd3fff6caf9e4f91c411f58eca828015cd85152d5323a5ed3abf0131b74ddf1ab9bd90ab17ec1adff60cb89573581a785fdfa3df77377b3b19be08e59f8591327ebda802c47c875367ad1947fb1e9cd171242dcb442df573fa65b50ac89c9c113391a00b5a039e55e02d5d1872334bb97b4af4ccfb5605f76842c1341329423d19c020bbfe200e9c898ead6f83e72b1e06ea27c7121b1f13091157c23d58f8df28723472c0153ad096efc57db99c05560862fb86d126b966fd312f0e611b86ce2b8cfd85577474e436c1c790ea264ca60fb1188900d54b9d167900176dddb5f904a0ebc02d3fffc67f66164e13a191fbb8d7206d967e55de5b0c14a9cb09dbc97b274f5a2e76e2142683a552dcdbbfc5db0a9eb0abaa8b816a797ca3332971b427127d12c87ba7d4976039c47b347483d799226bd7a79281091050e4ec2fc07937738ac7bb5f63fc48c44001de40503f318d48d126fe41d41c5c050570562896d98a41dc16e5d3fe4a1bb7bcea22351af617e941de214a670d93e9c7642467f32188ef42b7f4670341408769a6128d4a83", 0x1000}, {&(0x7f0000004f40)="ae9e3986e535fe7c4e24efb03bf4a025e90f2cc3154d1b0030990b3b2c94a955bb67bd76a109d7583d", 0x29}], 0x5, 0x0, 0x0, 0x24048014}}, {{&(0x7f0000005000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000005080)="e52592f59a687753e6d32f883c02abed34924eb886c4aa3aeb682b5c6dbce55fd73268aaea1f3e2815ec43803e304d4c32b1c1d8367647490b05ab4dcb5d4d09e267d6bee52d3d42e9943da57cfde22b61f5b6a20521c02d29b2d039e02b12e581f39003eddf97ff7b64722acc8d9d8f96751dd94a07d5ca991a0ba6b9ac33e6e37f55ad1c7d2e7e31faf770", 0x8c}], 0x1, &(0x7f0000005180)=[@rights={{0x28, 0x1, 0x1, [r8, 0xffffffffffffffff, r3, r6, r2, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r3, r2]}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r5, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0xa8, 0x80}}, {{&(0x7f0000005240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005600)=[{&(0x7f00000052c0)="fe256018e9df1039a7aa79fbcf063295e9986f20e8fbf080aae9aaa43f4027b51483fc1af3488289ced3b68c365c316de258381ce1a5a2fcf7fa7f62b51ef9f9a5930799018010a7906a6ef710c8a37f4d1488faf29ba8bf", 0x58}, {&(0x7f0000005340)="c4aa158ddff7d5395d8b23c6dd2f7945034b04673f76779950fdedb1e70a0ffd3905ed50c381cfeb1645d6ca26ddcd42e0884206d2e7a156b60e7e26a3c1c9318ec6866ff37c9937b4e794abf1fbeb7f", 0x50}, {&(0x7f00000053c0)="cea70342c55c4743008f76fa771fb7a2cd69d1f46402a097f5766b665ad9462768b2ed9181c5c41990fe0ede5cac7d92a9382bf1385d578f70403f7535276cb793c40d027b377c73d4d9553d78346368ec6682df24c289fbd1159c0847ef7931e858023910c844464dcc1e0782ab647af152d311ae5c64693a21cdf71b5b6618779efc5d8f01c54114e0d6d8b61e63f4415eaa2442cc5a87229fdf225c741858231ab9d2bdba693b613bba75ec618714b583164d8fed6d1d67365d0aa1c6e2845f95b4c26f546932dd7310165cc459f921e46df5a893486d6342edf021e80a8dde", 0xe1}, {&(0x7f00000054c0)="bea3ac45929d349a188e50930c43c1bf281ab73c7727e3358f5aebe5050cb94f5d9f1b61c7dc72be35a5f6e91814b30c6d8c0fee79f330abfaf319528dc3c9a65c25e7f476789d9431b2bde3f413f2ba5e21ca1d734d9db2de7ff6091b21e7f0961615e2871b7f860771e2867052c57c201199d263e91a7678cddddd89a6d5e45ad2a7d3a322225a4e3ebe20e24e451ea86ef185de8a20f42cd797692a", 0x9d}, {&(0x7f0000005580)="354b1acea3de4f4c735c6e43777c40d0a4205ee603c573e5aa2a706000cd9b997fb5626d783cb23b4ed5d7abb022401aeba79a797408e63371bc68baa99f1b866d78e95e9d122007aee00709397319b0dc629debbcac47c7a293218a66033da5118a39ea695a3c6c52d60603878350c036bf23bdec", 0x75}], 0x5, &(0x7f0000005680)=[@cred={{0x1c}}], 0x20, 0x20000001}}, {{&(0x7f00000056c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005800)=[{&(0x7f0000005740)="0566fd97ba1ea57eaac1d48207fe560353b12d74948ad968559962dae492952f70ab465a9a3ae6fb6a9c4a0e887d33946527d3d0dfc7e46c888283ec697ca0aa6a41a15524b2d38cda8b0fe2548573df140107857fbb07209332bf5903ec190d925dc783adc05b09b034821545fa2bc807c004b35b51e22fede746930f69dfd536590c7db0c9e2d1e1237f6b093c6215f97ea736d0a8b2a2a4b2cc9385fee5058763e910", 0xa4}], 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x100, 0x40c1}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000074c0)=[{&(0x7f0000006280)="ad6484ac3bb4b63a0a5bd2d346e8d27df3ad40c5", 0x14}, {&(0x7f0000006380)="4f7a6dfc7d170584ba8009c1886b", 0xe}, {&(0x7f00000063c0)="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", 0x1000}, {&(0x7f00000073c0)="838f3245f41d943f377d916b55592247979bb5e57acf3b0058e5ebdb42e8f27d3a23e10c8f409ee49ee9bde235f900030efe948b13edbbc870bb99d442afcb5cceeb7c1f076de621057a3f1410efdd524210799260d507121a5796575583dc7b4b2c861a3a2d5ddc78aabcc1b96b5da1f595243f2902addecab7d8d0857a1daf96bc1735d339794f98925b09113a9cd8c6285d0267e658ac23a180d612e4a2a26789295d5f8c70751980144c2d94f0aa2c85d59cbacae7a2a003d9320e0114e25235fc67839be7a9689fc423eb3c3f27274c0d0071f87b1f9d5464ffbc215eea83536544636458f41b0f2118346801593df16947f1", 0xf5}], 0x4, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000007500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000001a80)="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"/669, 0x29d}, {&(0x7f0000007640)="2ab04075787d7130026930cd11e6748e94e8c1e7357497b7bd9d37441336e7917741140183173c16fb006b0517924b9d3081bda66172e5367a2fb0fb590cb8e7cca7d714a0eecc7459952149aed46eebf29ec89037737dc7d12939d355be2ebf81ab9a3c490d548b12e82b44a98e3da03c37023c636d92f964f572", 0x7b}, {&(0x7f00000076c0)="674f6120310106f7519f53dc5f4d3ded18d106979f53d8a1c2280819d04386184f46769cc64c82468e75fae4b146bbcb4d7bf26eda3fa0bcd915c25d10598ca3be99d1882dd5da7db5cdbce5e0b87a97927ce1d8b88e1a178e51c3c6b46d70dd1b3053f930b56423b626f9f1fcf20a77da66ee3ba0e9cd69debd01620f54f0f47154b9a6ec7ff89d193d04b7ae806a1b9002ba54b2ed534334490087e44e7ca7a28cc368213a37ce07f2c0ced8d41cd95e4594de276caea7b9bcec0ee50ea77e1c74fa8f0d2e1b7af2f982a7c4a0a686918d848672bfb740f2a6a66897362b010a6a527639b03a9f1342ebbd6579", 0xee}, {&(0x7f00000077c0)="3cbff2a4155be762b98b", 0xa}, {&(0x7f0000007800)="2f2de2a3e4a09c5b317f7cb412995d748dd1e0d19653a3632e2bcfd2c66f2688e056a8f0c36e693e51462bdc91e1c6979d9e7809f1dcfbe0f4f24ff660bd941ae0fdf89edd036083517f80bce6e8aa5c504d62dc17048a9b4375062f6154d30c86eeb229cfd7450b1156d2ea2b2757492d840ec2d90b3b40c647b2457f1d6531a5d085ce70f2dc05def8", 0x8a}, {&(0x7f00000078c0)="697179f0a8b96a40f09ccb4a0877ca24bc2f3614527155ce8da659c00b32b84ea39bf37d31db945092ab3f761eb3e8ffd5860e9e09353a10779976f3d551c54864838d53751d87331cab329e9dbef13ba570ea9b8501bc3ec4fbea3c2870f410d735a91ca08f9f52145d6f25d157d0df220178afe20f817dd3f4282d98fd5dbaf7d5201c7aca1224a246fdcd16b5f6e3c295b78045b8ac796e684351fb9f2968e7b9d55c4e429a8e8bffa1b2cf0efd05cab51b55cb5efab48c1844ee497d62de8c023ea81e9d34d5e040c3f0e478e5b2591c3e4bb79cc4fd490590929514590bc1a210fa9f", 0xe5}, {&(0x7f00000079c0)="6f2b1eacd47eda04fb6ade617cca845fa057be8755bcac2a306420fdf34b773d4b327dc1b80e1357f5c2fe1dae418af36dc57748ffd634af0575a9cda7cf532e871cc1704f5cf67e03110cd099612e8d80480f632c45acdafcc89086796f2476b16166e0d193532758b87382c5c9d72d1f9ba4cfb8dbc2a8e926db062c88bb10f1b14f2e7171717bf425b250bf2d5307744e953d2cc4189fb8f71e520e28a360a540a2cfe655e96c9f057c9f38efc5a232d06278c010389ea7623c3d12d33c33eb", 0xc1}, {&(0x7f0000007ac0)="43a14591001de5d666b89510c83c3940c511f9ba6b44b09960071ded58a1742b50030932e816316b8bc182d4713b71436d988b7e10cda90f2b883317a0ac33bb6268dac931498266a28f82282aad7c65d8b00fbbcb93077cda86bc605a814cb0d64b1d69be4a451ef592297b9dce83fc4275f4fb0252134b7f8b598e7d0909ec4f2e3888", 0x84}], 0x8, &(0x7f0000009c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r8, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fcffffffffffffff0100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32=r4], 0xe8, 0x4000}}], 0x7, 0x8008000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="130ffcffffff00000000070000000c0002800800020005000100"], 0x20}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_wait(r10, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) 2.297270659s ago: executing program 0 (id=1586): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a7ed577a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='fuseblk\x00', 0x200011, 0x0) 1.714860494s ago: executing program 2 (id=1587): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bf78e35133b5fc714a81430bf8e448969c88d0f1aa9fd8ec"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0d7844a34186eff2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="270a1efa76923d664078cc388e748c49"}]}]}, 0x7c}}, 0x8880) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @sdr}) 1.228378875s ago: executing program 2 (id=1588): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000421c17403767010052b1010203010902120001000000630c000904080000c2223600"], 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x400000000000221) socket$l2tp6(0xa, 0x2, 0x73) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000340)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000380)=0x2c) sigaltstack(&(0x7f0000000580)={&(0x7f00000004c0)=""/173, 0x80000002, 0xad}, &(0x7f00000005c0)={&(0x7f0000000800)=""/4096, 0x0, 0x1000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) 1.170225473s ago: executing program 0 (id=1589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0) gettid() syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000003c0)='rxrpc\x00', 0x0, &(0x7f0000000440)="67f59d399cd12590212fa1b2fd5a8c48785011add8ca6e72d73a0fb39cea5e03b6e09436ee52a927", 0x28, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x5ea4, 0x1, 0x2ae2, 0x7ff, 0x9, 0x1, 0x40}, 0x20) socket$kcm(0x10, 0x2, 0x0) 1.122492089s ago: executing program 4 (id=1590): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x5) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="0000000200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2, "fffc"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 560.380435ms ago: executing program 4 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xb, &(0x7f0000000300)={0x5, 0xe58}, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000002c0)={0x20, r2}, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000480), 0x8, 0x80400) bind$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82c, 0x0, 0x81}) 72.47777ms ago: executing program 4 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0xd8) io_uring_enter(r3, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x1) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f00000001c0)) read$dsp(r9, &(0x7f0000000200)=""/168, 0xa8) 69.992442ms ago: executing program 1 (id=1593): r0 = socket$inet6(0xa, 0x80002, 0x87) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001240), 0x800, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xfffffffc, 0x2000}, &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="07001500030200000c8c00164c080001bfdc2f16e19c7813cd214f3a0e58b400f669b4d5261e03da4ad9762b83f0b7cb316d521864ddb5e0107c35f86d29914678"], 0x38}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x123, 0x0) socket(0x15, 0x5, 0x5e4b4313) 0s ago: executing program 0 (id=1594): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0xb00, 0x5, 0x8, 0x7, 0x3, 0x7ff}) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.1099'. [ 498.523421][ T29] audit: type=1400 audit(1737286656.576:903): avc: denied { write } for pid=10434 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 499.126428][ T5867] usb 1-1: USB disconnect, device number 44 [ 499.510533][ T29] audit: type=1326 audit(1737286657.586:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b3b85d29 code=0x7fc00000 [ 499.616644][T10456] trusted_key: encrypted_key: insufficient parameters specified [ 500.091605][ T5869] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 500.112118][ T29] audit: type=1326 audit(1737286657.596:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57b3b85d29 code=0x7fc00000 [ 500.133219][T10458] warning: `syz.4.1103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 500.283956][ T29] audit: type=1326 audit(1737286657.596:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.2.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b3b85d29 code=0x7fc00000 [ 500.420323][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 500.431478][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.462093][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.610304][ T5869] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 500.619675][T10467] ./cgroup: Can't lookup blockdev [ 500.636598][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.661740][ T5869] usb 4-1: config 0 descriptor?? [ 501.279845][T10477] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 501.288425][T10477] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 501.298094][T10477] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 501.400185][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 501.406199][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.447180][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454829][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.490373][ T5869] usb 4-1: USB disconnect, device number 48 [ 502.100246][ T5843] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 502.325332][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 502.358758][ T29] audit: type=1326 audit(1737286660.416:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db785d29 code=0x7fc00000 [ 502.518007][ T5843] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 502.526211][ T5843] usb 2-1: config 0 has no interface number 0 [ 502.534663][ T5843] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 502.543866][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.553446][ T5843] usb 2-1: Product: syz [ 502.557741][ T5843] usb 2-1: Manufacturer: syz [ 502.567174][ T5843] usb 2-1: SerialNumber: syz [ 502.578779][ T5843] usb 2-1: config 0 descriptor?? [ 502.587006][ T5843] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 502.610344][ T5869] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 502.786866][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.817259][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.886121][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.897695][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 502.935019][T10502] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1112'. [ 502.944215][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'. [ 503.473603][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 503.498777][ T5843] usb 2-1: qt2_attach - failed to power on unit: -71 [ 503.499376][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 503.516081][ T5843] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 503.524991][ T5868] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 503.543632][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.563538][ T5843] usb 2-1: USB disconnect, device number 35 [ 503.629918][ T5869] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 503.639496][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.647623][ T5869] usb 4-1: Product: syz [ 503.651952][ T5869] usb 4-1: Manufacturer: syz [ 503.656612][ T5869] usb 4-1: SerialNumber: syz [ 503.837547][ T5869] usb 4-1: config 0 descriptor?? [ 503.864365][T10493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 504.008734][ T5868] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 504.018644][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.046613][ T5868] usb 5-1: config 0 descriptor?? [ 504.075071][ T5868] usb 5-1: selecting invalid altsetting 3 [ 504.084758][ T5868] comedi comedi0: could not set alternate setting 3 in high speed [ 504.092669][ T5868] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 504.103717][ T5868] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 504.277810][ T5869] rc_core: IR keymap rc-xbox-dvd not found [ 504.312545][T10514] trusted_key: encrypted_key: insufficient parameters specified [ 505.095937][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 505.268484][ T5868] usb 5-1: USB disconnect, device number 28 [ 505.527963][ T5869] Registered IR keymap rc-empty [ 505.550676][ T5869] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 505.570343][ T5869] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 505.847087][ T5869] usb 4-1: USB disconnect, device number 49 [ 505.853085][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 506.859957][T10534] syz.1.1120[10534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.860044][T10534] syz.1.1120[10534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.872013][T10534] syz.1.1120[10534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.911549][T10534] lo speed is unknown, defaulting to 1000 [ 508.090576][ T5869] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 508.315736][ T5869] usb 4-1: device descriptor read/64, error -71 [ 509.110923][T10557] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1125'. [ 509.120138][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 510.727834][ T29] audit: type=1326 audit(1737286668.796:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.790259][ T29] audit: type=1326 audit(1737286668.806:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.814538][ T29] audit: type=1326 audit(1737286668.806:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.839282][ T29] audit: type=1326 audit(1737286668.806:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.901082][ T29] audit: type=1326 audit(1737286668.806:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.942410][ T29] audit: type=1326 audit(1737286668.806:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 510.950360][ T5868] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 510.996581][ T29] audit: type=1326 audit(1737286668.806:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 511.020188][ T29] audit: type=1326 audit(1737286668.806:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 511.020223][ T29] audit: type=1326 audit(1737286668.806:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 511.020252][ T29] audit: type=1326 audit(1737286668.806:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a23f85d29 code=0x7ffc0000 [ 511.049802][ T5909] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 511.140482][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 511.140655][T10576] ./cgroup: Can't lookup blockdev [ 511.160966][ T5868] usb 5-1: config 2 has an invalid interface number: 123 but max is 0 [ 511.219319][ T5868] usb 5-1: config 2 has no interface number 0 [ 511.225732][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.226237][ T5868] usb 5-1: config 2 interface 123 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 511.236536][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 511.422354][ T5868] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=42.00 [ 511.429844][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 511.440129][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.447405][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 511.560687][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.560931][ T5868] usb 5-1: Product: syz [ 511.617321][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 511.631377][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.649630][ T5868] usb 5-1: Manufacturer: syz [ 511.679411][ T5909] usb 1-1: Product: syz [ 511.690183][ T5868] usb 5-1: SerialNumber: syz [ 511.701030][ T5909] usb 1-1: Manufacturer: syz [ 511.705654][ T5909] usb 1-1: SerialNumber: syz [ 511.756111][ T5909] usb 1-1: config 0 descriptor?? [ 511.779608][T10569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 512.082211][T10566] kAFS: No cell specified [ 512.490245][ T5909] rc_core: IR keymap rc-xbox-dvd not found [ 512.496142][ T5909] Registered IR keymap rc-empty [ 512.541358][ T25] usb 5-1: USB disconnect, device number 29 [ 512.559836][ T5909] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 512.575857][ T5909] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40 [ 512.596338][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 512.605819][ T5909] usb 1-1: USB disconnect, device number 45 [ 512.634317][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.641977][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.655388][T10591] bridge0: entered allmulticast mode [ 512.858828][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.866201][T10591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.874068][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.881435][T10591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.890691][T10591] bridge0: entered promiscuous mode [ 514.196825][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 514.329321][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 514.340225][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 514.390246][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 514.399368][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.413307][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.423557][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.440190][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.492436][ T9] usb 5-1: config 0 descriptor?? [ 514.500696][ T9] hub 5-1:0.0: USB hub found [ 514.878058][T10614] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1139'. [ 514.887243][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'. [ 515.218502][T10622] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 515.230412][T10622] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 515.257375][T10617] lo speed is unknown, defaulting to 1000 [ 515.387183][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 515.420767][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 515.426765][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 515.484919][ T9] usb 5-1: USB disconnect, device number 30 [ 515.849583][T10628] ./cgroup: Can't lookup blockdev [ 516.379690][T10637] lo speed is unknown, defaulting to 1000 [ 516.903638][ T25] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 516.903772][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 517.155983][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.167620][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 517.388736][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 517.635548][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 517.687174][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.698619][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.743954][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.753820][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.767064][ T9] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 517.776553][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.807834][ T9] usb 5-1: config 0 descriptor?? [ 517.846334][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 517.855581][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.863747][ T25] usb 2-1: Product: syz [ 517.867952][ T25] usb 2-1: Manufacturer: syz [ 517.872639][ T25] usb 2-1: SerialNumber: syz [ 517.879340][ T25] usb 2-1: config 0 descriptor?? [ 517.962688][T10642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 518.320145][ T25] rc_core: IR keymap rc-xbox-dvd not found [ 518.326016][ T25] Registered IR keymap rc-empty [ 518.332294][ T25] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 518.351429][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 518.567783][ T9] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 518.580587][ T25] usb 2-1: USB disconnect, device number 36 [ 518.586520][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 518.698827][ T9] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 518.712816][T10669] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1154'. [ 518.721890][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 518.746759][ T9] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 518.960149][ T9] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 519.015617][ T9] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 519.085595][T10676] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 519.094002][T10676] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 519.102737][T10676] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 519.152772][ T9] gt683r_led 0003:1770:FF00.000C: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 519.270890][ T9] usb 5-1: USB disconnect, device number 31 [ 519.360449][ T5843] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 519.478365][T10683] ./cgroup: Can't lookup blockdev [ 520.645353][T10693] lo speed is unknown, defaulting to 1000 [ 521.782895][T10703] lo speed is unknown, defaulting to 1000 [ 521.961326][T10707] bad cache= option: no%e [ 521.961326][T10707] [ 521.980348][T10707] CIFS: VFS: bad cache= option: no%e [ 522.991010][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.002708][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.019879][T10726] bridge0: left promiscuous mode [ 523.357348][T10737] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 523.382541][T10737] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 523.395893][T10737] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 524.380465][T10670] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 524.637100][T10670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.660253][T10670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.793146][T10758] ./cgroup: Can't lookup blockdev [ 525.060106][T10670] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.109342][T10670] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 525.170710][T10670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.188912][T10670] usb 1-1: config 0 descriptor?? [ 525.469617][T10766] ./cgroup: Can't lookup blockdev [ 525.690001][T10670] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 525.697412][T10670] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 525.709330][T10670] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 525.730012][T10670] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 526.442861][T10670] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 526.455287][T10670] gt683r_led 0003:1770:FF00.000D: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 527.021003][T10781] bad cache= option: no%e [ 527.021003][T10781] [ 527.027543][T10781] CIFS: VFS: bad cache= option: no%e [ 527.053842][T10670] usb 1-1: USB disconnect, device number 46 [ 527.084307][ T25] gt683r_led 0003:1770:FF00.000D: failed to send set report request: -19 [ 527.209213][T10786] ./cgroup: Can't lookup blockdev [ 527.380701][ T5868] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 527.998792][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 527.998808][ T29] audit: type=1400 audit(1737286686.076:928): avc: denied { ioctl } for pid=10788 comm="syz.2.1181" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.240403][T10800] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 529.248998][T10800] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 529.257767][T10800] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 529.771588][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 531.430027][T10815] lo speed is unknown, defaulting to 1000 [ 534.695187][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 535.890618][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.897928][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.966576][T10851] ./cgroup: Can't lookup blockdev [ 536.233237][T10848] bridge0: left promiscuous mode [ 536.241344][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.248501][T10840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.255842][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.262902][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.270334][T10840] bridge0: entered promiscuous mode [ 536.349813][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.356969][T10843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.364304][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.371386][T10843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.379259][T10843] bridge0: entered promiscuous mode [ 537.119319][T10863] lo speed is unknown, defaulting to 1000 [ 537.295487][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.302722][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.313593][T10868] bridge0: left promiscuous mode [ 537.507314][T10868] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.514490][T10868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.521808][T10868] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.528849][T10868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.536568][T10868] bridge0: entered promiscuous mode [ 537.972757][T10876] ./cgroup: Can't lookup blockdev [ 538.351135][ T29] audit: type=1400 audit(1737286696.411:929): avc: denied { audit_control } for pid=10879 comm="syz.4.1204" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 538.377299][T10862] syz.2.1199[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.377356][T10862] syz.2.1199[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.412562][T10862] syz.2.1199[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.508116][T10862] lo speed is unknown, defaulting to 1000 [ 538.889456][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 539.270244][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 539.432825][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.450186][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.480182][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 539.504101][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.535218][ T9] usb 5-1: config 0 descriptor?? [ 539.604048][T10902] bad cache= option: no%e [ 539.604048][T10902] [ 539.622846][T10902] CIFS: VFS: bad cache= option: no%e [ 540.127968][T10905] lo speed is unknown, defaulting to 1000 [ 540.262412][ T9] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 540.270227][ T9] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 540.299063][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000F/input/input42 [ 540.421226][ T9] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 541.570992][ T5843] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 542.275809][ T4903] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz1 [ 542.892380][ T5867] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 543.112296][ T5867] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 543.126263][ T5867] usb 4-1: config 0 has no interface number 0 [ 543.132728][ T5867] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 543.156070][ T5867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 543.193277][ T5867] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 543.232887][ T5867] usb 4-1: Product: syz [ 543.262539][ T5867] usb 4-1: Manufacturer: syz [ 543.267281][ T5867] usb 4-1: SerialNumber: syz [ 543.291162][ T5867] usb 4-1: config 0 descriptor?? [ 543.830755][ T5867] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 543.839318][ T5867] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 543.854441][ T5867] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 543.864014][ T5867] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 543.872921][ T5867] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 543.883013][ T5867] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 543.892022][ T5867] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 543.999988][ T5867] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 544.008966][ T5867] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 544.020866][ T9] usb 5-1: USB disconnect, device number 32 [ 544.033161][ T5867] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 544.069049][ T5867] usb 4-1: USB disconnect, device number 52 [ 544.119176][T10946] FAULT_INJECTION: forcing a failure. [ 544.119176][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 544.137086][T10944] block device autoloading is deprecated and will be removed. [ 544.153970][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.0.1220 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 544.153996][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 544.154009][T10946] Call Trace: [ 544.154016][T10946] [ 544.154025][T10946] dump_stack_lvl+0x16c/0x1f0 [ 544.154056][T10946] should_fail_ex+0x497/0x5b0 [ 544.154084][T10946] ? find_held_lock+0x2d/0x110 [ 544.154113][T10946] should_failslab+0xc2/0x120 [ 544.154137][T10946] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 544.154161][T10946] ? __alloc_skb+0x2b1/0x380 [ 544.154191][T10946] __alloc_skb+0x2b1/0x380 [ 544.154217][T10946] ? __pfx___alloc_skb+0x10/0x10 [ 544.154247][T10946] ? if_nlmsg_size+0x45d/0xa70 [ 544.154276][T10946] rtmsg_ifinfo_build_skb+0x81/0x280 [ 544.154301][T10946] rtmsg_ifinfo+0x9f/0x1a0 [ 544.154326][T10946] __dev_notify_flags+0x24e/0x2e0 [ 544.154354][T10946] ? __pfx___dev_notify_flags+0x10/0x10 [ 544.154384][T10946] ? __pfx___dev_change_flags+0x10/0x10 [ 544.154411][T10946] ? __pfx___mutex_trylock_common+0x10/0x10 [ 544.154433][T10946] ? dev_ioctl+0x213/0x10c0 [ 544.154460][T10946] dev_change_flags+0x10c/0x160 [ 544.154488][T10946] dev_ifsioc+0x9c8/0x10b0 [ 544.154513][T10946] ? __pfx_dev_ifsioc+0x10/0x10 [ 544.154537][T10946] ? __pfx___mutex_lock+0x10/0x10 [ 544.154565][T10946] ? __pfx_lock_release+0x10/0x10 [ 544.154588][T10946] ? full_name_hash+0xbc/0x110 [ 544.154619][T10946] dev_ioctl+0x224/0x10c0 [ 544.154645][T10946] sock_do_ioctl+0x19e/0x280 [ 544.154669][T10946] ? __pfx_sock_do_ioctl+0x10/0x10 [ 544.154698][T10946] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 544.154724][T10946] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 544.154751][T10946] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 544.154781][T10946] sock_ioctl+0x228/0x6c0 [ 544.154805][T10946] ? __pfx_sock_ioctl+0x10/0x10 [ 544.154836][T10946] ? selinux_file_ioctl+0x180/0x270 [ 544.154859][T10946] ? selinux_file_ioctl+0xb4/0x270 [ 544.154889][T10946] ? __pfx_sock_ioctl+0x10/0x10 [ 544.154913][T10946] __x64_sys_ioctl+0x190/0x200 [ 544.154941][T10946] do_syscall_64+0xcd/0x250 [ 544.154968][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.154993][T10946] RIP: 0033:0x7f6945f85d29 [ 544.155010][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.155028][T10946] RSP: 002b:00007f6946d8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.155048][T10946] RAX: ffffffffffffffda RBX: 00007f6946175fa0 RCX: 00007f6945f85d29 [ 544.155063][T10946] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 544.155076][T10946] RBP: 00007f6946d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 544.155088][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.155100][T10946] R13: 0000000000000000 R14: 00007f6946175fa0 R15: 00007ffc17fcd588 [ 544.155128][T10946] [ 544.794446][ T5867] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 544.796455][ T5867] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 544.798384][ T5867] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 544.800356][ T5867] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 544.800778][ T5867] keyspan 4-1:0.107: device disconnected [ 546.073052][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 546.361603][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 546.372808][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 546.470353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 546.481624][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 546.556113][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 546.812852][ T9] usb 2-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 546.824173][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.832314][ T9] usb 2-1: Product: syz [ 546.837706][ T9] usb 2-1: Manufacturer: syz [ 547.682264][ T9] usb 2-1: SerialNumber: syz [ 547.719063][ T9] usb 2-1: config 0 descriptor?? [ 547.754789][ T9] usb 2-1: can't set config #0, error -71 [ 548.032926][T10975] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1226'. [ 548.042113][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1226'. [ 548.526599][ T9] usb 2-1: USB disconnect, device number 37 [ 549.140239][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 549.235339][T10976] bad cache= option: no%e [ 549.235339][T10976] [ 549.254919][T10976] CIFS: VFS: bad cache= option: no%e [ 549.280164][ T5869] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 549.291857][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.306449][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.333880][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.365768][ T8] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 549.395409][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.412850][ T8] usb 1-1: config 0 descriptor?? [ 549.434683][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.450440][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.470168][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.483165][ T5869] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 549.492334][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.515254][ T5869] usb 5-1: config 0 descriptor?? [ 550.230989][ T8] gt683r_led 0003:1770:FF00.0011: unknown main item tag 0x0 [ 550.238381][ T8] gt683r_led 0003:1770:FF00.0011: unknown main item tag 0x0 [ 550.245773][ T8] gt683r_led 0003:1770:FF00.0011: unknown main item tag 0x0 [ 550.253161][ T8] gt683r_led 0003:1770:FF00.0011: unknown main item tag 0x0 [ 550.260628][ T8] gt683r_led 0003:1770:FF00.0011: unknown main item tag 0x0 [ 550.277540][ T8] gt683r_led 0003:1770:FF00.0011: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 550.401846][ T5869] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 550.409199][ T5869] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 550.416776][ T5869] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 550.424409][ T5869] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 550.432001][ T5869] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 550.604828][ T5869] gt683r_led 0003:1770:FF00.0012: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 552.083827][ T5869] usb 1-1: USB disconnect, device number 47 [ 552.150582][T10670] gt683r_led 0003:1770:FF00.0011: failed to send set report request: -19 [ 552.162413][T10670] gt683r_led 0003:1770:FF00.0011: failed to send set report request: -19 [ 552.731904][T10670] usb 5-1: USB disconnect, device number 33 [ 552.758064][ T25] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 553.064316][T11021] lo speed is unknown, defaulting to 1000 [ 553.367816][T11036] Trying to write to read-only block-device nullb0 [ 553.420220][T11036] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 553.461062][ T29] audit: type=1400 audit(1737286711.443:930): avc: denied { map } for pid=11034 comm="syz.2.1239" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 553.584018][ T29] audit: type=1400 audit(1737286711.443:931): avc: denied { execute } for pid=11034 comm="syz.2.1239" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 553.598823][T11025] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 553.617498][T11025] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 553.625971][T11025] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 553.980673][T11043] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 554.009509][T11048] FAULT_INJECTION: forcing a failure. [ 554.009509][T11048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.036773][T11048] CPU: 1 UID: 0 PID: 11048 Comm: syz.1.1240 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 554.047547][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 554.057617][T11048] Call Trace: [ 554.060899][T11048] [ 554.063837][T11048] dump_stack_lvl+0x16c/0x1f0 [ 554.068529][T11048] should_fail_ex+0x497/0x5b0 [ 554.073219][T11048] _copy_to_user+0x32/0xd0 [ 554.077637][T11048] simple_read_from_buffer+0xd0/0x160 [ 554.082999][T11048] proc_fail_nth_read+0x198/0x270 [ 554.088011][T11048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.093544][T11048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.099075][T11048] vfs_read+0x1df/0xbe0 [ 554.103211][T11048] ? __fget_files+0x1fc/0x3a0 [ 554.107889][T11048] ? __pfx___mutex_lock+0x10/0x10 [ 554.112908][T11048] ? __pfx_vfs_read+0x10/0x10 [ 554.117571][T11048] ? __fget_files+0x206/0x3a0 [ 554.122235][T11048] ksys_read+0x12b/0x250 [ 554.126464][T11048] ? __pfx_ksys_read+0x10/0x10 [ 554.131213][T11048] do_syscall_64+0xcd/0x250 [ 554.135703][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.141594][T11048] RIP: 0033:0x7fa688b8473c [ 554.146000][T11048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 554.165600][T11048] RSP: 002b:00007fa6899f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.174002][T11048] RAX: ffffffffffffffda RBX: 00007fa688d75fa0 RCX: 00007fa688b8473c [ 554.181960][T11048] RDX: 000000000000000f RSI: 00007fa6899f80a0 RDI: 0000000000000003 [ 554.189916][T11048] RBP: 00007fa6899f8090 R08: 0000000000000000 R09: 0000000000000000 [ 554.197872][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.205830][T11048] R13: 0000000000000001 R14: 00007fa688d75fa0 R15: 00007ffe418c5888 [ 554.213802][T11048] [ 554.231516][T11043] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 554.239965][T11043] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 554.894805][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 555.674733][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 556.421660][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 556.430622][ T9] usb 5-1: config 0 has no interface number 0 [ 556.436745][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 556.448688][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 556.459904][T11089] bad cache= option: no%e [ 556.459904][T11089] [ 556.644248][T11089] CIFS: VFS: bad cache= option: no%e [ 557.420025][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.441044][ T9] usb 5-1: config 0 descriptor?? [ 557.480123][ T29] audit: type=1326 audit(1737286715.553:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db785d29 code=0x7fc00000 [ 557.936535][T11093] ip6t_srh: unknown srh invflags 7D00 [ 557.976362][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 557.995960][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 558.133239][ T9] usb 5-1: USB disconnect, device number 34 [ 558.260197][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 558.700284][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 558.706905][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 558.810697][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.830582][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.845609][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 558.856887][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 558.867016][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 558.876108][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.910966][ T8] usb 3-1: config 0 descriptor?? [ 558.918151][T11093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 559.304347][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.315539][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.070258][T11113] input: syz0 as /devices/virtual/input/input43 [ 560.262976][T11120] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 560.327027][T11120] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 560.366357][T11120] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 561.027857][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 561.117842][ T8] usb 3-1: USB disconnect, device number 34 [ 561.279409][T11138] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 561.330166][ T5869] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 561.480379][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 561.495169][ T5869] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 561.508124][T11140] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.513895][ T5869] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 561.515313][T11140] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.552623][T11140] bridge0: left promiscuous mode [ 561.569376][ T5869] usb 4-1: config 0 has no interface number 0 [ 561.729029][ T5869] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.750834][T11140] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.755738][ T5869] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 561.757996][T11140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.767126][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 561.774356][T11140] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.782400][ T5869] usb 4-1: Product: syz [ 561.789425][T11140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.793575][ T5869] usb 4-1: SerialNumber: syz [ 561.806220][T11140] bridge0: entered promiscuous mode [ 561.871675][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 561.919843][ T5869] usb 4-1: config 0 descriptor?? [ 561.928360][ T5869] cm109 4-1:0.8: invalid payload size 239, expected 4 [ 561.938316][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input44 [ 562.100155][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 562.107247][ T8] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 562.116856][ T8] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 562.195634][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 562.212619][ T8] usb 3-1: config 0 has no interface number 0 [ 562.247137][ T8] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.271933][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 562.522673][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 562.820182][ T8] usb 3-1: Product: syz [ 562.865244][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.871724][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.909558][ T8] usb 3-1: SerialNumber: syz [ 562.921036][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 562.928294][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.935398][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.942479][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.949603][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.956832][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.963951][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.968616][ T8] usb 3-1: config 0 descriptor?? [ 562.971125][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.983342][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.990452][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 562.997588][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 563.004775][ T4903] usb 4-1: USB disconnect, device number 53 [ 563.010761][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 563.021041][ T8] cm109 3-1:0.8: invalid payload size 239, expected 4 [ 563.029006][ T4903] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 563.031125][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input45 [ 563.632914][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 563.633215][ T5869] usb 3-1: USB disconnect, device number 35 [ 563.639885][ C0] cm109 3-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 563.718855][ T5869] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 563.738877][T11163] bad cache= option: no%e [ 563.738877][T11163] [ 563.755182][T11163] CIFS: VFS: bad cache= option: no%e [ 564.210344][ T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 564.424694][ T29] audit: type=1400 audit(1737286722.503:933): avc: denied { write } for pid=11167 comm="syz.0.1267" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 565.173382][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.184458][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.194361][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.207219][ T8] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 565.216392][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.226207][ T8] usb 5-1: config 0 descriptor?? [ 565.266997][T11173] ip6t_srh: unknown srh invflags 7D00 [ 566.066111][ T8] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 566.147884][ T8] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 566.155326][ T8] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 566.162978][ T8] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 566.170679][ T8] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 566.184692][ T8] gt683r_led 0003:1770:FF00.0013: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 566.240660][ T5843] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 566.251589][T11182] ip6t_REJECT: ECHOREPLY is not supported [ 566.357487][ T8] usb 5-1: USB disconnect, device number 35 [ 566.460337][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 566.512355][ T9] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19 [ 566.533879][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 566.661454][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.723945][ T5843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 566.726631][T11190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.745918][T11190] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 566.780616][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 566.798060][ T5843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 566.808197][ T5843] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 566.817482][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.849566][ T5843] usb 3-1: config 0 descriptor?? [ 566.858716][T11173] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 567.130900][ T5869] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 567.131056][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.215857][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.438335][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.449438][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.463301][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 567.475544][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.102034][ T5869] usb 4-1: config 0 descriptor?? [ 568.188978][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.209835][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.226919][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.236773][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.246471][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.256206][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.265893][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.275629][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.285335][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.295072][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.304785][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.314527][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.324229][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.335491][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.345221][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.354925][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.364655][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.374519][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.384291][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.393995][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.403712][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.413420][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.423154][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.432849][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.442563][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.452253][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.461887][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.471471][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.481223][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.491411][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.501168][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.511709][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.521460][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.537540][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.547415][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.558186][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.568589][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.578440][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.588297][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.598666][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.608786][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.618633][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.628597][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.638500][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.648405][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.658239][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.668281][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.677995][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.687762][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.697471][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.707225][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.716955][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.726706][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.820453][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.836510][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.848232][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.873703][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.904453][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.932095][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.955912][ T5869] appleir 0003:05AC:8241.0014: No inputs registered, leaving [ 568.966128][ T5869] appleir 0003:05AC:8241.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 568.987720][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 568.999572][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 569.011848][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 569.032571][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 569.053124][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 569.104343][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 569.118315][T11199] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 569.143573][ T5869] usb 3-1: USB disconnect, device number 36 [ 569.210119][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.222190][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.228443][ T29] audit: type=1400 audit(1737286727.303:934): avc: denied { view } for pid=11208 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 569.679364][ T5843] usb 4-1: USB disconnect, device number 54 [ 569.800146][ T29] audit: type=1400 audit(1737286727.843:935): avc: denied { setopt } for pid=11211 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 570.074312][T11220] ./cgroup: Can't lookup blockdev [ 570.378563][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 570.634013][T11227] ./cgroup: Can't lookup blockdev [ 570.750311][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 570.849902][T11230] lo speed is unknown, defaulting to 1000 [ 570.950022][ T8] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 571.110775][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 571.118832][ T8] usb 5-1: config 0 has no interface number 0 [ 571.130800][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.210022][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 571.219245][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 571.227422][ T8] usb 5-1: Product: syz [ 571.231777][ T8] usb 5-1: SerialNumber: syz [ 571.261542][ T8] usb 5-1: config 0 descriptor?? [ 571.291767][ T8] cm109 5-1:0.8: invalid payload size 239, expected 4 [ 571.309875][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input46 [ 571.580253][ T4903] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 571.701489][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.715774][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.736315][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 571.736624][ T5869] usb 5-1: USB disconnect, device number 36 [ 571.743270][ C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 571.759848][ T4903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.770943][ T4903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 571.783557][ T4903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 571.799335][ T5869] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 571.807988][ T4903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 571.835957][ T4903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.853467][ T4903] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 571.865662][ T4903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.917065][ T4903] usb 3-1: Product: syz [ 571.921506][ T4903] usb 3-1: Manufacturer: syz [ 571.926122][ T4903] usb 3-1: SerialNumber: syz [ 571.957084][ T4903] usb 3-1: config 0 descriptor?? [ 571.963739][T11236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 572.029766][ T4903] rc_core: IR keymap rc-xbox-dvd not found [ 572.036292][ T4903] Registered IR keymap rc-empty [ 572.056681][ T4903] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 572.084853][ T4903] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 572.109750][T11247] FAULT_INJECTION: forcing a failure. [ 572.109750][T11247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.130384][T11247] CPU: 0 UID: 0 PID: 11247 Comm: syz.1.1291 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 572.141164][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 572.151253][T11247] Call Trace: [ 572.154539][T11247] [ 572.157476][T11247] dump_stack_lvl+0x16c/0x1f0 [ 572.162171][T11247] should_fail_ex+0x497/0x5b0 [ 572.166869][T11247] _copy_to_user+0x32/0xd0 [ 572.171301][T11247] simple_read_from_buffer+0xd0/0x160 [ 572.176691][T11247] proc_fail_nth_read+0x198/0x270 [ 572.181734][T11247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.187301][T11247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.192863][T11247] vfs_read+0x1df/0xbe0 [ 572.197028][T11247] ? __fget_files+0x1fc/0x3a0 [ 572.201720][T11247] ? __pfx___mutex_lock+0x10/0x10 [ 572.206761][T11247] ? __pfx_vfs_read+0x10/0x10 [ 572.211463][T11247] ? __fget_files+0x206/0x3a0 [ 572.216161][T11247] ksys_read+0x12b/0x250 [ 572.220414][T11247] ? __pfx_ksys_read+0x10/0x10 [ 572.225198][T11247] do_syscall_64+0xcd/0x250 [ 572.229720][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.235631][T11247] RIP: 0033:0x7fa688b8473c [ 572.240140][T11247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 572.259759][T11247] RSP: 002b:00007fa6899d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.268174][T11247] RAX: ffffffffffffffda RBX: 00007fa688d76080 RCX: 00007fa688b8473c [ 572.276152][T11247] RDX: 000000000000000f RSI: 00007fa6899d70a0 RDI: 0000000000000003 [ 572.285946][T11247] RBP: 00007fa6899d7090 R08: 0000000000000000 R09: 0000000000000000 [ 572.293910][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.301871][T11247] R13: 0000000000000001 R14: 00007fa688d76080 R15: 00007ffe418c5888 [ 572.309855][T11247] [ 572.449134][ T8] usb 3-1: USB disconnect, device number 37 [ 572.449275][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 573.958242][T11267] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1299'. [ 573.974112][T11267] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 574.247627][ T29] audit: type=1400 audit(1737286732.322:936): avc: denied { getopt } for pid=11264 comm="syz.1.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.253643][T11271] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1298'. [ 574.421620][T11265] geneve1: entered promiscuous mode [ 574.504362][T11264] geneve1: left promiscuous mode [ 575.458501][T11295] ./cgroup: Can't lookup blockdev [ 575.699158][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.706621][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.714710][T11304] bridge0: left promiscuous mode [ 575.861909][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.869227][T11304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.877088][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.884482][T11304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.896703][T11304] bridge0: entered promiscuous mode [ 576.000353][ T4903] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 576.952629][T11313] input: syz1 as /devices/virtual/input/input48 [ 577.238382][ T4903] usb 3-1: Using ep0 maxpacket: 16 [ 577.320156][ T4903] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 577.328493][ T4903] usb 3-1: config 5 has no interface number 0 [ 577.334733][ T4903] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 577.346461][ T4903] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 577.356855][ T4903] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 577.366982][ T4903] usb 3-1: config 5 interface 168 has no altsetting 0 [ 577.780448][ T4903] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 577.790165][T11321] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1312'. [ 577.791793][ T4903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.822543][ T4903] usb 3-1: Product: syz [ 577.835018][ T4903] usb 3-1: Manufacturer: syz [ 577.839856][ T4903] usb 3-1: SerialNumber: syz [ 577.920418][T11287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.929647][T11287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.099575][ C1] usb 3-1: NFC: Urb failure (status -71) [ 578.424278][ T8] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz1 [ 578.776839][ C1] usb 3-1: NFC: Urb failure (status -71) [ 578.849657][T11333] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 578.859508][ T4903] usb 3-1: NFC: Unable to get FW version [ 578.875187][ T4903] pn533_usb 3-1:5.168: probe with driver pn533_usb failed with error -71 [ 578.877241][T11333] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1314'. [ 578.892339][ T4903] usb 3-1: USB disconnect, device number 38 [ 579.073539][ T8] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 579.248410][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 579.291729][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.404381][T11344] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1316'. [ 579.413796][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 579.901810][ T29] audit: type=1400 audit(1737286737.982:937): avc: denied { read } for pid=11340 comm="syz.2.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 579.903071][T11345] tmpfs: Bad value for 'mpol' [ 579.926341][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 580.069525][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 580.159534][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.190309][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=255 [ 580.209098][ T8] usb 1-1: Product: syz [ 580.215061][ T8] usb 1-1: Manufacturer: syz [ 580.250153][ T8] usb 1-1: SerialNumber: syz [ 580.717317][ T8] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 580.725501][ T8] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 580.922658][ T8] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 580.968242][ T8] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 581.520169][ T8] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 581.528878][ T8] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 581.649800][ T8] usb 1-1: USB disconnect, device number 48 [ 581.831560][ T29] audit: type=1400 audit(1737286739.912:938): avc: granted { setsecparam } for pid=11357 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 582.050240][T11365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.052682][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.102790][T11370] ./cgroup: Can't lookup blockdev [ 582.136064][T11358] can: request_module (can-proto-4) failed. [ 582.268400][T11372] lo speed is unknown, defaulting to 1000 [ 583.215373][ T29] audit: type=1400 audit(1737286741.222:939): avc: denied { sqpoll } for pid=11379 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 583.234806][ T29] audit: type=1400 audit(1737286741.292:940): avc: denied { getattr } for pid=11379 comm="syz.1.1327" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 583.560615][ T29] audit: type=1400 audit(1737286741.622:941): avc: denied { ioctl } for pid=11385 comm="syz.4.1328" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 583.873886][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 583.890909][ T25] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 584.177279][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.226809][T11406] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1329'. [ 584.235968][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 584.258050][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 584.503371][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 584.660196][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 584.680256][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.722025][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 584.804201][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.812310][ T25] usb 1-1: Product: syz [ 584.816486][ T25] usb 1-1: Manufacturer: syz [ 584.821297][ T25] usb 1-1: SerialNumber: syz [ 584.829160][ T25] usb 1-1: config 0 descriptor?? [ 584.835550][T11389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 584.890142][ T25] rc_core: IR keymap rc-xbox-dvd not found [ 584.896028][ T25] Registered IR keymap rc-empty [ 584.903256][ T25] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 584.920191][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 584.921050][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 585.460155][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 585.515283][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.530510][ T8] usb 5-1: config 0 has no interface number 0 [ 585.549758][ T8] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 585.592869][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.611324][ T8] usb 5-1: Product: syz [ 585.621744][ T8] usb 5-1: Manufacturer: syz [ 585.626734][ T8] usb 5-1: SerialNumber: syz [ 586.012882][ T8] usb 5-1: config 0 descriptor?? [ 586.057945][ T8] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 586.080398][ T9] usb 1-1: USB disconnect, device number 49 [ 586.080439][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 586.104853][ T8] usb 5-1: selecting invalid altsetting 1 [ 586.120842][ T8] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 586.135942][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 586.160391][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 586.198465][ T8] usb 5-1: media controller created [ 586.288066][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.866316][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.873427][T11419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.880765][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.887804][T11419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.895227][T11419] bridge0: entered promiscuous mode [ 586.966015][ T29] audit: type=1400 audit(1737286745.022:942): avc: denied { read } for pid=11423 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.012457][ T29] audit: type=1400 audit(1737286745.072:943): avc: denied { read } for pid=11423 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 587.239344][ T29] audit: type=1400 audit(1737286745.312:944): avc: denied { ioctl } for pid=11426 comm="syz.1.1340" path="socket:[30070]" dev="sockfs" ino=30070 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 587.264318][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.974340][T11437] FAULT_INJECTION: forcing a failure. [ 587.974340][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 587.987107][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.3.1342 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 587.997881][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 588.007941][T11437] Call Trace: [ 588.011222][T11437] [ 588.014156][T11437] dump_stack_lvl+0x16c/0x1f0 [ 588.018845][T11437] should_fail_ex+0x497/0x5b0 [ 588.023538][T11437] should_failslab+0xc2/0x120 [ 588.028221][T11437] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 588.033598][T11437] ? skb_clone+0x190/0x3f0 [ 588.038021][T11437] skb_clone+0x190/0x3f0 [ 588.042269][T11437] netlink_deliver_tap+0xabd/0xd30 [ 588.047568][T11437] netlink_unicast+0x5e1/0x7f0 [ 588.052345][T11437] ? __pfx_netlink_unicast+0x10/0x10 [ 588.057637][T11437] ? __phys_addr+0xc6/0x150 [ 588.062159][T11437] netlink_sendmsg+0x8b8/0xd70 [ 588.066938][T11437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.072241][T11437] ____sys_sendmsg+0xaaf/0xc90 [ 588.077015][T11437] ? copy_msghdr_from_user+0x10b/0x160 [ 588.082477][T11437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.087782][T11437] ___sys_sendmsg+0x135/0x1e0 [ 588.092466][T11437] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.097677][T11437] ? __pfx_lock_release+0x10/0x10 [ 588.102703][T11437] ? trace_lock_acquire+0x14e/0x1f0 [ 588.107919][T11437] ? __fget_files+0x206/0x3a0 [ 588.112607][T11437] __sys_sendmsg+0x16e/0x220 [ 588.117210][T11437] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.122339][T11437] do_syscall_64+0xcd/0x250 [ 588.126853][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.132755][T11437] RIP: 0033:0x7f8a23f85d29 [ 588.137170][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.156780][T11437] RSP: 002b:00007f8a24d1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.165197][T11437] RAX: ffffffffffffffda RBX: 00007f8a24176160 RCX: 00007f8a23f85d29 [ 588.173167][T11437] RDX: 0000000000000600 RSI: 0000000020000540 RDI: 0000000000000007 [ 588.181135][T11437] RBP: 00007f8a24d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 588.189103][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.197077][T11437] R13: 0000000000000000 R14: 00007f8a24176160 R15: 00007fff872f4b78 [ 588.205062][T11437] [ 588.208195][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.572591][ T8] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 588.579985][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 588.875299][ T8] usb 5-1: USB disconnect, device number 37 [ 589.385077][T11451] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1345'. [ 589.394271][T11451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 590.100271][ T29] audit: type=1400 audit(1737286748.152:945): avc: denied { map } for pid=11440 comm="syz.2.1344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 590.773368][ T29] audit: type=1400 audit(1737286748.152:946): avc: denied { execute } for pid=11440 comm="syz.2.1344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 590.797206][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.067254][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.605899][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 595.186354][ T29] audit: type=1400 audit(1737286753.262:947): avc: denied { bind } for pid=11500 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 595.725168][T11502] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 596.198510][T11514] ./cgroup: Can't lookup blockdev [ 596.258806][T11518] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 596.287455][T11521] ./cgroup: Can't lookup blockdev [ 597.638529][T11538] o2cb: This node has not been configured. [ 597.644552][T11538] o2cb: Cluster check failed. Fix errors before retrying. [ 597.651694][T11538] (syz.2.1365,11538,1):user_dlm_register:674 ERROR: status = -22 [ 597.659392][T11538] (syz.2.1365,11538,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 597.674728][ T29] audit: type=1400 audit(1737286755.712:948): avc: denied { write } for pid=11536 comm="syz.2.1365" name="/" dev="ocfs2_dlmfs" ino=30902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.792891][ T29] audit: type=1400 audit(1737286755.712:949): avc: denied { add_name } for pid=11536 comm="syz.2.1365" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.842385][ T29] audit: type=1400 audit(1737286755.712:950): avc: denied { create } for pid=11536 comm="syz.2.1365" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 598.012118][ T29] audit: type=1400 audit(1737286755.712:951): avc: denied { associate } for pid=11536 comm="syz.2.1365" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 598.937129][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 601.682041][ T29] audit: type=1400 audit(1737286759.732:952): avc: denied { append } for pid=11591 comm="syz.2.1376" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 602.176136][ T29] audit: type=1400 audit(1737286760.252:953): avc: denied { append } for pid=11594 comm="syz.4.1379" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 602.200207][ T5869] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 602.490413][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 602.568492][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.177930][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 603.200255][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 603.214648][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.274178][ T5869] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 603.289720][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.476104][T11615] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.500512][T11615] bridge0: left promiscuous mode [ 603.630232][ T5869] usb 3-1: Product: syz [ 603.636707][ T5869] usb 3-1: Manufacturer: syz [ 603.656727][ T5869] usb 3-1: SerialNumber: syz [ 603.746572][ T5869] usb 3-1: config 0 descriptor?? [ 603.781173][ T5869] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 603.829644][ T5869] imon 3-1:0.0: unable to initialize intf0, err -19 [ 603.879695][ T5869] imon:imon_probe: failed to initialize context! [ 603.900562][ T5869] imon 3-1:0.0: unable to register, err -19 [ 603.958460][T11620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 604.043956][ T29] audit: type=1400 audit(1737286762.122:954): avc: denied { listen } for pid=11597 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 604.090287][T11599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1377'. [ 604.168083][ T29] audit: type=1400 audit(1737286762.152:955): avc: denied { read } for pid=11597 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 605.037293][ T9] usb 3-1: USB disconnect, device number 39 [ 605.065355][T11634] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 605.073862][T11634] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 605.082651][T11634] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 606.918645][T11655] netlink: 211712 bytes leftover after parsing attributes in process `syz.3.1393'. [ 607.007875][T11655] netlink: get zone limit has 8 unknown bytes [ 607.654483][T11663] FAULT_INJECTION: forcing a failure. [ 607.654483][T11663] name failslab, interval 1, probability 0, space 0, times 0 [ 607.705878][T11663] CPU: 1 UID: 0 PID: 11663 Comm: syz.0.1395 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 607.716681][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 607.726749][T11663] Call Trace: [ 607.730033][T11663] [ 607.732968][T11663] dump_stack_lvl+0x16c/0x1f0 [ 607.737669][T11663] should_fail_ex+0x497/0x5b0 [ 607.742368][T11663] ? fs_reclaim_acquire+0xae/0x150 [ 607.747495][T11663] should_failslab+0xc2/0x120 [ 607.752190][T11663] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 607.757592][T11663] ? getname_flags.part.0+0x4c/0x550 [ 607.762887][T11663] getname_flags.part.0+0x4c/0x550 [ 607.767991][T11663] getname+0x8d/0xe0 [ 607.771869][T11663] path_getxattrat+0x27f/0x2b0 [ 607.776614][T11663] ? __pfx_path_getxattrat+0x10/0x10 [ 607.781887][T11663] ? __mutex_unlock_slowpath+0x164/0x690 [ 607.787519][T11663] ? __pfx_ksys_write+0x10/0x10 [ 607.792358][T11663] do_syscall_64+0xcd/0x250 [ 607.796851][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.802736][T11663] RIP: 0033:0x7f6945f85d29 [ 607.807138][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.826729][T11663] RSP: 002b:00007f6946d8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 607.835124][T11663] RAX: ffffffffffffffda RBX: 00007f6946175fa0 RCX: 00007f6945f85d29 [ 607.843078][T11663] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000000 [ 607.851039][T11663] RBP: 00007f6946d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 607.859015][T11663] R10: fffffffffffffe5f R11: 0000000000000246 R12: 0000000000000001 [ 607.867014][T11663] R13: 0000000000000000 R14: 00007f6946175fa0 R15: 00007ffc17fcd588 [ 607.874997][T11663] [ 607.971990][ T29] audit: type=1400 audit(1737286766.052:956): avc: denied { read } for pid=11665 comm="syz.4.1397" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 608.057872][T11670] loop9: detected capacity change from 0 to 6 [ 608.150225][ T29] audit: type=1400 audit(1737286766.052:957): avc: denied { open } for pid=11665 comm="syz.4.1397" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 608.328131][T11672] ./cgroup: Can't lookup blockdev [ 608.337711][ T29] audit: type=1400 audit(1737286766.052:958): avc: denied { ioctl } for pid=11665 comm="syz.4.1397" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 609.010465][ T29] audit: type=1400 audit(1737286767.063:959): avc: denied { create } for pid=11658 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 609.080753][ T29] audit: type=1400 audit(1737286767.143:960): avc: denied { ioctl } for pid=11658 comm="syz.1.1394" path="socket:[31059]" dev="sockfs" ino=31059 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 609.105435][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.550050][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.557517][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.574004][T11686] bridge0: left promiscuous mode [ 609.703559][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.710915][T11686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.718689][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.726005][T11686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.735271][T11686] bridge0: entered promiscuous mode [ 611.117057][T11697] lo speed is unknown, defaulting to 1000 [ 612.068612][T11710] fuse: Bad value for 'fd' [ 612.177096][T11716] Bluetooth: MGMT ver 1.23 [ 612.190387][T11716] xt_ipcomp: unknown flags 12 [ 612.218662][ T29] audit: type=1400 audit(1737286770.291:961): avc: denied { write } for pid=11708 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 612.247065][ T29] audit: type=1400 audit(1737286770.291:962): avc: denied { read } for pid=11708 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 612.357762][T11720] FAULT_INJECTION: forcing a failure. [ 612.357762][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.371618][T11720] CPU: 1 UID: 0 PID: 11720 Comm: syz.2.1409 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 612.382419][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 612.392469][T11720] Call Trace: [ 612.395751][T11720] [ 612.398686][T11720] dump_stack_lvl+0x16c/0x1f0 [ 612.403385][T11720] should_fail_ex+0x497/0x5b0 [ 612.408087][T11720] _copy_to_user+0x32/0xd0 [ 612.412512][T11720] video_usercopy+0xf3e/0x1620 [ 612.417297][T11720] ? __pfx___video_do_ioctl+0x10/0x10 [ 612.422686][T11720] ? __pfx_video_usercopy+0x10/0x10 [ 612.427903][T11720] v4l2_ioctl+0x1ba/0x250 [ 612.432245][T11720] ? __pfx_v4l2_ioctl+0x10/0x10 [ 612.437103][T11720] __x64_sys_ioctl+0x190/0x200 [ 612.441860][T11720] do_syscall_64+0xcd/0x250 [ 612.446350][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.452238][T11720] RIP: 0033:0x7f57b3b85d29 [ 612.456648][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.476247][T11720] RSP: 002b:00007f57b4952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.484670][T11720] RAX: ffffffffffffffda RBX: 00007f57b3d75fa0 RCX: 00007f57b3b85d29 [ 612.492650][T11720] RDX: 0000000020000400 RSI: 00000000c008561c RDI: 0000000000000009 [ 612.500630][T11720] RBP: 00007f57b4952090 R08: 0000000000000000 R09: 0000000000000000 [ 612.508599][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.516572][T11720] R13: 0000000000000000 R14: 00007f57b3d75fa0 R15: 00007ffe2c5884e8 [ 612.524539][T11720] [ 612.711869][T11725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1412'. [ 612.866417][T11731] FAULT_INJECTION: forcing a failure. [ 612.866417][T11731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.928094][ T29] audit: type=1400 audit(1737286771.001:963): avc: denied { map } for pid=11729 comm="syz.0.1411" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 612.974964][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.0.1411 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 612.985765][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 612.985779][T11731] Call Trace: [ 612.985787][T11731] [ 613.002026][T11731] dump_stack_lvl+0x16c/0x1f0 [ 613.007487][T11731] should_fail_ex+0x497/0x5b0 [ 613.007522][T11731] _copy_to_user+0x32/0xd0 [ 613.007543][T11731] copy_siginfo_to_user+0x23/0xc0 [ 613.007568][T11731] x64_setup_rt_frame+0x814/0xcf0 [ 613.026844][T11731] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 613.032420][T11731] arch_do_signal_or_restart+0x5e6/0x7e0 [ 613.038077][T11731] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 613.044251][T11731] ? __pfx_do_readv+0x10/0x10 [ 613.048931][T11731] syscall_exit_to_user_mode+0x150/0x2a0 [ 613.054566][T11731] do_syscall_64+0xda/0x250 [ 613.059072][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.064969][T11731] RIP: 0033:0x7f6945f85d27 [ 613.069371][T11731] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 613.088967][T11731] RSP: 002b:00007f6946d8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 613.097368][T11731] RAX: 0000000000000013 RBX: 00007f6946175fa0 RCX: 00007f6945f85d29 [ 613.105329][T11731] RDX: 0000000000000001 RSI: 0000000020000c40 RDI: 0000000000000003 [ 613.113286][T11731] RBP: 00007f6946d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 613.121244][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.129200][T11731] R13: 0000000000000000 R14: 00007f6946175fa0 R15: 00007ffc17fcd588 [ 613.137172][T11731] [ 613.183035][ T29] audit: type=1400 audit(1737286771.001:964): avc: denied { execute } for pid=11729 comm="syz.0.1411" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 613.308848][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.316478][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.326297][T11741] bridge0: entered allmulticast mode [ 613.357798][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.365149][T11742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.372943][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.380159][T11742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.395671][T11742] bridge0: entered promiscuous mode [ 615.942465][T11767] PKCS8: Unsupported PKCS#8 version [ 616.191985][T11769] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 616.201509][T11769] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 616.210290][T11769] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 619.103265][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 621.589099][ T29] audit: type=1400 audit(1737286779.601:965): avc: denied { connect } for pid=11815 comm="syz.2.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 621.608699][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.631638][ T79] tipc: Subscription rejected, illegal request [ 621.648743][T11822] lo speed is unknown, defaulting to 1000 [ 622.572188][ T5869] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz1 [ 623.380519][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 624.306894][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.322464][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.940323][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 625.970236][ T5843] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 626.090329][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 626.104383][ T9] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 626.130248][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 626.136651][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 626.144928][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 626.160244][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.175949][ T9] usb 5-1: config 0 has no interface number 0 [ 626.182761][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.193782][ T5843] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 626.203963][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 626.215486][ T5843] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 626.226642][ T5843] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 626.235837][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 626.245034][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 626.253123][ T9] usb 5-1: Product: syz [ 626.257343][ T9] usb 5-1: SerialNumber: syz [ 626.264642][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.274877][ T9] usb 5-1: config 0 descriptor?? [ 626.285756][ T5843] usb 1-1: config 0 descriptor?? [ 626.291514][T11862] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 626.300147][ T9] cm109 5-1:0.8: invalid payload size 239, expected 4 [ 626.308124][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input52 [ 626.605441][T11862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.634599][T11862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.826134][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.836044][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.116912][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 627.124598][ C0] cm109_urb_ctl_callback: 2 callbacks suppressed [ 627.124624][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.138133][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.146340][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.154612][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.162033][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.169234][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.176368][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.185267][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.192446][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.199575][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 627.234461][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 627.245239][ T9] usb 5-1: USB disconnect, device number 38 [ 627.303145][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 627.648794][T11871] lo speed is unknown, defaulting to 1000 [ 627.746250][T11875] syz.3.1447: attempt to access beyond end of device [ 627.746250][T11875] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 627.760886][T11875] (syz.3.1447,11875,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 627.768677][T11875] (syz.3.1447,11875,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 627.776201][T11875] (syz.3.1447,11875,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 627.785083][T11875] (syz.3.1447,11875,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 628.390912][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 629.346799][ T5843] usb 1-1: USB disconnect, device number 50 [ 630.719393][T11889] lo speed is unknown, defaulting to 1000 [ 631.055062][T11904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.081357][ T29] audit: type=1400 audit(1737286789.161:966): avc: denied { checkpoint_restore } for pid=11898 comm="syz.4.1454" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 631.090411][T11905] FAULT_INJECTION: forcing a failure. [ 631.090411][T11905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.148581][T11905] CPU: 1 UID: 0 PID: 11905 Comm: syz.1.1456 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 631.159382][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 631.169451][T11905] Call Trace: [ 631.172738][T11905] [ 631.175683][T11905] dump_stack_lvl+0x16c/0x1f0 [ 631.180378][T11905] should_fail_ex+0x497/0x5b0 [ 631.185080][T11905] _copy_from_user+0x2e/0xd0 [ 631.189682][T11905] copy_msghdr_from_user+0x99/0x160 [ 631.194899][T11905] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 631.200737][T11905] ___sys_sendmsg+0xff/0x1e0 [ 631.205342][T11905] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.210572][T11905] ? __pfx_lock_release+0x10/0x10 [ 631.215613][T11905] ? trace_lock_acquire+0x14e/0x1f0 [ 631.220842][T11905] ? __fget_files+0x206/0x3a0 [ 631.225539][T11905] __sys_sendmsg+0x16e/0x220 [ 631.230154][T11905] ? __pfx___sys_sendmsg+0x10/0x10 [ 631.235293][T11905] do_syscall_64+0xcd/0x250 [ 631.239819][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.245732][T11905] RIP: 0033:0x7fa688b85d29 [ 631.250157][T11905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.269779][T11905] RSP: 002b:00007fa6899f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.278211][T11905] RAX: ffffffffffffffda RBX: 00007fa688d75fa0 RCX: 00007fa688b85d29 [ 631.286195][T11905] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000004 [ 631.294187][T11905] RBP: 00007fa6899f8090 R08: 0000000000000000 R09: 0000000000000000 [ 631.302169][T11905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.310147][T11905] R13: 0000000000000000 R14: 00007fa688d75fa0 R15: 00007ffe418c5888 [ 631.318134][T11905] [ 633.068501][T11899] syz.4.1454 (11899): drop_caches: 2 [ 633.163463][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.170736][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.439371][T11926] FAULT_INJECTION: forcing a failure. [ 633.439371][T11926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.452593][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.2.1460 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 633.463362][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 633.473426][T11926] Call Trace: [ 633.476706][T11926] [ 633.479636][T11926] dump_stack_lvl+0x16c/0x1f0 [ 633.484332][T11926] should_fail_ex+0x497/0x5b0 [ 633.489022][T11926] _copy_from_user+0x2e/0xd0 [ 633.493611][T11926] __sys_bpf+0x21c/0x49c0 [ 633.497950][T11926] ? __pfx_lock_release+0x10/0x10 [ 633.502982][T11926] ? __pfx___sys_bpf+0x10/0x10 [ 633.507751][T11926] ? vfs_write+0x306/0x1150 [ 633.512264][T11926] ? __mutex_unlock_slowpath+0x164/0x690 [ 633.517922][T11926] ? fput+0x67/0x440 [ 633.521824][T11926] ? ksys_write+0x1ba/0x250 [ 633.526334][T11926] ? __pfx_ksys_write+0x10/0x10 [ 633.531190][T11926] __x64_sys_bpf+0x78/0xc0 [ 633.535612][T11926] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.540816][T11926] do_syscall_64+0xcd/0x250 [ 633.545333][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.551246][T11926] RIP: 0033:0x7f57b3b85d29 [ 633.555675][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.575304][T11926] RSP: 002b:00007f57b4910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.583726][T11926] RAX: ffffffffffffffda RBX: 00007f57b3d76160 RCX: 00007f57b3b85d29 [ 633.591698][T11926] RDX: 0000000000000094 RSI: 0000000020000340 RDI: 0000000000000005 [ 633.599667][T11926] RBP: 00007f57b4910090 R08: 0000000000000000 R09: 0000000000000000 [ 633.607642][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.615631][T11926] R13: 0000000000000000 R14: 00007f57b3d76160 R15: 00007ffe2c5884e8 [ 633.623605][T11926] [ 633.626677][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.232252][T11914] bridge0: left promiscuous mode [ 634.273048][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.276945][ T29] audit: type=1400 audit(1737286792.321:967): avc: denied { mount } for pid=11921 comm="syz.0.1455" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 634.280176][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.280347][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.301743][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.322100][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.332351][T11917] bridge0: entered promiscuous mode [ 634.393427][T11930] veth0_to_team: entered promiscuous mode [ 634.399229][T11930] veth0_to_team: entered allmulticast mode [ 634.554091][ T29] audit: type=1400 audit(1737286792.571:968): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 636.247247][T11957] FAULT_INJECTION: forcing a failure. [ 636.247247][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 636.260016][T11957] CPU: 1 UID: 0 PID: 11957 Comm: syz.4.1467 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 636.270792][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.280846][T11957] Call Trace: [ 636.284126][T11957] [ 636.287059][T11957] dump_stack_lvl+0x16c/0x1f0 [ 636.291751][T11957] should_fail_ex+0x497/0x5b0 [ 636.296437][T11957] ? fs_reclaim_acquire+0xae/0x150 [ 636.301554][T11957] should_failslab+0xc2/0x120 [ 636.306240][T11957] __kmalloc_noprof+0xcb/0x510 [ 636.311009][T11957] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 636.316656][T11957] tomoyo_realpath_from_path+0xb9/0x720 [ 636.322208][T11957] ? tomoyo_path_number_perm+0x235/0x590 [ 636.327845][T11957] ? tomoyo_path_number_perm+0x235/0x590 [ 636.333485][T11957] tomoyo_path_number_perm+0x248/0x590 [ 636.338947][T11957] ? tomoyo_path_number_perm+0x235/0x590 [ 636.344588][T11957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.350599][T11957] ? __pfx_lock_release+0x10/0x10 [ 636.355626][T11957] ? trace_lock_acquire+0x14e/0x1f0 [ 636.360839][T11957] ? __pfx___schedule+0x10/0x10 [ 636.365698][T11957] ? lock_acquire+0x2f/0xb0 [ 636.370203][T11957] ? __fget_files+0x40/0x3a0 [ 636.374801][T11957] ? __fget_files+0x206/0x3a0 [ 636.379483][T11957] security_file_ioctl+0x9b/0x240 [ 636.384515][T11957] __x64_sys_ioctl+0xb7/0x200 [ 636.389204][T11957] do_syscall_64+0xcd/0x250 [ 636.393718][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.399627][T11957] RIP: 0033:0x7fb1db785d29 [ 636.404045][T11957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.423656][T11957] RSP: 002b:00007fb1dc62a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.432076][T11957] RAX: ffffffffffffffda RBX: 00007fb1db976160 RCX: 00007fb1db785d29 [ 636.440048][T11957] RDX: 00000000200002c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 636.448019][T11957] RBP: 00007fb1dc62a090 R08: 0000000000000000 R09: 0000000000000000 [ 636.455990][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.463963][T11957] R13: 0000000000000000 R14: 00007fb1db976160 R15: 00007ffc7f1d96c8 [ 636.471952][T11957] [ 636.475031][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.481427][T11957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 636.606905][T11955] veth0_to_team: entered promiscuous mode [ 636.612742][T11955] veth0_to_team: entered allmulticast mode [ 636.760470][T11967] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 636.769035][T11967] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 636.779306][T11967] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 636.980282][ T29] audit: type=1400 audit(1737286795.031:969): avc: denied { getopt } for pid=11970 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 637.870228][ T5843] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 638.550468][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 638.558951][ T5843] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 638.568531][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.954944][ T5843] usb 1-1: config 0 descriptor?? [ 638.966512][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.973706][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.995355][T11988] bridge0: left promiscuous mode [ 639.052818][ T5843] gspca_main: sq930x-2.14.0 probing 041e:403c [ 639.559938][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 640.109231][ T5843] gspca_sq930x: ucbus_write failed -110 [ 640.115175][ T5843] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 640.156209][T11984] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.163362][T11984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.172021][T11984] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.179071][T11984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.186890][T11984] bridge0: entered promiscuous mode [ 640.534918][T12005] ubi1: attaching mtd0 [ 641.541271][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 641.566740][T11986] can0: slcan on ptm0. [ 641.667971][ T8] usb 1-1: USB disconnect, device number 51 [ 641.691097][T11986] can0 (unregistered): slcan off ptm0. [ 642.211741][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 642.680656][ T29] audit: type=1400 audit(1737286800.641:970): avc: denied { getopt } for pid=12013 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 642.700676][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 642.953242][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 642.985791][ T8] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 643.204971][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 643.244501][ T8] usb 5-1: config 0 has no interface number 0 [ 643.286742][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 643.422889][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 643.432524][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 643.441009][ T8] usb 5-1: Product: syz [ 643.445261][ T8] usb 5-1: SerialNumber: syz [ 643.459679][ T8] usb 5-1: config 0 descriptor?? [ 643.635377][ T8] cm109 5-1:0.8: invalid payload size 239, expected 4 [ 643.779347][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input53 [ 644.059962][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.075951][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.502383][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 644.509536][ C0] cm109_urb_ctl_callback: 136 callbacks suppressed [ 644.509550][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.523154][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.530279][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.537432][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.544477][ T8] usb 5-1: USB disconnect, device number 39 [ 644.550498][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.550514][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 644.590056][ T8] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 645.178221][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 645.363547][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.371033][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.380544][T12042] bridge0: left promiscuous mode [ 646.429331][T12040] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.436477][T12040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.443877][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.450960][T12040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.458468][T12040] bridge0: entered promiscuous mode [ 647.144233][T12055] trusted_key: syz.0.1494 sent an empty control message without MSG_MORE. [ 647.840179][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 647.885917][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1498'. [ 647.899182][T12066] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 647.919826][T12069] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 648.007238][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.019436][ T25] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=fd.42 [ 648.035734][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.074375][ T25] usb 5-1: Product: syz [ 648.078582][ T25] usb 5-1: Manufacturer: syz [ 648.140191][ T25] usb 5-1: SerialNumber: syz [ 648.246853][ T25] usb 5-1: config 0 descriptor?? [ 648.530005][T12078] ./cgroup: Can't lookup blockdev [ 648.548620][ T25] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version fd.42 found at bus 005 address 040 [ 651.637746][ T25] usb 5-1: USB disconnect, device number 40 [ 652.038512][ T5843] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz1 [ 652.105456][T12102] ./cgroup: Can't lookup blockdev [ 652.270314][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 653.038377][T12114] netlink: 'syz.0.1509': attribute type 5 has an invalid length. [ 653.705685][ T25] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 654.094629][ T25] usb 5-1: config 0 has no interface number 0 [ 654.173537][ T25] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 654.219551][ T25] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.243704][ T25] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 654.253619][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.264379][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.271549][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.280402][ T25] usb 5-1: Product: syz [ 654.284656][ T25] usb 5-1: Manufacturer: syz [ 654.289255][ T25] usb 5-1: SerialNumber: syz [ 654.302998][ T25] usb 5-1: config 0 descriptor?? [ 654.308531][T12096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 654.319180][ T25] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 654.328280][T12120] bridge0: left promiscuous mode [ 654.546540][T12128] trusted_key: encrypted_key: insufficient parameters specified [ 655.025558][T12127] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.032735][T12127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.040024][T12127] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.047095][T12127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.078353][T12127] bridge0: entered promiscuous mode [ 655.526302][T12130] trusted_key: encrypted_key: insufficient parameters specified [ 656.109179][ T25] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 656.229668][ T25] usb 5-1: USB disconnect, device number 41 [ 656.240934][ T25] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 656.252060][ T25] cyberjack 5-1:0.69: device disconnected [ 656.616921][T12147] tc_dump_action: action bad kind [ 656.627176][T12147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=12147 comm=syz.2.1518 [ 656.674351][ T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 656.851101][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 656.862233][ T8] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 656.882619][T12150] netlink: 'syz.2.1519': attribute type 3 has an invalid length. [ 656.883443][ T8] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 656.902145][ T8] usb 1-1: config 0 has no interface number 0 [ 656.903360][T12150] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1519'. [ 656.908319][ T8] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 656.930978][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 656.941314][ T8] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 656.949462][ T8] usb 1-1: Product: syz [ 656.953919][ T8] usb 1-1: SerialNumber: syz [ 656.964533][ T8] usb 1-1: config 0 descriptor?? [ 656.976332][ T8] cm109 1-1:0.8: invalid payload size 239, expected 4 [ 656.984584][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input54 [ 657.427264][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.480359][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.554681][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 657.555041][T10670] usb 1-1: USB disconnect, device number 52 [ 657.561652][ C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 658.563844][T10670] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 658.890463][ T29] audit: type=1326 audit(1737286816.936:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12152 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db785d29 code=0x7fc00000 [ 661.135140][ T8] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz1 [ 661.331976][T12184] trusted_key: encrypted_key: insufficient parameters specified [ 663.440961][ T29] audit: type=1400 audit(1737286821.476:972): avc: denied { mounton } for pid=12208 comm="syz.4.1537" path="/294/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 663.523354][T12215] syz.1.1535: attempt to access beyond end of device [ 663.523354][T12215] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 663.536496][T12215] efs: cannot read volume header [ 663.911408][T12220] ./cgroup: Can't lookup blockdev [ 663.939064][ T29] audit: type=1400 audit(1737286821.726:973): avc: denied { create } for pid=12209 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 664.350871][T12231] ./cgroup: Can't lookup blockdev [ 664.710200][ T5869] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 664.993488][T12243] trusted_key: encrypted_key: insufficient parameters specified [ 665.480298][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 665.496147][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 665.549413][ T5869] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 665.671684][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 665.680291][ T5869] usb 5-1: Product: syz [ 665.684476][ T5869] usb 5-1: Manufacturer: syz [ 665.689071][ T5869] usb 5-1: SerialNumber: syz [ 665.744489][T12248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.031158][ T29] audit: type=1400 audit(1737286823.936:974): avc: denied { lock } for pid=12246 comm="syz.1.1548" path="socket:[34075]" dev="sockfs" ino=34075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 666.077151][ T29] audit: type=1400 audit(1737286824.156:975): avc: denied { getopt } for pid=12247 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 666.101081][ T5869] usb 5-1: config 0 descriptor?? [ 666.107200][T12236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 666.370256][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 666.452876][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.482495][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.531680][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 666.541728][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.562549][ T8] usb 2-1: config 0 descriptor?? [ 666.588052][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 666.762983][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.783882][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.809430][ T9] usb 5-1: USB disconnect, device number 42 [ 666.827152][T12264] lo speed is unknown, defaulting to 1000 [ 666.889865][T12266] ip6t_rpfilter: unknown options [ 666.982810][ T8] gp8psk: usb out operation failed. [ 666.988475][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 667.001415][ T8] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 667.011712][ T29] audit: type=1400 audit(1737286825.096:976): avc: denied { map } for pid=12265 comm="syz.2.1551" path="socket:[34104]" dev="sockfs" ino=34104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 667.035953][ T8] usb 2-1: media controller created [ 667.073960][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.097008][ T8] gp8psk_fe: Frontend attached [ 667.102394][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 667.121406][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 667.145996][ T8] gp8psk: usb in 138 operation failed. [ 667.153101][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 667.167739][ T8] gp8psk: found Genpix USB device pID = 203 (hex) [ 667.177883][ T8] usb 2-1: USB disconnect, device number 38 [ 667.237531][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 667.314024][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz1 [ 667.463897][T12275] ./cgroup: Can't lookup blockdev [ 667.529162][ T29] audit: type=1400 audit(1737286825.606:977): avc: denied { ioctl } for pid=12276 comm="syz.3.1554" path="socket:[33165]" dev="sockfs" ino=33165 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 669.994770][T12299] lo speed is unknown, defaulting to 1000 [ 670.532238][T12304] ./cgroup: Can't lookup blockdev [ 670.718674][T12295] netlink: 'syz.0.1560': attribute type 11 has an invalid length. [ 671.305502][ T8] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 671.321917][ T29] audit: type=1400 audit(1737286828.906:978): avc: denied { append } for pid=12309 comm="syz.2.1565" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 671.460150][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 671.468652][ T8] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 671.498726][ T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 672.319072][ T8] usb 2-1: config 0 has no interface number 0 [ 672.325284][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 672.339149][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 672.348879][ T8] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 672.357030][ T8] usb 2-1: Product: syz [ 672.357059][T12327] ip6t_srh: unknown srh invflags 7D00 [ 672.361546][ T8] usb 2-1: SerialNumber: syz [ 672.387967][ T8] usb 2-1: config 0 descriptor?? [ 672.396292][ T8] cm109 2-1:0.8: invalid payload size 239, expected 4 [ 672.432066][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input55 [ 673.892815][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.901794][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.921052][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 673.928245][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.935440][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.942590][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.949733][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.957064][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.964231][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.971388][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.978533][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.985645][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 673.992813][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.000638][ T9] usb 2-1: USB disconnect, device number 39 [ 674.006568][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 674.027890][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 674.247385][T10670] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 674.816847][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 675.220203][T10670] usb 1-1: Using ep0 maxpacket: 8 [ 675.265077][T10670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 675.270359][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 675.277527][T10670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.288294][ T8] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 675.299365][ T8] usb 4-1: config 0 has no interface number 0 [ 675.302115][T10670] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.321695][T10670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 675.327531][T12359] lo speed is unknown, defaulting to 1000 [ 675.347088][T10670] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 675.361631][T10670] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 675.383551][T10670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.405121][T10670] usb 1-1: config 0 descriptor?? [ 675.406565][ T8] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.424417][T10670] usb 1-1: can't set config #0, error -71 [ 675.440703][T10670] usb 1-1: USB disconnect, device number 53 [ 675.473710][ T8] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 675.497634][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.515471][ T8] usb 4-1: Product: syz [ 675.519723][ T8] usb 4-1: Manufacturer: syz [ 675.525710][ T8] usb 4-1: SerialNumber: syz [ 675.537527][ T8] usb 4-1: config 0 descriptor?? [ 675.552238][T12371] lo speed is unknown, defaulting to 1000 [ 675.577978][ T8] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 675.665875][T12368] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 675.779745][ T6000] usb 4-1: Failed to submit usb control message: -71 [ 675.780847][ T8] usb 4-1: USB disconnect, device number 55 [ 675.788213][ T6000] usb 4-1: unable to send the bmi data to the device: -71 [ 675.818970][ T6000] usb 4-1: unable to get target info from device [ 675.848979][ T6000] usb 4-1: could not get target info (-71) [ 675.871754][ T6000] usb 4-1: could not probe fw (-71) [ 677.048832][ T5869] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 677.285743][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.300479][ T5869] usb 2-1: config 0 has no interfaces? [ 677.444083][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 677.671251][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.679415][ T5869] usb 2-1: Product: syz [ 677.700030][ T5869] usb 2-1: Manufacturer: syz [ 677.704838][ T5869] usb 2-1: SerialNumber: syz [ 678.093863][ T5869] usb 2-1: config 0 descriptor?? [ 678.118824][T12401] ./cgroup: Can't lookup blockdev [ 678.666583][ T5869] usb 2-1: USB disconnect, device number 40 [ 678.700809][ T968] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 679.100835][ T968] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 679.121307][ T968] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.208260][ T968] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=b1.52 [ 679.230179][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.251324][ T968] usb 3-1: Product: syz [ 679.255581][ T968] usb 3-1: Manufacturer: syz [ 679.260415][ T968] usb 3-1: SerialNumber: syz [ 679.272662][ T968] usb 3-1: config 0 descriptor?? [ 785.590091][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 785.597069][ C1] rcu: 0-...!: (1 GPs behind) idle=5aac/1/0x4000000000000000 softirq=50663/50664 fqs=1 [ 785.608261][ C1] rcu: (detected by 1, t=10505 jiffies, g=41413, q=206 ncpus=2) [ 785.615994][ C1] Sending NMI from CPU 1 to CPUs 0: [ 785.616022][ C0] NMI backtrace for cpu 0 [ 785.616035][ C0] CPU: 0 UID: 0 PID: 12430 Comm: syz.1.1593 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 785.616058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 785.616070][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 785.616098][ C0] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 0f bb 69 7e <65> 8b 05 10 bb 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 785.616116][ C0] RSP: 0018:ffffc90000007e08 EFLAGS: 00000046 [ 785.616132][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81874ccb [ 785.616145][ C0] RDX: ffff88807adc0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 785.616158][ C0] RBP: ffff888060f8b340 R08: 0000000000000001 R09: 0000000000000000 [ 785.616170][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffff888060f8b340 [ 785.616182][ C0] R13: ffff8880b862cb00 R14: ffff8880b862ca00 R15: ffffffff8941bbe0 [ 785.616196][ C0] FS: 00007fa6899d76c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 785.616215][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.616229][ C0] CR2: 000000110c329ceb CR3: 0000000029a8c000 CR4: 00000000003526f0 [ 785.616242][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 785.616253][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 785.616265][ C0] Call Trace: [ 785.616272][ C0] [ 785.616280][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 785.616305][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 785.616325][ C0] ? nmi_handle+0x1ac/0x5d0 [ 785.616347][ C0] ? write_comp_data+0x11/0x90 [ 785.616368][ C0] ? default_do_nmi+0x6a/0x160 [ 785.616389][ C0] ? exc_nmi+0x170/0x1e0 [ 785.616407][ C0] ? end_repeat_nmi+0xf/0x53 [ 785.616435][ C0] ? __pfx_advance_sched+0x10/0x10 [ 785.616457][ C0] ? trace_hrtimer_cancel+0x6b/0x220 [ 785.616484][ C0] ? write_comp_data+0x11/0x90 [ 785.616506][ C0] ? write_comp_data+0x11/0x90 [ 785.616527][ C0] ? write_comp_data+0x11/0x90 [ 785.616549][ C0] [ 785.616554][ C0] [ 785.616560][ C0] trace_hrtimer_cancel+0x6b/0x220 [ 785.616585][ C0] __hrtimer_run_queues+0x484/0xae0 [ 785.616615][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 785.616640][ C0] ? read_tsc+0x9/0x20 [ 785.616670][ C0] hrtimer_interrupt+0x392/0x8e0 [ 785.616701][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 785.616730][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 785.616754][ C0] [ 785.616760][ C0] [ 785.616766][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 785.616795][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 785.616820][ C0] Code: 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd ff ff 0f 1f 84 00 00 00 [ 785.616838][ C0] RSP: 0018:ffffc9000ce17548 EFLAGS: 00000202 [ 785.616853][ C0] RAX: 0000000000080000 RBX: ffff888023996ec2 RCX: ffffffff8b28743e [ 785.616866][ C0] RDX: 0000000000080000 RSI: 0000000000000002 RDI: 0000000000000002 [ 785.616878][ C0] RBP: ffffc9000ce177a0 R08: 0000000000000007 R09: 000000000000003f [ 785.616891][ C0] R10: 000000000000002c R11: 0000000000000002 R12: 0000000000000002 [ 785.616903][ C0] R13: 0000000000000b1f R14: 0000000000000b1f R15: ffffffff81d010b0 [ 785.616915][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.616939][ C0] ? xas_load+0x3e/0x5b0 [ 785.616967][ C0] xas_load+0x3e/0x5b0 [ 785.616992][ C0] ? find_held_lock+0x2d/0x110 [ 785.617020][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617039][ C0] xas_find+0x60f/0x870 [ 785.617068][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617087][ C0] xas_next_entry+0x267/0x3c0 [ 785.617114][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.617140][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 785.617169][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617189][ C0] next_uptodate_folio+0x29/0x4a0 [ 785.617206][ C0] ? filemap_map_pages+0x182/0x16b0 [ 785.617227][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617247][ C0] filemap_map_pages+0x1c6/0x16b0 [ 785.617266][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 785.617288][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 785.617313][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617335][ C0] ? do_pte_missing+0xce7/0x3e00 [ 785.617358][ C0] ? lock_acquire+0x2f/0xb0 [ 785.617377][ C0] ? do_pte_missing+0xce7/0x3e00 [ 785.617400][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.617419][ C0] do_pte_missing+0xda6/0x3e00 [ 785.617446][ C0] __handle_mm_fault+0x103c/0x2a40 [ 785.617470][ C0] ? find_held_lock+0x2d/0x110 [ 785.617496][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 785.617519][ C0] ? follow_page_pte+0x3c3/0x1b20 [ 785.617540][ C0] ? __pfx_lock_release+0x10/0x10 [ 785.617565][ C0] ? follow_page_pte+0x3f7/0x1b20 [ 785.617589][ C0] handle_mm_fault+0x3fa/0xaa0 [ 785.617613][ C0] __get_user_pages+0x8d9/0x3b50 [ 785.617637][ C0] ? __pfx_mt_find+0x10/0x10 [ 785.617663][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 785.617685][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 785.617711][ C0] ? __mm_populate+0x21d/0x380 [ 785.617735][ C0] populate_vma_page_range+0x27f/0x3a0 [ 785.617759][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 785.617782][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 785.617802][ C0] ? vm_mmap_pgoff+0x25b/0x360 [ 785.617826][ C0] __mm_populate+0x1d6/0x380 [ 785.617848][ C0] ? __pfx___mm_populate+0x10/0x10 [ 785.617871][ C0] ? up_write+0x1b2/0x520 [ 785.617895][ C0] vm_mmap_pgoff+0x293/0x360 [ 785.617918][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 785.617942][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 785.617960][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 785.617980][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 785.617999][ C0] ? rcu_is_watching+0x12/0xc0 [ 785.618026][ C0] __x64_sys_mmap+0x125/0x190 [ 785.618048][ C0] do_syscall_64+0xcd/0x250 [ 785.618075][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.618102][ C0] RIP: 0033:0x7fa688b85d29 [ 785.618118][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.618135][ C0] RSP: 002b:00007fa6899d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 785.618153][ C0] RAX: ffffffffffffffda RBX: 00007fa688d76080 RCX: 00007fa688b85d29 [ 785.618167][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 785.618180][ C0] RBP: 00007fa688c01b08 R08: ffffffffffffffff R09: 0000000000000000 [ 785.618193][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 785.618204][ C0] R13: 0000000000000000 R14: 00007fa688d76080 R15: 00007ffe418c5888 [ 785.618223][ C0] [ 785.619016][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g41413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 786.290197][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 786.300166][ C1] rcu: RCU grace-period kthread stack dump: [ 786.306045][ C1] task:rcu_preempt state:R running task stack:27104 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 786.317819][ C1] Call Trace: [ 786.321095][ C1] [ 786.324029][ C1] __schedule+0xe58/0x5ad0 [ 786.328457][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 786.333679][ C1] ? __pfx___schedule+0x10/0x10 [ 786.338538][ C1] ? schedule+0x298/0x350 [ 786.342874][ C1] ? __pfx_lock_release+0x10/0x10 [ 786.347909][ C1] ? lock_acquire+0x2f/0xb0 [ 786.352415][ C1] ? schedule+0x1fd/0x350 [ 786.356757][ C1] schedule+0xe7/0x350 [ 786.360835][ C1] schedule_timeout+0x124/0x280 [ 786.365690][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 786.371068][ C1] ? __pfx_process_timeout+0x10/0x10 [ 786.376369][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 786.382185][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 786.387658][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 786.392431][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 786.397721][ C1] ? rcu_gp_init+0xc82/0x1630 [ 786.402406][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 786.407617][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 786.413438][ C1] rcu_gp_kthread+0x271/0x380 [ 786.418125][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 786.423332][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.428541][ C1] ? __kthread_parkme+0x148/0x220 [ 786.433579][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 786.438790][ C1] kthread+0x2c1/0x3a0 [ 786.442866][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.448070][ C1] ? __pfx_kthread+0x10/0x10 [ 786.452669][ C1] ret_from_fork+0x45/0x80 [ 786.457088][ C1] ? __pfx_kthread+0x10/0x10 [ 786.461687][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.466475][ C1] [ 786.469492][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 786.475807][ C1] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 786.486481][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 786.496548][ C1] Workqueue: events_unbound toggle_allocation_gate [ 786.503069][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 786.509761][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 786.529377][ C1] RSP: 0018:ffffc90000be7998 EFLAGS: 00000293 [ 786.535450][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e191c [ 786.543428][ C1] RDX: ffff888020aa4880 RSI: ffffffff818e18f6 RDI: 0000000000000005 [ 786.551402][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 786.559378][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 786.567352][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 786.575324][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 786.584260][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.590847][ C1] CR2: 00007fea6b03645f CR3: 000000000df7e000 CR4: 00000000003526f0 [ 786.598820][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.606791][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 786.614763][ C1] Call Trace: [ 786.618040][ C1] [ 786.620884][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 786.627228][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 786.632440][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 786.637918][ C1] ? timekeeping_advance+0x72e/0xa90 [ 786.643207][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 786.648856][ C1] ? __asan_memcpy+0x3c/0x60 [ 786.653461][ C1] ? rcu_is_watching+0x12/0xc0 [ 786.658239][ C1] ? update_process_times+0x178/0x2d0 [ 786.663625][ C1] ? __pfx_update_process_times+0x10/0x10 [ 786.669352][ C1] ? update_wall_time+0x1c/0x40 [ 786.674209][ C1] ? tick_nohz_handler+0x376/0x530 [ 786.679338][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 786.684807][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 786.690215][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 786.695954][ C1] ? read_tsc+0x9/0x20 [ 786.700047][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 786.705196][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 786.711371][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 786.717190][ C1] [ 786.720123][ C1] [ 786.723054][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.729230][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 786.735315][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 786.741402][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 786.747486][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 786.753570][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 786.758615][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 786.763650][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 786.768782][ C1] text_poke_bp_batch+0x22b/0x760 [ 786.773826][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 786.779384][ C1] ? __jump_label_patch+0x1db/0x400 [ 786.784602][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 786.790864][ C1] text_poke_finish+0x30/0x40 [ 786.795553][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 786.801545][ C1] jump_label_update+0x1d7/0x400 [ 786.806498][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 786.812407][ C1] static_key_enable+0x1a/0x20 [ 786.817182][ C1] toggle_allocation_gate+0xfc/0x260 [ 786.822476][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 786.828375][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 786.833590][ C1] ? process_one_work+0x921/0x1ba0 [ 786.838708][ C1] ? lock_acquire+0x2f/0xb0 [ 786.843216][ C1] ? process_one_work+0x921/0x1ba0 [ 786.848342][ C1] process_one_work+0x9c5/0x1ba0 [ 786.853296][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 786.859460][ C1] ? __pfx_process_one_work+0x10/0x10 [ 786.864837][ C1] ? rcu_is_watching+0x12/0xc0 [ 786.869621][ C1] ? assign_work+0x1a0/0x250 [ 786.874216][ C1] worker_thread+0x6c8/0xf00 [ 786.878824][ C1] ? __pfx_worker_thread+0x10/0x10 [ 786.883942][ C1] kthread+0x2c1/0x3a0 [ 786.888023][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.893228][ C1] ? __pfx_kthread+0x10/0x10 [ 786.897830][ C1] ret_from_fork+0x45/0x80 [ 786.902248][ C1] ? __pfx_kthread+0x10/0x10 [ 786.906848][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.911638][ C1]