last executing test programs: 6m56.257076158s ago: executing program 0 (id=483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6m52.30535268s ago: executing program 0 (id=496): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 6m51.711145485s ago: executing program 0 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f00000fb000/0x1000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_tables_targets\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/196, 0xc4}], 0x1, 0x4fe, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) 6m50.699322498s ago: executing program 0 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}) (fail_nth: 3) 6m49.838257247s ago: executing program 0 (id=504): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x5236, 0x101005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xe, 0x1c, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m48.049457937s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x24008011) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x101) sendmsg$inet(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="cf", 0x1}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000940)={{0x0, 0xfffc}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) dup(0xffffffffffffffff) 6m32.992794924s ago: executing program 32 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x24008011) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x101) sendmsg$inet(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000cc0)="cf", 0x1}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000940)={{0x0, 0xfffc}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) dup(0xffffffffffffffff) 10.839938633s ago: executing program 5 (id=1905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="8d437a57"]}]}, 0x2c}}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 10.783587604s ago: executing program 5 (id=1907): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe72, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 7.802061057s ago: executing program 4 (id=1916): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000a40)={0x40000000, 0x0, 0x0, 0x481, 0xfffffffb, 0x1}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="186400000a0023000000000006000000b17aa73a7374926c107e9ae1558f2534b662985bfbf515e1d2156dac620044df89e1be6b69e2b16d672cc97aff56383b1f681e4b2cfe1a82a18e15c98f627511592cd6083abf40c51c4254acc7aacfa4d2c9ae86e91d77c4e5ce19eee6eb18a85cb048ffc4d5902910607f56464181"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xd5, &(0x7f0000000500)=""/213, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x5, 0xb, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x2, 0x12, 0x2}, {0x4, 0x2, 0x1, 0x1}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b40)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x3, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xcd64, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000300)=""/88, 0x58, 0x0, &(0x7f0000000400)=""/66, 0x42}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xe, 0x4, 0x8, 0x8, 0x8010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x11, &(0x7f0000000380)={r8}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e22, 0x3, @local, 0x9}}, 0x6, 0x1}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r10, 0x19, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8c0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x44020) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10) 6.883691377s ago: executing program 1 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x101) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r7 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) mq_getsetattr(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc8, 0x8}}}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.882858385s ago: executing program 5 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept$unix(r2, &(0x7f0000000300), &(0x7f0000000380)=0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0xffff, 0x7fff, {r0}, {}, 0x7, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x2, 0xffffffffffffffde, &(0x7f0000000e80)={{0x12, 0x1, 0x201, 0x4e, 0xe9, 0x1b, 0x40, 0xeef, 0x2, 0x9c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x1, 0x0, 0x4, 0x80, 0xc0, [{{0x9, 0x4, 0x16, 0xc, 0x5, 0x3, 0x4b, 0x8a, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "411ac9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0xc740, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x8000}, @mdlm_detail={0x53, 0x24, 0x13, 0x4, "ce9cf0ecbf544be43d433edae6fbb246518911b5f6a7119bdf04e50afd2ef0a3080427b7883922d1b70489315b838662943c4148b84d14d100c809cddce8d594e791eeae472dc9aaf17f7ece712511"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x0, 0x9}]}], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0xd9, 0x3, 0x7, [@generic={0x1d, 0x23, "bf9b067b039d858616f3bd97dfc59eb758820ca2235c847b3a61c4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x9, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x330e9adeec3ff4cb, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x367}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x7f, 0x4, 0x4, [@generic={0x4, 0x3, "b4dc"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0x4}]}}]}}]}}]}}, 0x0) 6.760586502s ago: executing program 3 (id=1921): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a15ce63932b9cb076514beb0f493016078ef7302370352e986624b08965c9b9d5ddd99c507594b844479d0e5f2c02d5c800cc285aa58752202ed034d3671f78b7d2b1ab95c6ceeb0239bfa20e04f58f08d99f17e8abf6713bd6eab3f2a7eccca02359456c0", 0x65, 0x24000000, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @local, 0x1}, 0x1c) 6.289934778s ago: executing program 3 (id=1922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000680)={"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"}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$ax25_int(r9, 0x101, 0xa, &(0x7f0000000080)=0x23fd, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000340)=[{0x10, 0x84, 0x8}], 0x10}, 0x40000c0) 5.457098594s ago: executing program 1 (id=1924): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async, rerun: 64) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000001c0)={0x14000000}) r4 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r4, 0x0, 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x3c9902) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_pts(0xffffffffffffffff, 0x42) (async) syz_io_uring_setup(0x5859, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140)) r5 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r5, 0x6a, 0x4, 0x0, 0x20000071) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000600)=0x3, 0x4) 5.028958669s ago: executing program 3 (id=1927): mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (fail_nth: 1) 5.028039298s ago: executing program 4 (id=1928): bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00007c7000/0x4000)=nil, 0x4000}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f0000000040)=[{0x3f00}], 0xdeadbeef, 0x8, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x3ff) socket$kcm(0x11, 0xa, 0x300) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000010c0)={0x0, &(0x7f0000001000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000002200)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64d0, &(0x7f0000000580)={r10}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r11}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r12}, 0x10) socket$kcm(0x10, 0x3, 0x10) 4.640114393s ago: executing program 3 (id=1930): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe72, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.409830641s ago: executing program 1 (id=1932): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 3.737582967s ago: executing program 5 (id=1933): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000380)=[{r1, 0x42a2}], 0x1, 0xca) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x401}]}, 0x24}}, 0x20040800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0xfffffffe, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) socket(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.527806846s ago: executing program 2 (id=1934): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001f00010029bd7000fbdbdf25180000000900ad800976f873d5000000"], 0x20}, 0x1, 0x0, 0x0, 0x2008001}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x88, "0427e7e842c286c1ded50b8d9d0804b36ec82613289ddbfd3020c3f7f6782536df8c975469e5a07317eed2e0b0be15f641225f89c573ec6e8b87c7c6a31208ba192065913d19639f7aa8d013c38accf9db7e5ccf139dd2172280c98f3d735d1064cac5b82f7ae6a3e6ce35030e6d15d26d1f36676a34b45e6f7c39526d65d66485e0da8ccc6f946f"}, &(0x7f00000001c0)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r11 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000280)={@local}) 2.745606296s ago: executing program 4 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x101) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r7 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) mq_getsetattr(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc8, 0x8}}}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x9}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) execve(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.744715616s ago: executing program 5 (id=1936): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) sync() sync() sync() sync() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b9d20800000f32c7442400934c0000c744240200100000c7442406000000000f011c2467470f01cab8ae7c30ddba000000000f30660f38814f7c66b829008ee866ba420066b8d40066ef0fc77200c423355e9a5a68000009410f01c9", 0x5c}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sync() sync() sync() sync() sync() sync() sync() io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) 2.590588316s ago: executing program 2 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x1f, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3200000000380004"], 0x60}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) setsockopt$ax25_int(r6, 0x101, 0x9, &(0x7f0000000000)=0xfffffffd, 0x4) 2.091976431s ago: executing program 2 (id=1938): sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee53673e959ae5adbc3f793917ad556654e4df993f2bbd4b9b9259efdcbd3c3c2d315cb1c92438cdea1792c390cef68d3926d44cd9361912518732211458bdc92f855c9c018e3a7b35da0d8c8f934dbc3cfba39a9fa99e1a76759d09e705e0e4d84a32987c661b2e3f58ca446ca835fabdaf163ae94f2a59481ab62298d4350ae9358fdbd2b1b20da4afaaf2982903c2805b6caf71719d0d74852ae8414baa491363af0d20a7ad133b81356c30e77d036ba519867fe35391c36ecd0464b40a3871637dc81af3c19f59f347749cb07ac25f96e0cbf84288d32aff6dcd9cd2ebbd905d53dc87b14002cf971df0b76c5171e392f78cd002fd34a28454a32531ab9fccb16820b462bd13005da9d2fbd0ed02a4a7527b9b40b939bbf0686d16fa3070f129ae48da709408dfdb12c661148e282d50794b34b2e15236bf2f967bba67a7c650a02743ec3b852b5511c1ab32efc7d85a97bb622935b72d5c06e7bde3f389172684a6e61c852f6ec2a323858f67f8f9dde9f9eaa26cfcf958dafe5ed23b6c06f094fa1550ce0a39447769218060cb9e78a0e6f61a08b629e2512d8972a2a337b0b6b97220d292af823b8800ef45e72089659a0b1cbc750d6491d55f9bde4d1c4abe796d6951be456b8ad327794ddc74042c9e303832ccbf2d2fcb6d01007b8cf0552b568af89adc9b198cbea6b8137ef70ad16919ade2bdbd29d23c78c04cce6dedf07598d33841d8f02f7ed5a349fddbc742ea7e742636a2cb4ff663192cb1102adcc019b92caac00f5a644afc2d03b68f933aa6b8eddd6c39a0de8913034a0b48ddabd39aee173350f3dfa0329c308fb94e3528e", 0x498}, {&(0x7f00000002c0)="1961e97441080000000a260b70d7ada8fffcc472dbeab05f20c7174500", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) 2.020989213s ago: executing program 2 (id=1939): mkdirat(0xffffffffffffff9c, 0x0, 0x66) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280)=0x2, 0x4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) 1.976234354s ago: executing program 2 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}}, 0x0) 1.91841264s ago: executing program 2 (id=1941): r0 = syz_usb_connect(0x5, 0xf68, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0x4c, 0x32, 0x99, 0x8, 0x7ca, 0xb800, 0x1cd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf56, 0x4, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0xe, 0x3, 0x0, 0x0, 0x4, [@generic={0xff, 0xb, "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"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9939"}, {0x5, 0x24, 0x0, 0x3100}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0x13f, 0xd}, [@mdlm_detail={0x81, 0x24, 0x13, 0xbf, "6a36e86b0ca0c988db4c391477074a9bd5f4e9eca32c3703efe2ce14f70623c1401111bdbb480a3e80327db67231553173e24f2601c543554666789b55bfb8e147fea61bf8788e70a31eb5afa6423aafc5c5587610c4f21c46ff43dfb20d0aa0e2d95cfd39565aaa199ed96b9770d2fffae5a364f4c804ae11b49cbfc9"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x2, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x84, 0x1, 0x0, 0x6, 0x9, 0x5, [@generic={0xc0, 0x9, "c8e47a319ca8965f615fecf032ca761928157d288576037b592edfc17395855c00a04f4247c5bdbf3fecc3062aeb9e9e04904bcaa4ac654e0e292bab550f8a7c916ab15f7d3a31744bf175cec6c1039f98c9d70438975f8b772c496f897694d7aad83b16ddd578f60559c59f6dac20dee203cb8326bef9f4d3d9f8aa954aff59da70e5808fe64abeea657552938593ae63a2bb6a4eb4ccc3201cb0af19349c7925fdf86328cf35846a6e731904d01a497392d95a0e9f27d2cda02e6500ee"}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x8, 0x1, 0x7, 0x7, [@generic={0x75, 0x30, "c73dc066de19e4ba64a958fce6cf5406840939fa85e5617e7d90270780ea58f01a95a38bfe7f39f20973faefe5f4fb1737600d5d5b4616de03c81e81e60ecd2c3906f2cd5555c58f27997206cb27c6def4c29a8616223853c5e47059c25a30e854b6bda27c4c489d6c5e28d6b33994b2849065"}]}}, {{0x9, 0x5, 0x7, 0x14, 0x200, 0x9, 0x8, 0x6}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0xf, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x428, 0x10, 0x9, 0x4c, [@generic={0x7f, 0x23, "dab00d5df918cf0e4d3577afd060eb963ffa000d7cebbed490733890441469dbefeb831d30584a8f7d09eecf86e50437f48255d6ef6972d786774b3c4e9781f79b2882f1e03168935d6a33b96074e1255e6f49181d0473c00c8fe23cc2df2400b9720b68e1b5a535a3ee3a3f9c295029180f6104d07a22a7d56185fc4c"}, @generic={0xaa, 0x4, "41fec8b7bd37fa93e19292a7e5a8c330c8923f3dade9dfdeea9df27646941b74f51cbdca76305335afe29a27c9c9dc29fbc80d3771f10f94d347333added766745db18cf7319d3fb57e26b3ee5d899264005767a7e2f14429771e509c3bd673889ce168d86293b72b821a60db2e43d2ab13f200ad7fcba0d278f3c6c125ad560de17bb46aa6e8c2e053da4068aca41f9723dcc07b15d47e555cb590a59ffd028c55f50adea81d8b7"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x7, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x40}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x4, 0x2, 0x7, [@generic={0xd5, 0x22, "959f880b51657a97eff728884b9b3dce43adcb27ba36fae0ef1d4457ef27a971aaadc64517d75f6c76b3dbac343f62819ddf06223f1ce29bbe39cada4cd21aedecad3a36ec55f8f58b27aeb110208fd1a73b154c1a7f6fca53037f0c601f06a06c90432cc62e711893a05b72474ab04f3999137e65087ba23556890fe3b43f1bda526374cd375194df395ab64fec9e622177ff18aed5859b82473af76dfbb4f32a1c339c97b1a51f457bffb27199eea8c570aabc3a8761522a644526842be958fd8044d76eb51405f1059658ca675bf0f7b484"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x9, 0x4, 0x72, [@generic={0xad, 0x9, "e7ec6411b60c7ce8f53e3b4cbdae58020329f77d593d590334fd6b8ef27d29ebf2e32c45bf0943366651348efc8f4d936413a87eb839148618bac3cbcbb8d7e3ee4eb376bbd134f9d58d05c1bcc775c0d1d6fdd5f42a75ea2a4ef17eb458942b5a7a8874cbb5ec59c9a2de10574be3362c014d97609ff3c6ec4830c00bbe066b1e02727f450f3ac0f7e3550d099a23d2f1d2888c39f17ddc08e5b77c5e3dda6fc386eecd2efd82277b5098"}, @generic={0xa4, 0x5, "4391dad8399acbc44374a10d2b244f5abd972456a3b1652ca9348a5115e77c66d7fe472b389c3d3babf6168fc0eb01ab13bee807d46e4acc1562d688f43b77f9dc27565a9205ac5869e98c693d7a82b8ecc4011ff532035c93c5bbdc143469c41b279815863ee1b0f9dd7a48754431ddebedf568ffeb890821b24265be36d2df5a7a5f3b4d4ae48801b5787f46eb03e983d25242a1e39c2b905e852c8ab7bbf15717"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x6, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x2, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x67, 0x401}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x2f, 0x4, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0x8, 0x44}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x9, 0x2, 0x8, [@generic={0xbd, 0x7, "5058f6a00ec7ee60d26e2be4f4f80f05da1e65ba5bd79eeb41a3b7f2731f49be2c472d4e9c871cc4cf14761bcda864939dcf2d533eae19e245c5dae147a4755106111aec59ca7af805c60f4797631a039d580cd10469951721aad7cfc8fede9b0e611f3465db2eafc60dc1954899efe77f47496399a73fc1e54e958e00918d4ef636b9ba34d346fddf904b835f0055caa857f6adc7bd30dcfb9092459495019677ccc1d7eb1aaf0f0e31293143f0dc3fa2cb8933578245320ef8c6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8d}]}}]}}, {{0x9, 0x4, 0xd4, 0x95, 0x9, 0xf3, 0x83, 0x76, 0x5, [@generic={0x9, 0x5, "188fb402a12de7"}], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0xe, 0x0, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x2, 0x8, [@generic={0xc1, 0x10, "5f4b8ae26243f8d9047d3b37f4407919dbb0dd4c1c2961578af7b7cc3599dd51f29b230d0b0ce0b73b98eea112c35551e83d94d3b9e1145e0cadc0539b51213df1fd4bc5c3605b3a7dc9b2ed5f4ecad696383bce23e90272cf17dfc6f7946b6c760091b704ec1929fae2ee942067478545cd63b3924a76a021dad8eb1b1d49fbe966d14dc3fdcd82f004074ff6764efa00a374aba4a7c2f19f236436a24b73a359464ab8d3b423229917df2ed1daed39a0ba2074bc533d1cd4510e2f69f4ac"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x4, 0x8, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x80, 0x3, 0x95}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0x3, 0xfb, [@generic={0xb2, 0x6, "77eae7052ec74db05e843b489b7c8762595b31fdf2df38427a51ae2405a09117d1cd49aa6c2078f0a3d6cab72baa1a1ecbac7b72c4db43864da13fdef59544643c1beb668d10862e23f5c4f042a95d137b1efed094b46d1c77df839c83452f4e82dda5994ecdae1ae6a330006c785bdaba43207d06db5eb65f7386f79c30e3144328d78e2da2d9810bf18164f04a3c6a774b5d35e832c6819237d4a503a7e2ae687d8304854e769a55dbe12b9afdd1d5"}, @generic={0xba, 0x21, "1363d2bc0eda58a2d4df935c05f303ac0332ffcf32470b40b3a9d90c491a8874c1ec3408e0a7351bb07e3e74c6decf79cedfdf86df5901050dddb3f522fb16d96134edecd08b9bcb0dc74ae1369313495db9bf047d931d18998d18aa70646711b42e7827e48d140475eddd26eb8baf5d0878ce39433e28ecf41da865e38f0dd7ad42a5f573acef09b48bce7f325f05edd95d2866f41a8a2f5db8aaeeca800b18fa8e965bb19747ca21c912920114281b3970a8870501c17a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x80, 0x0, 0xe, [@generic={0xe9, 0xb, "03e8acfbf1e2c1a584d63a3b12b374ecdfcce93d0ac8f7d1ab44f279af69d34dc8b5c3c382108e7ccc1fe9e68ed30580ea28ecc065097a9287621cef11357be0ad99d3ab750178d21a11a8d45db3ab632046eb43cbf81a8d7ff2001e064ee121c1956cd04660984e040e95a5b2782c9076915d30d2161e78ef19e098a5545f5e4238c4173d475edb3c50c5a0dba3b9754569196434b5260d87ea2f6325ace41b0349fc7dfdf832d111ad60bb4c6bb3e1e45f4abe943cb1614b5dd0b9ec241674abd9a3f004ca427d2d074633de6936010f73ab4e5eab06fbe8327c9e7f9e645d0da5221c9335c6"}, @generic={0xf0, 0xc, "f2e3e0c8be208ecf738629fabf3d062178863c6752fed0c8e4675eb91659002f8de12cc03b2993bb42b075579e2b5cefdf642a291e253c8f7963e318977d564b81b64539c848d18728d1a80114808ba4dbe6ea722068537103f849ce0e89c393d1308ae1a2bfd9d335e0f5694aa83c460769134a9846fdf7eabfc7fd41d2af28ed6adb1ee0913294a02eac43b05630b7a1565561d6feb2f5a457481ae6a5820855813d4e9e7871354aacc8eb90ada3ed9bacd97d62c2ed742b8a1a0748fdb3c48e8c68b10d322b7159b59ec165313a48d9cc700ea8c70d0aeaa58a86bcad0acd7b573ae67a9d466f38f1daf750e8"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x1, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}, @generic={0x51, 0x21, "d4874dc9fc5abbf659f9fa5eb34ba575ee7702af2aaa76a7873629c7f6da7521b84ea4db17fae9a2710cf291798fda1e579d22bbe2668a955c5c3717059e5a036197badc85d384807e580b1a307bfd"}]}}]}}, {{0x9, 0x4, 0x15, 0x9, 0xf, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0xf, 0x4, 0x20, 0xff, 0x0, 0xd, [@generic={0xbd, 0xb, "e9c49ff1444f5b549c484358060de2971c485bdc7af41d8a380e96ded48524f839f76dca7975674b4473dd5ecabf6a2aa0e1bee585f90485222b110d680fb41c5123c2fc22ac88b67ad2f3a2e07d204dd3ac4d4ec85a581f67e259df534c9d240aae3448f3ddcfb0141a69d440fe003fb69e20aaf183b44941d699d107912742f5821f9572de3632f126f740f7e3fbf8185a06c2f1422c77fc32e90ad2fb1c25cbbedf3c4548bc5cc78ce283149b2f6d9a3788b915f835ed50b696"}, @generic={0x51, 0x24, "537ac4baf12e5e9f8a9042c37a18af6740c32fce62b95cd8edfc8d50fd707791f0b733874749be04f527b436dcf6e7727849800ac02c135d2836978d3c647d1a517d3ec6d581c1efaff29340d1f6a8"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x6, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x192}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x1, 0x2, 0x0, [@generic={0x4a, 0x6, "8e89be51adf8679f5fa0a94ded8e77a3d877a74122f877070d08cfd1d063c6ce3de55c89edc0604b86490b68c39bb19b880028b81f2416492da8e145bddf1cc6c543dfeaa153e3b4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x220, 0x5, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3b}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5a, 0x489}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x10, 0x7f, 0x3}}, {{0x9, 0x5, 0x11, 0x9, 0x3ff, 0x5, 0xff}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0xff, 0x9, 0xf1}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x78, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8, 0x1e74}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x5, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x0, 0x5, 0x0, [@generic={0x57, 0x2, "cb6d394844a4a0bb967d25c17b04907d3d7b7f5cb6ac5009901e5bcf191e728f7e4e907d0fc5a71fcea7e86446df01a617680c3a8b143d88e8486852ba77aa77652b0de33df41638f181c6ec4bfd5cfbb460b8612e"}]}}, {{0x9, 0x5, 0x14, 0x4, 0x8, 0x8, 0x1, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x0, 0xee}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x1, 0x5, 0x5, [@generic={0x46, 0x4, "6f887d8c30949c33cadc850bc4e5d9f1b2ce5ae065cfdbc049a3708381b5603e6d8a8a750607653690e024dd2cb882dc11158299cc2c22f7c2200e66a08584f94a5e49f0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc3, 0x8}]}}, {{0x9, 0x5, 0xe, 0x18, 0x8, 0xd7, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5}, @generic={0x9, 0x21, "dd5525764bc993"}]}}]}}, {{0x9, 0x4, 0x6f, 0x97, 0x0, 0xbc, 0xf8, 0xa, 0xaf, [@uac_control={{0xa, 0x24, 0x1, 0x7ff}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x1000, 0xdc, 'J'}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x2, 0x8001, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x3, 0x3, 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x0, 0x3, 0x73, 0x100, 0x7f, 0x2}]}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.867361929s ago: executing program 4 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40080c1}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mincore(&(0x7f00002ba000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/188) r5 = socket$nl_generic(0x10, 0x3, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = io_uring_setup(0x30d5, &(0x7f00000001c0)={0x0, 0xfb03, 0x2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xdac) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x1ffffe76, &(0x7f0000000180)=ANY=[@ANYRESDEC=r8, @ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r9) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x30004081) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000010a99e1c42a4086333231d78b7beb1c7cd4d4b4b40fd2b78cadd05630b608a45f06288f8d106f7c951616018b9527f29de95da150dbd915e0c04485d337137168282489bda68e128ae61e0ee016214678d81801a72c55544f6dec83238b541c833dd1b017100000000", @ANYRES64=r8, @ANYRESHEX=0x0, @ANYRESDEC=r9, @ANYRES64=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) recvmsg(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff0006}]}) close_range(r12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket(0x10, 0x3, 0x0) 1.850888021s ago: executing program 5 (id=1943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept$unix(r2, &(0x7f0000000300), &(0x7f0000000380)=0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0xffff, 0x7fff, {r0}, {}, 0x7, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x2, 0xffffffffffffffde, &(0x7f0000000e80)={{0x12, 0x1, 0x201, 0x4e, 0xe9, 0x1b, 0x40, 0xeef, 0x2, 0x9c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x1, 0x0, 0x4, 0x80, 0xc0, [{{0x9, 0x4, 0x16, 0xc, 0x5, 0x3, 0x4b, 0x8a, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "411ac9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0xc740, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x8000}, @mdlm_detail={0x53, 0x24, 0x13, 0x4, "ce9cf0ecbf544be43d433edae6fbb246518911b5f6a7119bdf04e50afd2ef0a3080427b7883922d1b70489315b838662943c4148b84d14d100c809cddce8d594e791eeae472dc9aaf17f7ece712511"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x0, 0x9}]}], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0xd9, 0x3, 0x7, [@generic={0x1d, 0x23, "bf9b067b039d858616f3bd97dfc59eb758820ca2235c847b3a61c4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x9, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x330e9adeec3ff4cb, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x367}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x7f, 0x4, 0x4, [@generic={0x4, 0x3, "b4dc"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0x4}]}}]}}]}}]}}, 0x0) 1.542031953s ago: executing program 3 (id=1944): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)=""/50, 0x32}], 0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r3, 0x5, 0x8, 0x80000003, 0x8}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.262006403s ago: executing program 4 (id=1945): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000e80)={0x0, 0x0, 0x1, "b7"}, 0x0, 0x0}) 1.246670132s ago: executing program 1 (id=1946): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001f00010029bd7000fbdbdf25180000000900ad800976f873d5000000"], 0x20}, 0x1, 0x0, 0x0, 0x2008001}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x88, "0427e7e842c286c1ded50b8d9d0804b36ec82613289ddbfd3020c3f7f6782536df8c975469e5a07317eed2e0b0be15f641225f89c573ec6e8b87c7c6a31208ba192065913d19639f7aa8d013c38accf9db7e5ccf139dd2172280c98f3d735d1064cac5b82f7ae6a3e6ce35030e6d15d26d1f36676a34b45e6f7c39526d65d66485e0da8ccc6f946f"}, &(0x7f00000001c0)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000280)={@local}) 552.087657ms ago: executing program 3 (id=1947): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000380)=[{r1, 0x42a2}], 0x1, 0xca) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x401}]}, 0x24}}, 0x20040800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0xfffffffe, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) socket(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 305.178385ms ago: executing program 4 (id=1948): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001f00010029bd7000fbdbdf25180000000900ad800976f873d5000000"], 0x20}, 0x1, 0x0, 0x0, 0x2008001}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x88, "0427e7e842c286c1ded50b8d9d0804b36ec82613289ddbfd3020c3f7f6782536df8c975469e5a07317eed2e0b0be15f641225f89c573ec6e8b87c7c6a31208ba192065913d19639f7aa8d013c38accf9db7e5ccf139dd2172280c98f3d735d1064cac5b82f7ae6a3e6ce35030e6d15d26d1f36676a34b45e6f7c39526d65d66485e0da8ccc6f946f"}, &(0x7f00000001c0)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r11 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000280)={@local}) 87.827473ms ago: executing program 1 (id=1949): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0xfffffffd, 0x4) 0s ago: executing program 1 (id=1950): sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="1961e97441080000000a260b70d7ada8fffcc472dbeab05f20c7174500", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) kernel console output (not intermixed with test programs): de: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.709756][T11832] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 567.718155][T11832] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 567.726110][T11832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 567.734063][T11832] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 567.742017][T11832] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 567.749970][T11832] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 567.757934][T11832] [ 567.879954][T11839] overlayfs: failed to resolve './file1': -2 [ 568.036069][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.054143][ T969] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.103215][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.165806][ T969] usb 2-1: config 0 descriptor?? [ 568.204894][ T969] pwc: Askey VC010 type 2 USB webcam detected. [ 568.417267][ T969] pwc: send_video_command error -71 [ 568.425809][ T969] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 568.455514][ T969] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 568.481926][ T969] usb 2-1: USB disconnect, device number 110 [ 568.689542][ T5865] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 568.919968][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.932337][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.942386][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.950690][ T969] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 568.955954][ T5865] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.980213][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.998961][ T5865] usb 4-1: config 0 descriptor?? [ 569.120905][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.131214][ T969] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 569.149507][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.170250][ T969] usb 2-1: config 0 descriptor?? [ 569.177830][ T969] pwc: Askey VC010 type 2 USB webcam detected. [ 569.981786][ T969] pwc: recv_control_msg error -32 req 02 val 2b00 [ 570.008955][ T969] pwc: recv_control_msg error -32 req 02 val 2700 [ 570.017062][ T969] pwc: recv_control_msg error -32 req 02 val 2c00 [ 570.039549][ T8] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 570.047380][ T969] pwc: recv_control_msg error -32 req 04 val 1000 [ 570.054815][ T969] pwc: recv_control_msg error -32 req 04 val 1300 [ 570.062879][ T969] pwc: recv_control_msg error -32 req 04 val 1400 [ 570.079674][ T969] pwc: recv_control_msg error -32 req 02 val 2000 [ 570.089128][ T969] pwc: recv_control_msg error -32 req 02 val 2100 [ 570.114699][ T969] pwc: recv_control_msg error -32 req 04 val 1500 [ 570.130875][ T969] pwc: recv_control_msg error -32 req 02 val 2500 [ 570.149328][ T969] pwc: recv_control_msg error -32 req 02 val 2400 [ 570.156345][ T969] pwc: recv_control_msg error -32 req 02 val 2600 [ 570.164470][ T969] pwc: recv_control_msg error -32 req 02 val 2900 [ 570.178576][ T969] pwc: recv_control_msg error -32 req 02 val 2800 [ 570.199669][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 570.209186][ T8] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 570.226282][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.236223][ T8] usb 3-1: Product: syz [ 570.245621][ T8] usb 3-1: Manufacturer: syz [ 570.250472][ T8] usb 3-1: SerialNumber: syz [ 570.387693][ T969] pwc: recv_control_msg error -71 req 04 val 1200 [ 570.477986][T11877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 570.920073][ T969] pwc: Registered as video103. [ 570.926871][ T969] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input131 [ 570.946696][ T969] usb 2-1: USB disconnect, device number 111 [ 570.953315][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.034020][ T8] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 571.064135][ T8] usb 3-1: USB disconnect, device number 126 [ 571.783323][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.800151][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 571.806669][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 571.824305][ T5865] usb 4-1: USB disconnect, device number 125 [ 572.097867][T11889] sp0: Synchronizing with TNC [ 572.222943][T11898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.230165][ T29] audit: type=1400 audit(1733127110.213:615): avc: denied { append } for pid=11881 comm="syz.1.1637" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 572.279650][ T29] audit: type=1400 audit(1733127110.213:616): avc: denied { open } for pid=11881 comm="syz.1.1637" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 572.307342][ T29] audit: type=1400 audit(1733127110.263:617): avc: denied { map } for pid=11881 comm="syz.1.1637" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 572.316259][T11896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.428671][T11892] ptrace attach of "./syz-executor exec"[11902] was attempted by "./syz-executor exec"[11892] [ 572.783474][T11896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.803274][ T29] audit: type=1400 audit(1733127110.263:618): avc: denied { read } for pid=11881 comm="syz.1.1637" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 573.125151][T11907] FAULT_INJECTION: forcing a failure. [ 573.125151][T11907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.139076][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.5.1642 Not tainted 6.13.0-rc1-syzkaller #0 [ 573.148199][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 573.158261][T11907] Call Trace: [ 573.161540][T11907] [ 573.164468][T11907] dump_stack_lvl+0x16c/0x1f0 [ 573.169153][T11907] should_fail_ex+0x497/0x5b0 [ 573.173812][T11907] _copy_from_user+0x2e/0xd0 [ 573.178377][T11907] copy_msghdr_from_user+0x99/0x160 [ 573.183550][T11907] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 573.189334][T11907] ___sys_sendmsg+0xff/0x1e0 [ 573.193901][T11907] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.199076][T11907] ? __pfx_lock_release+0x10/0x10 [ 573.204080][T11907] ? trace_lock_acquire+0x14e/0x1f0 [ 573.209260][T11907] ? __fget_files+0x206/0x3a0 [ 573.213914][T11907] __sys_sendmsg+0x16e/0x220 [ 573.218478][T11907] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.223570][T11907] do_syscall_64+0xcd/0x250 [ 573.228050][T11907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.233920][T11907] RIP: 0033:0x7fd46b180849 [ 573.238309][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.257890][T11907] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.266277][T11907] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 573.274223][T11907] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 573.282168][T11907] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 573.290114][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.298057][T11907] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 573.306007][T11907] [ 573.309095][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.335022][ T2151] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 573.380234][T11910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.419565][ T5865] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 573.534670][T11911] 9pnet_virtio: no channels available for device 127.0.0.1 [ 574.026140][ T2151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.036981][ T2151] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 574.046171][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.055689][ T2151] usb 4-1: config 0 descriptor?? [ 574.062466][ T2151] pwc: Askey VC010 type 2 USB webcam detected. [ 574.079593][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 574.086303][ T5865] usb 2-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 574.100749][T11914] /dev/nullb0: Can't open blockdev [ 574.106260][ T5865] usb 2-1: too many endpoints for config 0 interface 0 altsetting 10: 66, using maximum allowed: 30 [ 574.109581][ T969] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 574.125001][ T5865] usb 2-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 574.158502][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 574.176345][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.178219][ T5865] usb 2-1: string descriptor 0 read error: -71 [ 574.188243][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.208294][ T5865] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 574.219431][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.229042][ T5865] usb 2-1: config 0 descriptor?? [ 574.234639][ T5865] usb 2-1: can't set config #0, error -71 [ 574.242866][ T5865] usb 2-1: USB disconnect, device number 112 [ 574.266624][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.275539][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.290926][ T969] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 574.300222][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.309698][ T969] usb 6-1: config 0 descriptor?? [ 574.415357][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.425304][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.489246][ T2151] pwc: recv_control_msg error -32 req 02 val 2b00 [ 574.496226][ T2151] pwc: recv_control_msg error -32 req 02 val 2700 [ 574.503457][ T2151] pwc: recv_control_msg error -32 req 02 val 2c00 [ 574.510428][ T2151] pwc: recv_control_msg error -32 req 04 val 1000 [ 574.517244][ T2151] pwc: recv_control_msg error -32 req 04 val 1300 [ 574.527973][ T2151] pwc: recv_control_msg error -32 req 04 val 1400 [ 574.559591][ T5865] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 574.721174][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.731492][ T5865] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.741243][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 574.750427][ T2151] pwc: recv_control_msg error -71 req 02 val 2100 [ 574.757013][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.765731][ T2151] pwc: recv_control_msg error -71 req 04 val 1500 [ 574.773808][ T5865] usb 2-1: config 0 descriptor?? [ 574.779080][ T2151] pwc: recv_control_msg error -71 req 02 val 2500 [ 574.787581][ T2151] pwc: recv_control_msg error -71 req 02 val 2400 [ 574.798716][ T2151] pwc: recv_control_msg error -71 req 02 val 2600 [ 574.805536][ T2151] pwc: recv_control_msg error -71 req 02 val 2900 [ 574.816096][ T2151] pwc: recv_control_msg error -71 req 02 val 2800 [ 574.822979][ T2151] pwc: recv_control_msg error -71 req 04 val 1100 [ 574.833678][ T2151] pwc: recv_control_msg error -71 req 04 val 1200 [ 574.841387][ T2151] pwc: Registered as video103. [ 574.847089][ T2151] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132 [ 574.865453][ T2151] usb 4-1: USB disconnect, device number 126 [ 575.261243][ T2151] usb 2-1: USB disconnect, device number 113 [ 575.803341][ T29] audit: type=1400 audit(1733127113.373:619): avc: denied { setopt } for pid=11922 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 576.078858][T11938] FAULT_INJECTION: forcing a failure. [ 576.078858][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 576.098380][T11938] CPU: 1 UID: 0 PID: 11938 Comm: syz.3.1651 Not tainted 6.13.0-rc1-syzkaller #0 [ 576.107425][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 576.117483][T11938] Call Trace: [ 576.120757][T11938] [ 576.123564][ T969] ath6kl: Failed to submit usb control message: -110 [ 576.123677][T11938] dump_stack_lvl+0x16c/0x1f0 [ 576.130381][ T969] ath6kl: unable to send the bmi data to the device: -110 [ 576.134973][T11938] should_fail_ex+0x497/0x5b0 [ 576.142132][ T969] ath6kl: Unable to send get target info: -110 [ 576.146693][T11938] ? fs_reclaim_acquire+0xae/0x150 [ 576.157931][T11938] should_failslab+0xc2/0x120 [ 576.162586][T11938] __kmalloc_noprof+0xcb/0x510 [ 576.167324][T11938] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 576.172934][T11938] tomoyo_realpath_from_path+0xb9/0x720 [ 576.178467][T11938] ? tomoyo_path_number_perm+0x235/0x590 [ 576.184074][T11938] ? tomoyo_path_number_perm+0x235/0x590 [ 576.189705][T11938] tomoyo_path_number_perm+0x248/0x590 [ 576.195178][T11938] ? tomoyo_path_number_perm+0x235/0x590 [ 576.196485][ T969] ath6kl: Failed to init ath6kl core: -110 [ 576.200812][T11938] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.200858][T11938] ? __pfx_lock_release+0x10/0x10 [ 576.200879][T11938] ? trace_lock_acquire+0x14e/0x1f0 [ 576.213906][ T969] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 576.217625][T11938] ? lock_acquire+0x2f/0xb0 [ 576.226449][ T969] usb 6-1: USB disconnect, device number 70 [ 576.231257][T11938] ? __fget_files+0x40/0x3a0 [ 576.231286][T11938] ? __fget_files+0x206/0x3a0 [ 576.231309][T11938] security_file_ioctl+0x9b/0x240 [ 576.231334][T11938] __x64_sys_ioctl+0xb7/0x200 [ 576.260624][T11938] do_syscall_64+0xcd/0x250 [ 576.265142][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.271048][T11938] RIP: 0033:0x7f1014180849 [ 576.275467][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.295074][T11938] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.303477][T11938] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 576.311428][T11938] RDX: 00000000200000c0 RSI: 000000004048aecb RDI: 000000000000000c [ 576.319383][T11938] RBP: 00007f1014f2d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 576.327343][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.335308][T11938] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 576.343298][T11938] [ 576.351297][T11943] ptrace attach of "./syz-executor exec"[11944] was attempted by "./syz-executor exec"[11943] [ 576.370840][T11938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.627514][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1653'. [ 577.063755][T11956] FAULT_INJECTION: forcing a failure. [ 577.063755][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.125873][ T2151] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 577.150834][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.5.1657 Not tainted 6.13.0-rc1-syzkaller #0 [ 577.159902][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 577.169965][T11956] Call Trace: [ 577.173242][T11956] [ 577.176173][T11956] dump_stack_lvl+0x16c/0x1f0 [ 577.180867][T11956] should_fail_ex+0x497/0x5b0 [ 577.185565][T11956] _copy_from_user+0x2e/0xd0 [ 577.190160][T11956] copy_msghdr_from_user+0x99/0x160 [ 577.195358][T11956] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.201174][T11956] ___sys_sendmsg+0xff/0x1e0 [ 577.205771][T11956] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.211066][T11956] ? __pfx_lock_release+0x10/0x10 [ 577.216089][T11956] ? trace_lock_acquire+0x14e/0x1f0 [ 577.221300][T11956] ? __fget_files+0x206/0x3a0 [ 577.225982][T11956] __sys_sendmsg+0x16e/0x220 [ 577.230581][T11956] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.235706][T11956] do_syscall_64+0xcd/0x250 [ 577.240212][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.246454][T11956] RIP: 0033:0x7fd46b180849 [ 577.250867][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.270474][T11956] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.278888][T11956] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 577.286853][T11956] RDX: 0000000000000000 RSI: 0000000020004340 RDI: 0000000000000003 [ 577.294816][T11956] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 577.302781][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.310744][T11956] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 577.318721][T11956] [ 577.321775][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.530391][ T29] audit: type=1400 audit(1733127115.553:620): avc: denied { mount } for pid=11950 comm="syz.2.1655" name="/" dev="gadgetfs" ino=32280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 577.819521][ T2151] usb 2-1: device not accepting address 114, error -71 [ 578.419820][ T2151] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 578.729615][ T5820] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 578.831261][T11974] overlayfs: failed to resolve './file1': -2 [ 578.892477][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.905776][ T5820] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 578.940531][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.960474][ T5820] usb 3-1: config 0 descriptor?? [ 578.981392][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 579.455437][ T5820] pwc: send_video_command error -71 [ 579.462657][ T5820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 579.480341][ T5820] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 579.571562][ T5820] usb 3-1: USB disconnect, device number 127 [ 580.515505][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 580.681607][ T2151] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.684186][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.701909][ T5820] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.753287][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.778488][ T5820] usb 3-1: config 0 descriptor?? [ 580.860664][ T2151] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 580.868249][ T2151] usb 2-1: can't read configurations, error -71 [ 580.874204][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 580.881753][ T2151] usb usb2-port1: attempt power cycle [ 580.901595][T11998] overlayfs: failed to resolve './file1': -2 [ 581.215797][ T5820] pwc: send_video_command error -71 [ 581.263811][ T5820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 581.275985][ T5820] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 581.315688][T12007] FAULT_INJECTION: forcing a failure. [ 581.315688][T12007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.339231][ T5820] usb 3-1: USB disconnect, device number 2 [ 581.349826][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.1671 Not tainted 6.13.0-rc1-syzkaller #0 [ 581.358835][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 581.368865][T12007] Call Trace: [ 581.372118][T12007] [ 581.375023][T12007] dump_stack_lvl+0x16c/0x1f0 [ 581.379687][T12007] should_fail_ex+0x497/0x5b0 [ 581.384363][T12007] _copy_from_user+0x2e/0xd0 [ 581.388927][T12007] copy_msghdr_from_user+0x99/0x160 [ 581.394097][T12007] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 581.399879][T12007] ___sys_sendmsg+0xff/0x1e0 [ 581.404439][T12007] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.409628][T12007] ? __pfx_lock_release+0x10/0x10 [ 581.414656][T12007] ? trace_lock_acquire+0x14e/0x1f0 [ 581.419870][T12007] ? __fget_files+0x206/0x3a0 [ 581.424539][T12007] __sys_sendmsg+0x16e/0x220 [ 581.429118][T12007] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.434225][T12007] do_syscall_64+0xcd/0x250 [ 581.438717][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.444596][T12007] RIP: 0033:0x7f1014180849 [ 581.448991][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.468584][T12007] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.476979][T12007] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 581.484934][T12007] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000003 [ 581.492886][T12007] RBP: 00007f1014f2d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 581.500837][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.508788][T12007] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 581.516749][T12007] [ 581.519788][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.768375][ T29] audit: type=1400 audit(1733127119.793:621): avc: denied { setopt } for pid=12015 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 582.209622][ T5820] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 582.360895][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'. [ 582.370083][T12034] FAULT_INJECTION: forcing a failure. [ 582.370083][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.383404][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.3.1680 Not tainted 6.13.0-rc1-syzkaller #0 [ 582.392438][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 582.402493][T12034] Call Trace: [ 582.405770][T12034] [ 582.408696][T12034] dump_stack_lvl+0x16c/0x1f0 [ 582.413384][T12034] should_fail_ex+0x497/0x5b0 [ 582.418073][T12034] _copy_from_user+0x2e/0xd0 [ 582.422667][T12034] __sys_bpf+0x21c/0x49c0 [ 582.427006][T12034] ? __pfx_lock_release+0x10/0x10 [ 582.432037][T12034] ? __pfx___sys_bpf+0x10/0x10 [ 582.436806][T12034] ? vfs_write+0x306/0x1150 [ 582.441319][T12034] ? __mutex_unlock_slowpath+0x164/0x690 [ 582.446972][T12034] ? fput+0x67/0x440 [ 582.450874][T12034] ? ksys_write+0x1ba/0x250 [ 582.455380][T12034] ? __pfx_ksys_write+0x10/0x10 [ 582.460236][T12034] __x64_sys_bpf+0x78/0xc0 [ 582.464660][T12034] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.469864][T12034] do_syscall_64+0xcd/0x250 [ 582.474375][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.480275][T12034] RIP: 0033:0x7f1014180849 [ 582.484689][T12034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.504313][T12034] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.512736][T12034] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 582.520708][T12034] RDX: 0000000000000090 RSI: 0000000020000840 RDI: 0000000000000005 [ 582.528660][T12034] RBP: 00007f1014f2d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 582.536607][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.544564][T12034] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 582.552534][T12034] [ 583.196485][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.207568][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.232819][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 583.253313][ T5820] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.260984][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 583.265333][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.758990][ T5820] usb 6-1: config 0 descriptor?? [ 584.156299][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.165399][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.617997][T12076] FAULT_INJECTION: forcing a failure. [ 585.617997][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 585.631795][T12076] CPU: 1 UID: 0 PID: 12076 Comm: syz.2.1691 Not tainted 6.13.0-rc1-syzkaller #0 [ 585.640834][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 585.650895][T12076] Call Trace: [ 585.654173][T12076] [ 585.657105][T12076] dump_stack_lvl+0x16c/0x1f0 [ 585.661795][T12076] should_fail_ex+0x497/0x5b0 [ 585.666466][T12076] ? fs_reclaim_acquire+0xae/0x150 [ 585.671570][T12076] should_failslab+0xc2/0x120 [ 585.676238][T12076] __kmalloc_noprof+0xcb/0x510 [ 585.680997][T12076] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 585.686625][T12076] tomoyo_realpath_from_path+0xb9/0x720 [ 585.692162][T12076] ? tomoyo_path_perm+0x262/0x460 [ 585.697179][T12076] ? tomoyo_path_perm+0x262/0x460 [ 585.702197][T12076] tomoyo_path_perm+0x276/0x460 [ 585.707048][T12076] ? tomoyo_path_perm+0x262/0x460 [ 585.712077][T12076] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 585.717456][T12076] ? __pfx_mark_lock+0x10/0x10 [ 585.722208][T12076] ? find_held_lock+0x2d/0x110 [ 585.726966][T12076] ? __pfx_lock_release+0x10/0x10 [ 585.731979][T12076] ? trace_lock_acquire+0x14e/0x1f0 [ 585.737203][T12076] ? hlock_class+0x4e/0x130 [ 585.741707][T12076] ? mark_lock+0xb5/0xc60 [ 585.746027][T12076] security_inode_getattr+0x116/0x290 [ 585.751392][T12076] vfs_getattr+0x25/0x60 [ 585.755634][T12076] ovl_iterate_real+0x394/0x1620 [ 585.760569][T12076] ? hlock_class+0x4e/0x130 [ 585.765065][T12076] ? __pfx_ovl_iterate_real+0x10/0x10 [ 585.770433][T12076] ? hlock_class+0x4e/0x130 [ 585.774926][T12076] ? __pfx_ovl_fill_real+0x10/0x10 [ 585.780036][T12076] ? __pfx___lock_acquire+0x10/0x10 [ 585.785224][T12076] ? __pfx___lock_acquire+0x10/0x10 [ 585.790417][T12076] ? trace_lock_acquire+0x14e/0x1f0 [ 585.795604][T12076] ? wrap_directory_iterator+0x54/0xe0 [ 585.801054][T12076] ? lock_acquire+0x2f/0xb0 [ 585.805564][T12076] ovl_iterate+0x6c6/0xe40 [ 585.809989][T12076] ? __pfx_down_write+0x10/0x10 [ 585.814836][T12076] ? down_read_killable+0xcc/0x380 [ 585.819939][T12076] ? __pfx_down_read_killable+0x10/0x10 [ 585.825479][T12076] ? __pfx_ovl_iterate+0x10/0x10 [ 585.830414][T12076] wrap_directory_iterator+0x9f/0xe0 [ 585.835699][T12076] iterate_dir+0x52f/0xb40 [ 585.840116][T12076] __x64_sys_getdents+0x148/0x2c0 [ 585.845137][T12076] ? __pfx___x64_sys_getdents+0x10/0x10 [ 585.850676][T12076] ? __pfx_filldir+0x10/0x10 [ 585.855276][T12076] do_syscall_64+0xcd/0x250 [ 585.859774][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.865657][T12076] RIP: 0033:0x7fee2b980849 [ 585.870055][T12076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.889652][T12076] RSP: 002b:00007fee2c7ae058 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 585.898051][T12076] RAX: ffffffffffffffda RBX: 00007fee2bb45fa0 RCX: 00007fee2b980849 [ 585.906006][T12076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 585.913962][T12076] RBP: 00007fee2c7ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 585.921918][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.929870][T12076] R13: 0000000000000000 R14: 00007fee2bb45fa0 R15: 00007ffd4c046d38 [ 585.937834][T12076] [ 585.994213][T12079] netlink: 'syz.3.1692': attribute type 2 has an invalid length. [ 586.525271][T12076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.561228][ T5820] usbhid 6-1:0.0: can't add hid device: -71 [ 586.567582][ T5820] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 586.578596][ T5820] usb 6-1: USB disconnect, device number 71 [ 586.627318][ T29] audit: type=1400 audit(1733127124.653:622): avc: denied { setopt } for pid=12078 comm="syz.1.1693" lport=57068 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 586.696358][ T29] audit: type=1400 audit(1733127124.703:623): avc: denied { read } for pid=12084 comm="syz.2.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 586.804641][T12088] FAULT_INJECTION: forcing a failure. [ 586.804641][T12088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.872736][T12088] CPU: 0 UID: 0 PID: 12088 Comm: syz.3.1696 Not tainted 6.13.0-rc1-syzkaller #0 [ 586.881787][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.891826][T12088] Call Trace: [ 586.895104][T12088] [ 586.898038][T12088] dump_stack_lvl+0x16c/0x1f0 [ 586.902736][T12088] should_fail_ex+0x497/0x5b0 [ 586.907438][T12088] _copy_from_user+0x2e/0xd0 [ 586.912033][T12088] move_addr_to_kernel+0x68/0x160 [ 586.917072][T12088] __sys_connect+0xb0/0x170 [ 586.921587][T12088] ? __pfx___sys_connect+0x10/0x10 [ 586.926716][T12088] ? __pfx_ksys_write+0x10/0x10 [ 586.931580][T12088] __x64_sys_connect+0x72/0xb0 [ 586.936357][T12088] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.941564][T12088] do_syscall_64+0xcd/0x250 [ 586.946074][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.951973][T12088] RIP: 0033:0x7f1014180849 [ 586.956363][T12088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.959559][T12093] FAULT_INJECTION: forcing a failure. [ 586.959559][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 586.975938][T12088] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 586.975960][T12088] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 586.975973][T12088] RDX: 000000000000006e RSI: 0000000020000200 RDI: 0000000000000003 [ 587.012803][T12088] RBP: 00007f1014f2d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 587.020758][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.028713][T12088] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 587.036677][T12088] [ 587.040137][T12093] CPU: 1 UID: 0 PID: 12093 Comm: syz.4.1698 Not tainted 6.13.0-rc1-syzkaller #0 [ 587.049161][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 587.059200][T12093] Call Trace: [ 587.062461][T12093] [ 587.065374][T12093] dump_stack_lvl+0x16c/0x1f0 [ 587.070043][T12093] should_fail_ex+0x497/0x5b0 [ 587.074711][T12093] ? fs_reclaim_acquire+0xae/0x150 [ 587.079813][T12093] should_failslab+0xc2/0x120 [ 587.084476][T12093] __kmalloc_noprof+0xcb/0x510 [ 587.089223][T12093] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 587.094846][T12093] tomoyo_realpath_from_path+0xb9/0x720 [ 587.100382][T12093] ? tomoyo_path_number_perm+0x235/0x590 [ 587.106000][T12093] ? tomoyo_path_number_perm+0x235/0x590 [ 587.111619][T12093] tomoyo_path_number_perm+0x248/0x590 [ 587.117059][T12093] ? tomoyo_path_number_perm+0x235/0x590 [ 587.122675][T12093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.128660][T12093] ? __pfx_lock_release+0x10/0x10 [ 587.133667][T12093] ? trace_lock_acquire+0x14e/0x1f0 [ 587.138855][T12093] ? lock_acquire+0x2f/0xb0 [ 587.143338][T12093] ? __fget_files+0x40/0x3a0 [ 587.147916][T12093] ? __fget_files+0x206/0x3a0 [ 587.152577][T12093] security_file_ioctl+0x9b/0x240 [ 587.157587][T12093] __x64_sys_ioctl+0xb7/0x200 [ 587.162254][T12093] do_syscall_64+0xcd/0x250 [ 587.166745][T12093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.172625][T12093] RIP: 0033:0x7fadedf80849 [ 587.177024][T12093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.196627][T12093] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.205042][T12093] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 587.213012][T12093] RDX: 0000000020000040 RSI: 00000000c040564a RDI: 0000000000000003 [ 587.220980][T12093] RBP: 00007fadeed270a0 R08: 0000000000000000 R09: 0000000000000000 [ 587.228935][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.236890][T12093] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 587.244855][T12093] [ 587.389642][T12093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.857042][ T5820] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 587.892259][T12098] overlayfs: failed to resolve './file1': -2 [ 588.040392][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 588.056925][T12106] FAULT_INJECTION: forcing a failure. [ 588.056925][T12106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.094186][ T5820] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 588.104319][T12106] CPU: 1 UID: 0 PID: 12106 Comm: syz.4.1703 Not tainted 6.13.0-rc1-syzkaller #0 [ 588.106709][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.113341][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.113355][T12106] Call Trace: [ 588.113362][T12106] [ 588.113370][T12106] dump_stack_lvl+0x16c/0x1f0 [ 588.113398][T12106] should_fail_ex+0x497/0x5b0 [ 588.130335][ T5820] usb 6-1: config 0 descriptor?? [ 588.131371][T12106] _copy_from_user+0x2e/0xd0 [ 588.131397][T12106] copy_msghdr_from_user+0x99/0x160 [ 588.131417][T12106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 588.131448][T12106] ___sys_sendmsg+0xff/0x1e0 [ 588.131469][T12106] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.131496][T12106] ? __pfx_lock_release+0x10/0x10 [ 588.131520][T12106] ? trace_lock_acquire+0x14e/0x1f0 [ 588.131555][T12106] ? __fget_files+0x206/0x3a0 [ 588.131580][T12106] __sys_sendmsg+0x16e/0x220 [ 588.146811][ T5820] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 588.147039][T12106] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.207858][T12106] do_syscall_64+0xcd/0x250 [ 588.208895][T12112] overlayfs: failed to resolve './file1': -2 [ 588.212367][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.212397][T12106] RIP: 0033:0x7fadedf80849 [ 588.212414][T12106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.212429][T12106] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.212450][T12106] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 588.212462][T12106] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 588.223854][ T29] audit: type=1400 audit(1733127126.253:624): avc: denied { write } for pid=12108 comm="syz.2.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 588.224295][T12106] RBP: 00007fadeed270a0 R08: 0000000000000000 R09: 0000000000000000 [ 588.224311][T12106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.231793][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 588.248281][T12106] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 588.248314][T12106] [ 588.375075][T12117] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 588.459617][ T969] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 588.485265][ T29] audit: type=1400 audit(1733127126.513:625): avc: denied { ioctl } for pid=12120 comm="syz.4.1708" path="mnt:[4026532935]" dev="nsfs" ino=4026532935 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 588.631028][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.642248][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.660504][ T969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.691734][ T969] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.703974][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.723274][ T969] usb 2-1: config 0 descriptor?? [ 589.196571][T12135] netlink: 'syz.3.1712': attribute type 2 has an invalid length. [ 589.225967][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1712'. [ 589.808819][T12143] FAULT_INJECTION: forcing a failure. [ 589.808819][T12143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.863881][ T5820] gspca_vc032x: reg_w err -110 [ 589.868876][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.875025][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.880583][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.885918][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.891299][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.896633][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.897359][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.4.1713 Not tainted 6.13.0-rc1-syzkaller #0 [ 589.902005][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.910898][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.910914][T12143] Call Trace: [ 589.910921][T12143] [ 589.910930][T12143] dump_stack_lvl+0x16c/0x1f0 [ 589.910958][T12143] should_fail_ex+0x497/0x5b0 [ 589.916280][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.926270][T12143] _copy_from_user+0x2e/0xd0 [ 589.926290][T12143] vsock_connectible_setsockopt+0x913/0xa30 [ 589.926312][T12143] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 589.926341][T12143] ? selinux_socket_setsockopt+0x6a/0x80 [ 589.926362][T12143] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 589.929770][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.932531][T12143] do_sock_setsockopt+0x222/0x480 [ 589.932557][T12143] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 589.937235][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.941840][T12143] ? lock_acquire+0x2f/0xb0 [ 589.941874][T12143] __sys_setsockopt+0x1a0/0x230 [ 589.941898][T12143] __x64_sys_setsockopt+0xbd/0x160 [ 589.947210][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.951729][T12143] ? do_syscall_64+0x91/0x250 [ 589.951755][T12143] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.951778][T12143] do_syscall_64+0xcd/0x250 [ 589.957675][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.964020][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.964047][T12143] RIP: 0033:0x7fadedf80849 [ 589.964065][T12143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.969705][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.976035][T12143] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.976057][T12143] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 589.981384][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.986296][T12143] RDX: 000000000000003c RSI: 0000000000000001 RDI: 0000000000000003 [ 589.986310][T12143] RBP: 00007fadeed270a0 R08: 0000000000000300 R09: 0000000000000000 [ 589.986322][T12143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.995111][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.997085][T12143] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 589.997116][T12143] [ 590.001645][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.186825][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.192268][ T5820] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.200361][ T5820] gspca_vc032x: Unknown sensor... [ 590.208726][ T5820] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 590.219967][ T5820] usb 6-1: USB disconnect, device number 72 [ 590.353346][ T29] audit: type=1326 audit(1733127128.383:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedf80849 code=0x7ffc0000 [ 590.403530][ T29] audit: type=1326 audit(1733127128.383:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedf80849 code=0x7ffc0000 [ 590.410998][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.432196][ T29] audit: type=1326 audit(1733127128.413:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadedf7f1b0 code=0x7ffc0000 [ 590.444162][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.477802][ T29] audit: type=1326 audit(1733127128.413:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadedf7f1b0 code=0x7ffc0000 [ 590.502674][ T29] audit: type=1326 audit(1733127128.413:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedf80849 code=0x7ffc0000 [ 590.559853][ T29] audit: type=1326 audit(1733127128.413:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadedf80849 code=0x7ffc0000 [ 592.199526][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 592.199539][ T29] audit: type=1400 audit(1733127130.123:655): avc: denied { ioctl } for pid=12171 comm="syz.2.1724" path="socket:[33844]" dev="sockfs" ino=33844 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 592.438503][ T969] usbhid 2-1:0.0: can't add hid device: -71 [ 592.444760][ T969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 592.460324][ T969] usb 2-1: USB disconnect, device number 117 [ 592.474653][ T29] audit: type=1400 audit(1733127130.373:656): avc: denied { getopt } for pid=12171 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 592.759645][ T969] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 593.282728][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 593.296677][ T969] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 593.307266][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.321496][ T969] usb 2-1: config 0 descriptor?? [ 593.329542][ T5865] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 593.371273][ T969] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 593.461222][T12193] FAULT_INJECTION: forcing a failure. [ 593.461222][T12193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.478917][T12193] CPU: 1 UID: 0 PID: 12193 Comm: syz.3.1731 Not tainted 6.13.0-rc1-syzkaller #0 [ 593.487969][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.498033][T12193] Call Trace: [ 593.501316][T12193] [ 593.504254][T12193] dump_stack_lvl+0x16c/0x1f0 [ 593.508945][T12193] should_fail_ex+0x497/0x5b0 [ 593.513640][T12193] _copy_from_user+0x2e/0xd0 [ 593.518233][T12193] do_sock_getsockopt+0x5f6/0x800 [ 593.523356][T12193] ? trace_lock_acquire+0x50/0x1f0 [ 593.528484][T12193] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 593.534036][T12193] ? lock_acquire+0x2f/0xb0 [ 593.538545][T12193] ? __fget_files+0x40/0x3a0 [ 593.543139][T12193] ? __fget_files+0x206/0x3a0 [ 593.547821][T12193] __sys_getsockopt+0x12f/0x260 [ 593.552676][T12193] __x64_sys_getsockopt+0xbd/0x160 [ 593.557787][T12193] ? do_syscall_64+0x91/0x250 [ 593.562470][T12193] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.567669][T12193] do_syscall_64+0xcd/0x250 [ 593.572191][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.578097][T12193] RIP: 0033:0x7f1014180849 [ 593.582511][T12193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.602301][T12193] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 593.610726][T12193] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 593.618701][T12193] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 593.626680][T12193] RBP: 00007f1014f2d0a0 R08: 0000000020000240 R09: 0000000000000000 [ 593.634658][T12193] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 593.642620][T12193] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 593.650598][T12193] [ 593.654331][ T5866] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 593.690377][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 593.698081][ T5865] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 593.714291][ T29] audit: type=1400 audit(1733127131.743:657): avc: denied { bind } for pid=12194 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 593.722986][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.764392][ T5865] usb 6-1: Product: syz [ 593.764413][ T5865] usb 6-1: Manufacturer: syz [ 593.764429][ T5865] usb 6-1: SerialNumber: syz [ 593.773366][ T5865] usb 6-1: config 0 descriptor?? [ 593.819608][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 593.826281][ T5866] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 593.835827][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.869741][ T5866] usb 3-1: config 0 descriptor?? [ 593.876932][ T969] gspca_sonixj: reg_r err -32 [ 593.881765][ T969] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 594.100492][ T5865] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.538900][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.551745][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.433174][ T969] usb 2-1: USB disconnect, device number 118 [ 595.775855][ T5865] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 595.869632][ T25] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 596.601569][ T5866] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 596.611793][ T5866] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 596.622909][ T5866] asix 3-1:0.0: probe with driver asix failed with error -71 [ 596.638592][ T5866] usb 3-1: USB disconnect, device number 3 [ 596.801478][ T5865] usb 6-1: USB disconnect, device number 73 [ 597.017050][T12234] FAULT_INJECTION: forcing a failure. [ 597.017050][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 597.031500][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.5.1742 Not tainted 6.13.0-rc1-syzkaller #0 [ 597.040542][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 597.050854][T12234] Call Trace: [ 597.054127][T12234] [ 597.057056][T12234] dump_stack_lvl+0x16c/0x1f0 [ 597.061742][T12234] should_fail_ex+0x497/0x5b0 [ 597.066428][T12234] ? fs_reclaim_acquire+0xae/0x150 [ 597.071572][T12234] should_failslab+0xc2/0x120 [ 597.076254][T12234] __kmalloc_noprof+0xcb/0x510 [ 597.081021][T12234] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 597.086658][T12234] tomoyo_realpath_from_path+0xb9/0x720 [ 597.092211][T12234] ? tomoyo_path_number_perm+0x235/0x590 [ 597.097848][T12234] ? tomoyo_path_number_perm+0x235/0x590 [ 597.103484][T12234] tomoyo_path_number_perm+0x248/0x590 [ 597.108942][T12234] ? tomoyo_path_number_perm+0x235/0x590 [ 597.114579][T12234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.120581][T12234] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.125789][T12234] ? hook_file_ioctl+0x13/0x180 [ 597.130646][T12234] ? hook_file_ioctl+0x89/0x180 [ 597.135504][T12234] security_file_ioctl+0x9b/0x240 [ 597.140533][T12234] __x64_sys_ioctl+0xb7/0x200 [ 597.145224][T12234] do_syscall_64+0xcd/0x250 [ 597.149734][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.155628][T12234] RIP: 0033:0x7fd46b180849 [ 597.160047][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.179664][T12234] RSP: 002b:00007fd46c034058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.188085][T12234] RAX: ffffffffffffffda RBX: 00007fd46b346080 RCX: 00007fd46b180849 [ 597.196061][T12234] RDX: 0000000020000080 RSI: 00000000c0285629 RDI: 0000000000000003 [ 597.204027][T12234] RBP: 00007fd46c0340a0 R08: 0000000000000000 R09: 0000000000000000 [ 597.211998][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.219957][T12234] R13: 0000000000000000 R14: 00007fd46b346080 R15: 00007ffca54ba758 [ 597.227927][T12234] [ 597.235968][T12234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.047244][T12246] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1747'. [ 598.068816][T12246] ksmbd: Daemon and kernel module version mismatch. ksmbd: 93, kernel module: 1. User-space ksmbd should terminate. [ 598.104997][T12246] vivid-004: disconnect [ 598.252296][ T969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 598.261456][T12254] lo speed is unknown, defaulting to 1000 [ 598.273460][T12245] vivid-004: reconnect [ 598.336607][ T5866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 598.419677][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 598.426182][ T969] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.436704][ T969] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 598.446204][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.482130][ T969] usb 3-1: config 0 descriptor?? [ 598.483275][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 598.503615][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 598.559022][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1750'. [ 598.574210][ T5866] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 598.585485][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.594548][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 598.603669][ T5866] usb 4-1: config 0 descriptor?? [ 598.608730][ T25] usb 2-1: can't read configurations, error -71 [ 598.617339][ T5866] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 598.648999][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1748'. [ 598.666705][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1748'. [ 598.950346][ T29] audit: type=1400 audit(1733127136.983:658): avc: denied { unmount } for pid=7884 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 598.970070][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.026211][T12271] FAULT_INJECTION: forcing a failure. [ 599.026211][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 599.039078][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.5.1753 Not tainted 6.13.0-rc1-syzkaller #0 [ 599.048096][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.058135][T12271] Call Trace: [ 599.061402][T12271] [ 599.064322][T12271] dump_stack_lvl+0x16c/0x1f0 [ 599.068991][T12271] should_fail_ex+0x497/0x5b0 [ 599.073657][T12271] ? fs_reclaim_acquire+0xae/0x150 [ 599.078765][T12271] should_failslab+0xc2/0x120 [ 599.083430][T12271] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 599.089220][T12271] ? __lock_acquire+0xcc5/0x3c40 [ 599.094141][T12271] ? __alloc_skb+0x2b1/0x380 [ 599.098728][T12271] __alloc_skb+0x2b1/0x380 [ 599.103135][T12271] ? __pfx___alloc_skb+0x10/0x10 [ 599.108065][T12271] ? avc_has_perm_noaudit+0x119/0x3a0 [ 599.113425][T12271] ? __pfx_lock_release+0x10/0x10 [ 599.118437][T12271] ? trace_lock_acquire+0x14e/0x1f0 [ 599.123630][T12271] alloc_skb_with_frags+0xe4/0x850 [ 599.128724][T12271] ? avc_has_perm_noaudit+0x61/0x3a0 [ 599.134001][T12271] sock_alloc_send_pskb+0x7f1/0x980 [ 599.139191][T12271] ? avc_has_perm+0x11b/0x1c0 [ 599.143857][T12271] ? __pfx_avc_has_perm+0x10/0x10 [ 599.148871][T12271] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 599.154579][T12271] ? avc_has_perm_noaudit+0x143/0x3a0 [ 599.159948][T12271] ? sock_has_perm+0x25a/0x2f0 [ 599.164710][T12271] ? __pfx_sock_has_perm+0x10/0x10 [ 599.169820][T12271] hci_sock_sendmsg+0x1c8/0x25e0 [ 599.174759][T12271] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 599.180134][T12271] sock_write_iter+0x4fe/0x5b0 [ 599.184892][T12271] ? __pfx_sock_write_iter+0x10/0x10 [ 599.190176][T12271] ? bpf_lsm_file_permission+0x9/0x10 [ 599.195543][T12271] ? security_file_permission+0x71/0x210 [ 599.201168][T12271] vfs_write+0x5ae/0x1150 [ 599.205487][T12271] ? __pfx_sock_write_iter+0x10/0x10 [ 599.210760][T12271] ? __pfx_vfs_write+0x10/0x10 [ 599.215514][T12271] ? __fget_files+0x40/0x3a0 [ 599.220095][T12271] ksys_write+0x207/0x250 [ 599.224410][T12271] ? __pfx_ksys_write+0x10/0x10 [ 599.229252][T12271] do_syscall_64+0xcd/0x250 [ 599.233747][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.239635][T12271] RIP: 0033:0x7fd46b180849 [ 599.244036][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.263625][T12271] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.272021][T12271] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 599.279974][T12271] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 599.287928][T12271] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 599.295882][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.303836][T12271] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 599.311797][T12271] [ 599.314909][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.373755][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.388384][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.560869][ T5866] gspca_sonixj: reg_r err -32 [ 599.574772][ T5866] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 599.630402][T12275] netlink: 1275 bytes leftover after parsing attributes in process `syz.5.1755'. [ 599.639773][T12275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.675338][T12277] FAULT_INJECTION: forcing a failure. [ 599.675338][T12277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.700013][T12277] CPU: 1 UID: 0 PID: 12277 Comm: syz.4.1754 Not tainted 6.13.0-rc1-syzkaller #0 [ 599.709055][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.719110][T12277] Call Trace: [ 599.722374][T12277] [ 599.725293][T12277] dump_stack_lvl+0x16c/0x1f0 [ 599.729962][T12277] should_fail_ex+0x497/0x5b0 [ 599.734632][T12277] _copy_from_user+0x2e/0xd0 [ 599.739206][T12277] copy_msghdr_from_user+0x99/0x160 [ 599.744391][T12277] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 599.750194][T12277] ___sys_sendmsg+0xff/0x1e0 [ 599.754769][T12277] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.759957][T12277] ? __pfx_lock_release+0x10/0x10 [ 599.764967][T12277] ? trace_lock_acquire+0x14e/0x1f0 [ 599.770164][T12277] ? __fget_files+0x206/0x3a0 [ 599.774828][T12277] __sys_sendmsg+0x16e/0x220 [ 599.779402][T12277] ? __pfx___sys_sendmsg+0x10/0x10 [ 599.784507][T12277] do_syscall_64+0xcd/0x250 [ 599.788997][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.794879][T12277] RIP: 0033:0x7fadedf80849 [ 599.799280][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.818893][T12277] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.827288][T12277] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 599.835250][T12277] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 599.843202][T12277] RBP: 00007fadeed270a0 R08: 0000000000000000 R09: 0000000000000000 [ 599.851157][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.859109][T12277] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 599.867073][T12277] [ 599.945357][T12284] overlayfs: missing 'lowerdir' [ 603.141668][T12303] qnx4: no qnx4 filesystem (no root dir). [ 603.685437][ T969] usb 4-1: USB disconnect, device number 2 [ 603.788665][ T5865] usb 3-1: USB disconnect, device number 4 [ 603.971889][T12316] qnx4: no qnx4 filesystem (no root dir). [ 604.952679][T12338] overlayfs: failed to resolve './file1': -2 [ 605.508430][T12345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12345 comm=syz.1.1771 [ 605.753342][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 606.488037][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'. [ 606.501374][ T29] audit: type=1400 audit(1733127144.533:659): avc: denied { bind } for pid=12355 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 606.528405][T12361] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 606.545191][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 606.603508][ T29] audit: type=1400 audit(1733127144.633:660): avc: denied { create } for pid=12346 comm="syz.4.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 606.641268][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.664928][ T46] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 606.696259][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.717241][ T29] audit: type=1400 audit(1733127144.653:661): avc: denied { setopt } for pid=12346 comm="syz.4.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 606.747781][ T46] usb 3-1: config 0 descriptor?? [ 606.989603][ T5820] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 607.129882][ T5820] usb 2-1: device descriptor read/64, error -71 [ 607.171252][ T46] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 607.201985][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input133 [ 607.242068][T12371] fuse: Bad value for 'fd' [ 607.351811][ T46] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 607.379594][ T5820] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 607.522266][ T5820] usb 2-1: device descriptor read/64, error -71 [ 607.738997][ T5820] usb usb2-port1: attempt power cycle [ 608.079608][ T5820] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 608.368337][ T5820] usb 2-1: device descriptor read/8, error -71 [ 608.519634][ T46] usb 3-1: USB disconnect, device number 5 [ 608.690173][ T5820] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 608.710505][T12385] FAULT_INJECTION: forcing a failure. [ 608.710505][T12385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.723693][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.4.1782 Not tainted 6.13.0-rc1-syzkaller #0 [ 608.732704][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 608.742732][T12385] Call Trace: [ 608.745988][T12385] [ 608.748895][T12385] dump_stack_lvl+0x16c/0x1f0 [ 608.753555][T12385] should_fail_ex+0x497/0x5b0 [ 608.758221][T12385] _copy_from_user+0x2e/0xd0 [ 608.762791][T12385] move_addr_to_kernel+0x68/0x160 [ 608.767793][T12385] __sys_connect+0xb0/0x170 [ 608.772272][T12385] ? __pfx___sys_connect+0x10/0x10 [ 608.777378][T12385] __x64_sys_connect+0x72/0xb0 [ 608.782123][T12385] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.787299][T12385] do_syscall_64+0xcd/0x250 [ 608.791782][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.797651][T12385] RIP: 0033:0x7fadedf80849 [ 608.802059][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.821642][T12385] RSP: 002b:00007fadeece5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 608.830046][T12385] RAX: ffffffffffffffda RBX: 00007fadee146160 RCX: 00007fadedf80849 [ 608.837996][T12385] RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000000008 [ 608.845941][T12385] RBP: 00007fadeece50a0 R08: 0000000000000000 R09: 0000000000000000 [ 608.853891][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.861842][T12385] R13: 0000000000000000 R14: 00007fadee146160 R15: 00007fff11477138 [ 608.869807][T12385] [ 608.879973][ T25] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 609.083259][ T5820] usb 2-1: device descriptor read/8, error -71 [ 609.123482][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 609.132362][ T25] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 609.141364][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.153595][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.163996][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.174690][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.188029][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.198057][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.199697][ T5820] usb usb2-port1: unable to enumerate USB device [ 609.419703][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 609.433392][ T25] usb 6-1: usb_control_msg returned -32 [ 609.438980][ T25] usbtmc 6-1:16.0: can't read capabilities [ 609.579563][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 609.596911][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 609.606994][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 609.627298][ T46] usb 3-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 609.638573][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 609.640233][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.655200][ T5866] usb 6-1: USB disconnect, device number 74 [ 609.667030][ T46] usb 3-1: Product: syz [ 609.672429][ T46] usb 3-1: Manufacturer: syz [ 609.673643][T12390] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 609.677145][ T46] usb 3-1: SerialNumber: syz [ 609.699432][ T46] usb 3-1: config 0 descriptor?? [ 609.708723][T12400] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 609.887190][T12406] qnx4: no qnx4 filesystem (no root dir). [ 610.169761][ T5866] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 610.249003][ T5820] usb 3-1: USB disconnect, device number 6 [ 610.439644][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 610.541098][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 610.636409][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.654179][ T5866] usb 6-1: Product: syz [ 610.679544][ T5866] usb 6-1: Manufacturer: syz [ 610.689940][ T5866] usb 6-1: SerialNumber: syz [ 610.698282][ T5866] usb 6-1: config 0 descriptor?? [ 611.373340][ T5866] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 611.807006][T12424] FAULT_INJECTION: forcing a failure. [ 611.807006][T12424] name failslab, interval 1, probability 0, space 0, times 0 [ 611.821952][T12419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.849619][T12424] CPU: 0 UID: 0 PID: 12424 Comm: syz.2.1795 Not tainted 6.13.0-rc1-syzkaller #0 [ 611.858676][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 611.864249][T12427] FAULT_INJECTION: forcing a failure. [ 611.864249][T12427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.868718][T12424] Call Trace: [ 611.868727][T12424] [ 611.868735][T12424] dump_stack_lvl+0x16c/0x1f0 [ 611.892563][T12424] should_fail_ex+0x497/0x5b0 [ 611.897246][T12424] ? fs_reclaim_acquire+0xae/0x150 [ 611.902362][T12424] should_failslab+0xc2/0x120 [ 611.907027][T12424] __kmalloc_noprof+0xcb/0x510 [ 611.911783][T12424] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 611.917411][T12424] tomoyo_realpath_from_path+0xb9/0x720 [ 611.922949][T12424] ? tomoyo_path_number_perm+0x235/0x590 [ 611.928575][T12424] ? tomoyo_path_number_perm+0x235/0x590 [ 611.934199][T12424] tomoyo_path_number_perm+0x248/0x590 [ 611.939661][T12424] ? tomoyo_path_number_perm+0x235/0x590 [ 611.945293][T12424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 611.951303][T12424] ? __pfx_lock_release+0x10/0x10 [ 611.956333][T12424] ? trace_lock_acquire+0x14e/0x1f0 [ 611.961524][T12424] ? lock_acquire+0x2f/0xb0 [ 611.966031][T12424] ? __fget_files+0x40/0x3a0 [ 611.970620][T12424] ? __fget_files+0x206/0x3a0 [ 611.975291][T12424] security_file_ioctl+0x9b/0x240 [ 611.980315][T12424] __x64_sys_ioctl+0xb7/0x200 [ 611.984989][T12424] do_syscall_64+0xcd/0x250 [ 611.989491][T12424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.995382][T12424] RIP: 0033:0x7fee2b980849 [ 611.999790][T12424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.019397][T12424] RSP: 002b:00007fee2c7ae058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.027812][T12424] RAX: ffffffffffffffda RBX: 00007fee2bb45fa0 RCX: 00007fee2b980849 [ 612.035792][T12424] RDX: 0000000020000340 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 612.043756][T12424] RBP: 00007fee2c7ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 612.051727][T12424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.059686][T12424] R13: 0000000000000000 R14: 00007fee2bb45fa0 R15: 00007ffd4c046d38 [ 612.067658][T12424] [ 612.077733][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 612.084432][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.4.1798 Not tainted 6.13.0-rc1-syzkaller #0 [ 612.088820][T12424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 612.093460][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.093473][T12427] Call Trace: [ 612.093480][T12427] [ 612.093488][T12427] dump_stack_lvl+0x16c/0x1f0 [ 612.093516][T12427] should_fail_ex+0x497/0x5b0 [ 612.125739][T12427] _copy_from_user+0x2e/0xd0 [ 612.130345][T12427] pppol2tp_setsockopt+0x28e/0x620 [ 612.135472][T12427] ? __pfx_pppol2tp_setsockopt+0x10/0x10 [ 612.141128][T12427] ? selinux_socket_setsockopt+0x6a/0x80 [ 612.146760][T12427] ? __pfx_pppol2tp_setsockopt+0x10/0x10 [ 612.152395][T12427] do_sock_setsockopt+0x222/0x480 [ 612.157428][T12427] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 612.162979][T12427] ? lock_acquire+0x2f/0xb0 [ 612.167500][T12427] __sys_setsockopt+0x1a0/0x230 [ 612.172356][T12427] __x64_sys_setsockopt+0xbd/0x160 [ 612.177476][T12427] ? do_syscall_64+0x91/0x250 [ 612.182163][T12427] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.187369][T12427] do_syscall_64+0xcd/0x250 [ 612.191886][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.197795][T12427] RIP: 0033:0x7fadedf80849 [ 612.202213][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.221827][T12427] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.230232][T12427] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 612.238187][T12427] RDX: 0000000000000003 RSI: 0000000000000111 RDI: 0000000000000006 [ 612.246577][T12427] RBP: 00007fadeed270a0 R08: 0000000000000004 R09: 0000000000000000 [ 612.254534][T12427] R10: 0000000020000008 R11: 0000000000000246 R12: 0000000000000001 [ 612.262519][T12427] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 612.270482][T12427] [ 612.280195][ T46] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 612.312611][ T5866] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 612.421321][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 612.450989][ T46] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 612.460660][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.471409][ T46] usb 2-1: config 0 descriptor?? [ 612.511277][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.520379][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.569673][ T25] usb 3-1: device descriptor read/64, error -71 [ 612.826604][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 613.009879][ T25] usb 3-1: device descriptor read/64, error -71 [ 613.135811][ T25] usb usb3-port1: attempt power cycle [ 613.362476][ T5820] usb 6-1: USB disconnect, device number 75 [ 613.539790][ T46] ath6kl: Failed to submit usb control message: -110 [ 613.546539][ T46] ath6kl: unable to send the bmi data to the device: -110 [ 613.554056][ T46] ath6kl: Unable to send get target info: -110 [ 613.569568][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 614.192135][ T25] usb 3-1: device descriptor read/8, error -71 [ 614.264173][ T46] ath6kl: Failed to init ath6kl core: -110 [ 614.270589][ T46] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 614.282672][ T46] usb 2-1: USB disconnect, device number 125 [ 614.482838][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 614.531999][ T25] usb 3-1: device descriptor read/8, error -71 [ 614.571289][ T29] audit: type=1400 audit(1733127152.593:662): avc: denied { getopt } for pid=12471 comm="syz.4.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 614.596233][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.617154][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.623646][ T29] audit: type=1400 audit(1733127152.653:663): avc: denied { setopt } for pid=12469 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 614.646814][ T25] usb usb3-port1: unable to enumerate USB device [ 614.662701][T12468] team0: Port device team_slave_0 removed [ 614.870086][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.980678][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.217747][T12489] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 615.268424][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 615.973247][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 616.920653][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 616.927172][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.937975][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 616.957552][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 616.969028][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 616.979105][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 616.996163][ T5820] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 617.001664][ T29] audit: type=1400 audit(1733127155.023:664): avc: denied { relabelfrom } for pid=12510 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 617.005620][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 617.038008][ T5820] usb 4-1: Product: syz [ 617.043255][ T5820] usb 4-1: Manufacturer: syz [ 617.048203][ T5820] usb 4-1: SerialNumber: syz [ 617.055978][ T5820] usb 4-1: config 0 descriptor?? [ 617.079670][ T29] audit: type=1400 audit(1733127155.073:665): avc: denied { relabelto } for pid=12510 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 617.663809][ T5820] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 617.675762][ T5820] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 618.238809][T12528] 9pnet: p9_errstr2errno: server reported unknown error õ’ôÙ!zwÕMÍÚ¬¾ÇÂß_ù—dlŽj×Y«ò’à‚ [ 618.360076][ T5820] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 618.384450][T12534] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 618.395791][T12534] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.140752][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.142928][ T5820] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 619.142945][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.153243][ T969] usb 4-1: USB disconnect, device number 3 [ 619.204398][ T5820] usb 2-1: config 0 descriptor?? [ 619.231658][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 619.447782][ T5820] pwc: send_video_command error -71 [ 619.459662][ T5820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 619.467440][ T5820] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 619.483948][ T5820] usb 2-1: USB disconnect, device number 126 [ 619.492871][T12549] bond0: (slave syz_tun): Releasing backup interface [ 619.533068][T12551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1835'. [ 619.749374][ T29] audit: type=1400 audit(1733127157.773:666): avc: denied { wake_alarm } for pid=12554 comm="syz.4.1837" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 619.881814][T12557] FAULT_INJECTION: forcing a failure. [ 619.881814][T12557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.894938][T12557] CPU: 1 UID: 0 PID: 12557 Comm: syz.4.1837 Not tainted 6.13.0-rc1-syzkaller #0 [ 619.903951][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 619.913996][T12557] Call Trace: [ 619.917249][T12557] [ 619.920157][T12557] dump_stack_lvl+0x16c/0x1f0 [ 619.924811][T12557] should_fail_ex+0x497/0x5b0 [ 619.929477][T12557] _copy_from_user+0x2e/0xd0 [ 619.934047][T12557] copy_msghdr_from_user+0x99/0x160 [ 619.939217][T12557] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 619.945003][T12557] ___sys_sendmsg+0xff/0x1e0 [ 619.949573][T12557] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.954774][T12557] ? __pfx_lock_release+0x10/0x10 [ 619.959773][T12557] ? trace_lock_acquire+0x14e/0x1f0 [ 619.964950][T12557] ? __fget_files+0x206/0x3a0 [ 619.969604][T12557] __sys_sendmsg+0x16e/0x220 [ 619.974182][T12557] ? __pfx___sys_sendmsg+0x10/0x10 [ 619.979284][T12557] do_syscall_64+0xcd/0x250 [ 619.983779][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.989653][T12557] RIP: 0033:0x7fadedf80849 [ 619.994044][T12557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.013632][T12557] RSP: 002b:00007fadeed06058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.022032][T12557] RAX: ffffffffffffffda RBX: 00007fadee146080 RCX: 00007fadedf80849 [ 620.029989][T12557] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 620.037941][T12557] RBP: 00007fadeed060a0 R08: 0000000000000000 R09: 0000000000000000 [ 620.045902][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.053855][T12557] R13: 0000000000000000 R14: 00007fadee146080 R15: 00007fff11477138 [ 620.061911][T12557] [ 621.149549][ T46] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 621.509696][T12569] qnx4: no qnx4 filesystem (no root dir). [ 621.705893][T12582] overlayfs: failed to resolve './file1': -2 [ 622.848642][ T46] usb 6-1: unable to get BOS descriptor or descriptor too short [ 623.020640][ T46] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 623.028232][ T46] usb 6-1: can't read configurations, error -71 [ 623.889405][T12611] qnx4: no qnx4 filesystem (no root dir). [ 623.948441][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.954952][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.099525][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 624.159903][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.180837][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.217636][T12620] cifs: Unknown parameter 'PË:j % ¤¼ô ' [ 624.419536][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.432403][T12619] siw: device registration error -23 [ 624.441055][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.450425][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.462034][ T25] usb 3-1: config 0 descriptor?? [ 624.470018][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 624.529579][ T5866] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 624.679770][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 624.687849][ T5866] usb 2-1: config 120 has an invalid interface number: 207 but max is 0 [ 624.700270][ T5866] usb 2-1: config 120 has no interface number 0 [ 624.724735][ T5866] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 624.739057][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.748811][ T5866] usb 2-1: Product: syz [ 624.763763][T12629] kvm: kvm [12628]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x676e696c21 [ 624.780072][ T25] pwc: send_video_command error -71 [ 624.785342][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 624.802034][ T25] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 624.855707][ T5866] usb 2-1: Manufacturer: syz [ 624.861747][ T25] usb 3-1: USB disconnect, device number 11 [ 624.880715][ T5866] usb 2-1: SerialNumber: syz [ 624.929372][ T5866] r8152-cfgselector 2-1: Unknown version 0x0000 [ 625.155452][ T5866] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 625.299592][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 625.439565][ T969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 625.474451][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.497258][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.506600][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.521264][ T25] usb 3-1: config 0 descriptor?? [ 625.533294][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 625.593737][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.608432][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.625579][ T969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.638695][ T969] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.650957][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.682635][ T969] usb 4-1: config 0 descriptor?? [ 625.739371][T12647] IPVS: lc: UDP 0.0.0.0:0 - no destination available [ 625.957379][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 626.470148][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 626.478167][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 626.485250][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 626.496997][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 626.504879][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 626.516986][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 626.527255][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 626.538162][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 626.546329][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 626.557274][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 626.577729][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 626.586582][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 626.605049][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 626.624308][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 626.655982][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.672101][ T25] pwc: Registered as video103. [ 626.693623][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input135 [ 626.741280][T12659] FAULT_INJECTION: forcing a failure. [ 626.741280][T12659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.761248][T12659] CPU: 0 UID: 0 PID: 12659 Comm: syz.5.1868 Not tainted 6.13.0-rc1-syzkaller #0 [ 626.770305][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 626.780369][T12659] Call Trace: [ 626.783646][T12659] [ 626.786576][T12659] dump_stack_lvl+0x16c/0x1f0 [ 626.791273][T12659] should_fail_ex+0x497/0x5b0 [ 626.795965][T12659] _copy_from_user+0x2e/0xd0 [ 626.800564][T12659] do_ipt_set_ctl+0x8f2/0xc30 [ 626.805252][T12659] ? __mutex_lock+0x1cc/0xa60 [ 626.809952][T12659] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 626.815160][T12659] ? __mutex_unlock_slowpath+0x164/0x690 [ 626.820802][T12659] ? sockopt_release_sock+0x52/0x60 [ 626.826017][T12659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 626.832018][T12659] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 626.838009][T12659] nf_setsockopt+0x8a/0xf0 [ 626.842427][T12659] ip_setsockopt+0xcb/0xf0 [ 626.846822][T12659] udp_setsockopt+0x7d/0xd0 [ 626.851304][T12659] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 626.857170][T12659] do_sock_setsockopt+0x222/0x480 [ 626.862178][T12659] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 626.867714][T12659] ? lock_acquire+0x2f/0xb0 [ 626.872215][T12659] __sys_setsockopt+0x1a0/0x230 [ 626.877054][T12659] __x64_sys_setsockopt+0xbd/0x160 [ 626.882147][T12659] ? do_syscall_64+0x91/0x250 [ 626.886813][T12659] ? lockdep_hardirqs_on+0x7c/0x110 [ 626.891997][T12659] do_syscall_64+0xcd/0x250 [ 626.896505][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.902388][T12659] RIP: 0033:0x7fd46b180849 [ 626.906788][T12659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.926377][T12659] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.934773][T12659] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 626.942726][T12659] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 626.950678][T12659] RBP: 00007fd46c0550a0 R08: 0000000000000350 R09: 0000000000000000 [ 626.958645][T12659] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.966598][T12659] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 626.974561][T12659] [ 626.994737][ T25] usb 3-1: USB disconnect, device number 12 [ 627.148636][T12665] FAULT_INJECTION: forcing a failure. [ 627.148636][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.162880][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.1.1869 Not tainted 6.13.0-rc1-syzkaller #0 [ 627.171914][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.181976][T12665] Call Trace: [ 627.185253][T12665] [ 627.188164][T12665] dump_stack_lvl+0x16c/0x1f0 [ 627.192840][T12665] should_fail_ex+0x497/0x5b0 [ 627.197543][T12665] _copy_from_user+0x2e/0xd0 [ 627.202142][T12665] copy_msghdr_from_user+0x99/0x160 [ 627.207348][T12665] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 627.213170][T12665] ___sys_sendmsg+0xff/0x1e0 [ 627.217764][T12665] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.222977][T12665] ? __pfx_lock_release+0x10/0x10 [ 627.228005][T12665] ? trace_lock_acquire+0x14e/0x1f0 [ 627.233212][T12665] ? __fget_files+0x206/0x3a0 [ 627.237888][T12665] __sys_sendmsg+0x16e/0x220 [ 627.242472][T12665] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.247604][T12665] do_syscall_64+0xcd/0x250 [ 627.252116][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.258022][T12665] RIP: 0033:0x7f3eabd80849 [ 627.262440][T12665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.282052][T12665] RSP: 002b:00007f3eacba5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.290475][T12665] RAX: ffffffffffffffda RBX: 00007f3eabf45fa0 RCX: 00007f3eabd80849 [ 627.298453][T12665] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 627.306428][T12665] RBP: 00007f3eacba50a0 R08: 0000000000000000 R09: 0000000000000000 [ 627.314140][T12670] FAULT_INJECTION: forcing a failure. [ 627.314140][T12670] name failslab, interval 1, probability 0, space 0, times 0 [ 627.314386][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.314401][T12665] R13: 0000000000000000 R14: 00007f3eabf45fa0 R15: 00007fff105e3428 [ 627.314427][T12665] [ 627.383709][T12670] CPU: 0 UID: 0 PID: 12670 Comm: syz.2.1872 Not tainted 6.13.0-rc1-syzkaller #0 [ 627.392767][T12670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.402825][T12670] Call Trace: [ 627.406104][T12670] [ 627.409038][T12670] dump_stack_lvl+0x16c/0x1f0 [ 627.413728][T12670] should_fail_ex+0x497/0x5b0 [ 627.418418][T12670] ? fs_reclaim_acquire+0xae/0x150 [ 627.423545][T12670] should_failslab+0xc2/0x120 [ 627.428233][T12670] __kmalloc_noprof+0xcb/0x510 [ 627.433011][T12670] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 627.438673][T12670] tomoyo_realpath_from_path+0xb9/0x720 [ 627.444238][T12670] ? tomoyo_path_number_perm+0x235/0x590 [ 627.449882][T12670] ? tomoyo_path_number_perm+0x235/0x590 [ 627.455532][T12670] tomoyo_path_number_perm+0x248/0x590 [ 627.461003][T12670] ? tomoyo_path_number_perm+0x235/0x590 [ 627.466649][T12670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 627.472664][T12670] ? __pfx_lock_release+0x10/0x10 [ 627.477691][T12670] ? trace_lock_acquire+0x14e/0x1f0 [ 627.482906][T12670] ? lock_acquire+0x2f/0xb0 [ 627.487414][T12670] ? __fget_files+0x40/0x3a0 [ 627.492013][T12670] ? __fget_files+0x206/0x3a0 [ 627.496701][T12670] security_file_ioctl+0x9b/0x240 [ 627.501742][T12670] __x64_sys_ioctl+0xb7/0x200 [ 627.506442][T12670] do_syscall_64+0xcd/0x250 [ 627.510957][T12670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.516845][T12670] RIP: 0033:0x7fee2b980849 [ 627.521248][T12670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.540846][T12670] RSP: 002b:00007fee2c7ae058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.549251][T12670] RAX: ffffffffffffffda RBX: 00007fee2bb45fa0 RCX: 00007fee2b980849 [ 627.557209][T12670] RDX: 0000000000000000 RSI: 0000000040101288 RDI: 0000000000000003 [ 627.565168][T12670] RBP: 00007fee2c7ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 627.573123][T12670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.581078][T12670] R13: 0000000000000000 R14: 00007fee2bb45fa0 R15: 00007ffd4c046d38 [ 627.589043][T12670] [ 627.601597][T12670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.695299][ T29] audit: type=1400 audit(1733127165.723:667): avc: denied { mount } for pid=12672 comm="syz.1.1873" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 627.754512][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 628.266088][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 628.291880][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 628.296784][T12691] syz.3.1879 (12691): attempted to duplicate a private mapping with mremap. This is not supported. [ 628.324345][ T969] usb 4-1: USB disconnect, device number 4 [ 628.549986][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 629.320740][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.331057][ T8] usb 3-1: config 0 has no interfaces? [ 629.336532][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 629.358011][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.380077][ T8] usb 3-1: config 0 descriptor?? [ 629.408696][ T29] audit: type=1400 audit(1733127167.433:668): avc: denied { write } for pid=12702 comm="syz.4.1882" path="socket:[36011]" dev="sockfs" ino=36011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 629.412085][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.432777][ T969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 629.455271][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.661845][T12709] netlink: 'syz.5.1884': attribute type 2 has an invalid length. [ 629.919723][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.191653][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.201890][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.213000][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 630.222304][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.245743][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.255413][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.265273][ T969] usb 4-1: config 0 descriptor?? [ 630.455723][T12713] FAULT_INJECTION: forcing a failure. [ 630.455723][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 630.468985][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.5.1885 Not tainted 6.13.0-rc1-syzkaller #0 [ 630.478024][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.488075][T12713] Call Trace: [ 630.491350][T12713] [ 630.494285][T12713] dump_stack_lvl+0x16c/0x1f0 [ 630.498965][T12713] should_fail_ex+0x497/0x5b0 [ 630.503629][T12713] ? fs_reclaim_acquire+0xae/0x150 [ 630.508722][T12713] should_failslab+0xc2/0x120 [ 630.513386][T12713] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 630.519188][T12713] ? __lock_acquire+0xcc5/0x3c40 [ 630.524116][T12713] ? __alloc_skb+0x2b1/0x380 [ 630.528709][T12713] __alloc_skb+0x2b1/0x380 [ 630.533126][T12713] ? __pfx___alloc_skb+0x10/0x10 [ 630.538079][T12713] ? avc_has_perm_noaudit+0x119/0x3a0 [ 630.543466][T12713] ? __pfx_lock_release+0x10/0x10 [ 630.548516][T12713] ? trace_lock_acquire+0x14e/0x1f0 [ 630.553730][T12713] alloc_skb_with_frags+0xe4/0x850 [ 630.558852][T12713] ? avc_has_perm_noaudit+0x61/0x3a0 [ 630.564121][T12713] sock_alloc_send_pskb+0x7f1/0x980 [ 630.569309][T12713] ? avc_has_perm+0x11b/0x1c0 [ 630.573977][T12713] ? __pfx_avc_has_perm+0x10/0x10 [ 630.579010][T12713] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 630.584723][T12713] ? avc_has_perm_noaudit+0x143/0x3a0 [ 630.590102][T12713] ? sock_has_perm+0x25a/0x2f0 [ 630.594867][T12713] ? __pfx_sock_has_perm+0x10/0x10 [ 630.599980][T12713] hci_sock_sendmsg+0x1c8/0x25e0 [ 630.604920][T12713] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 630.610285][T12713] sock_write_iter+0x4fe/0x5b0 [ 630.615046][T12713] ? __pfx_sock_write_iter+0x10/0x10 [ 630.620322][T12713] ? bpf_lsm_file_permission+0x9/0x10 [ 630.625685][T12713] ? security_file_permission+0x71/0x210 [ 630.631310][T12713] vfs_write+0x5ae/0x1150 [ 630.635633][T12713] ? __pfx_sock_write_iter+0x10/0x10 [ 630.640905][T12713] ? __pfx_vfs_write+0x10/0x10 [ 630.645661][T12713] ? __fget_files+0x40/0x3a0 [ 630.650263][T12713] ksys_write+0x207/0x250 [ 630.654593][T12713] ? __pfx_ksys_write+0x10/0x10 [ 630.659448][T12713] do_syscall_64+0xcd/0x250 [ 630.663964][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.669860][T12713] RIP: 0033:0x7fd46b180849 [ 630.674273][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.678750][ T969] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 630.693868][T12713] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.693892][T12713] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 630.693904][T12713] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 630.693914][T12713] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 630.693924][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.693935][T12713] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 630.693957][T12713] [ 630.761468][ T969] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input136 [ 630.846204][ T969] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 630.857454][T12720] FAULT_INJECTION: forcing a failure. [ 630.857454][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.876291][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.4.1888 Not tainted 6.13.0-rc1-syzkaller #0 [ 630.885335][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.895396][T12720] Call Trace: [ 630.898679][T12720] [ 630.901610][T12720] dump_stack_lvl+0x16c/0x1f0 [ 630.906298][T12720] should_fail_ex+0x497/0x5b0 [ 630.910995][T12720] _copy_from_user+0x2e/0xd0 [ 630.915595][T12720] copy_msghdr_from_user+0x99/0x160 [ 630.920802][T12720] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 630.926623][T12720] ? get_pid_task+0xfc/0x250 [ 630.931200][T12720] ___sys_sendmsg+0xff/0x1e0 [ 630.935789][T12720] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.940996][T12720] ? __pfx_vfs_write+0x10/0x10 [ 630.945750][T12720] ? do_sys_openat2+0xb1/0x1e0 [ 630.950518][T12720] __sys_sendmsg+0x16e/0x220 [ 630.955100][T12720] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.960234][T12720] do_syscall_64+0xcd/0x250 [ 630.964744][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.970615][T12720] RIP: 0033:0x7fadedf80849 [ 630.975011][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.994614][T12720] RSP: 002b:00007fadeed27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.003015][T12720] RAX: ffffffffffffffda RBX: 00007fadee145fa0 RCX: 00007fadedf80849 [ 631.010967][T12720] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 631.018920][T12720] RBP: 00007fadeed270a0 R08: 0000000000000000 R09: 0000000000000000 [ 631.026885][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.034840][T12720] R13: 0000000000000000 R14: 00007fadee145fa0 R15: 00007fff11477138 [ 631.042813][T12720] [ 631.498891][ T969] usb 3-1: USB disconnect, device number 13 [ 631.531320][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 631.675862][T12730] syz_tun: entered promiscuous mode [ 631.730666][ T8] usb 4-1: USB disconnect, device number 5 [ 631.874809][T12730] batadv_slave_0: entered promiscuous mode [ 632.082049][T12742] FAULT_INJECTION: forcing a failure. [ 632.082049][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.098393][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.5.1894 Not tainted 6.13.0-rc1-syzkaller #0 [ 632.107411][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.117440][T12742] Call Trace: [ 632.120695][T12742] [ 632.123605][T12742] dump_stack_lvl+0x16c/0x1f0 [ 632.128263][T12742] should_fail_ex+0x497/0x5b0 [ 632.132920][T12742] _copy_from_user+0x2e/0xd0 [ 632.137486][T12742] __sys_bpf+0x21c/0x49c0 [ 632.141794][T12742] ? __pfx_lock_release+0x10/0x10 [ 632.146804][T12742] ? __pfx___sys_bpf+0x10/0x10 [ 632.151558][T12742] ? vfs_write+0x306/0x1150 [ 632.156071][T12742] ? __mutex_unlock_slowpath+0x164/0x690 [ 632.161734][T12742] ? fput+0x67/0x440 [ 632.165638][T12742] ? ksys_write+0x1ba/0x250 [ 632.170145][T12742] ? __pfx_ksys_write+0x10/0x10 [ 632.175006][T12742] __x64_sys_bpf+0x78/0xc0 [ 632.179430][T12742] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.184636][T12742] do_syscall_64+0xcd/0x250 [ 632.189142][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.195021][T12742] RIP: 0033:0x7fd46b180849 [ 632.199417][T12742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.219012][T12742] RSP: 002b:00007fd46c055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.227402][T12742] RAX: ffffffffffffffda RBX: 00007fd46b345fa0 RCX: 00007fd46b180849 [ 632.235347][T12742] RDX: 0000000000000050 RSI: 0000000020000140 RDI: 000000000000000a [ 632.243295][T12742] RBP: 00007fd46c0550a0 R08: 0000000000000000 R09: 0000000000000000 [ 632.251257][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.259222][T12742] R13: 0000000000000000 R14: 00007fd46b345fa0 R15: 00007ffca54ba758 [ 632.267190][T12742] [ 632.330968][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 632.380779][T12746] FAULT_INJECTION: forcing a failure. [ 632.380779][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 632.393566][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.2.1895 Not tainted 6.13.0-rc1-syzkaller #0 [ 632.402593][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.412629][T12746] Call Trace: [ 632.415898][T12746] [ 632.418830][T12746] dump_stack_lvl+0x16c/0x1f0 [ 632.423521][T12746] should_fail_ex+0x497/0x5b0 [ 632.428209][T12746] ? fs_reclaim_acquire+0xae/0x150 [ 632.433334][T12746] should_failslab+0xc2/0x120 [ 632.438020][T12746] __kmalloc_cache_noprof+0x68/0x410 [ 632.443317][T12746] alloc_pipe_info+0x10e/0x590 [ 632.448101][T12746] splice_direct_to_actor+0x793/0xa40 [ 632.453492][T12746] ? __pfx_direct_splice_actor+0x10/0x10 [ 632.459128][T12746] ? inode_has_perm+0x16f/0x1d0 [ 632.463983][T12746] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 632.469885][T12746] ? __pfx_file_has_perm+0x10/0x10 [ 632.475002][T12746] do_splice_direct+0x178/0x250 [ 632.479859][T12746] ? __pfx_do_splice_direct+0x10/0x10 [ 632.485239][T12746] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 632.491140][T12746] ? bpf_lsm_file_permission+0x9/0x10 [ 632.496519][T12746] ? security_file_permission+0x71/0x210 [ 632.502252][T12746] do_sendfile+0xaed/0xe30 [ 632.506673][T12746] ? __pfx_do_sendfile+0x10/0x10 [ 632.511611][T12746] ? __fget_files+0x206/0x3a0 [ 632.516291][T12746] __x64_sys_sendfile64+0x1da/0x220 [ 632.521491][T12746] ? ksys_write+0x1ba/0x250 [ 632.525990][T12746] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 632.531721][T12746] do_syscall_64+0xcd/0x250 [ 632.536226][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.542124][T12746] RIP: 0033:0x7fee2b980849 [ 632.546536][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.566142][T12746] RSP: 002b:00007fee2c78d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 632.574554][T12746] RAX: ffffffffffffffda RBX: 00007fee2bb46080 RCX: 00007fee2b980849 [ 632.582522][T12746] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 632.590487][T12746] RBP: 00007fee2c78d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 632.598452][T12746] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 632.606414][T12746] R13: 0000000000000000 R14: 00007fee2bb46080 R15: 00007ffd4c046d38 [ 632.614397][T12746] [ 632.846989][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.859388][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 632.971092][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 633.034703][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 633.205091][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.387523][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.399356][ T25] usb 2-1: config 0 descriptor?? [ 633.917774][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.928704][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.955171][T12760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.162890][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 634.172046][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 634.179920][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 634.213749][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 634.238883][ T25] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 634.246948][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 634.280195][ T25] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 634.426516][ T5866] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 634.437395][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.474513][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 634.511923][ T25] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 634.610300][ T5866] usb 3-1: config 0 descriptor?? [ 634.619003][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1891'. [ 634.681775][ T29] audit: type=1400 audit(1733127172.703:669): avc: denied { write } for pid=12771 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 634.746945][ T29] audit: type=1400 audit(1733127172.773:670): avc: denied { bind } for pid=12773 comm="syz.5.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.767706][ T29] audit: type=1400 audit(1733127172.773:671): avc: denied { write } for pid=12773 comm="syz.5.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.791544][ T29] audit: type=1400 audit(1733127172.773:672): avc: denied { map } for pid=12773 comm="syz.5.1903" path="/proc/780/net/ip6_flowlabel" dev="proc" ino=4026534042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 634.835534][ T29] audit: type=1400 audit(1733127172.773:673): avc: denied { execute } for pid=12773 comm="syz.5.1903" path="/proc/780/net/ip6_flowlabel" dev="proc" ino=4026534042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 634.860933][ T29] audit: type=1400 audit(1733127172.773:674): avc: denied { read } for pid=12773 comm="syz.5.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.944238][T12787] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 635.209754][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 635.252083][ T5820] usb 2-1: USB disconnect, device number 3 [ 635.401703][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 635.422141][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.438212][ T25] usb 4-1: config 0 descriptor?? [ 635.699693][ T5864] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 635.770850][ T5866] ath6kl: Failed to submit usb control message: -110 [ 635.778913][ T5866] ath6kl: unable to send the bmi data to the device: -110 [ 635.828415][ T5866] ath6kl: Unable to send get target info: -110 [ 635.929179][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.188094][ T5864] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.198027][ T5866] ath6kl: Failed to init ath6kl core: -110 [ 636.204738][ T5866] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 636.213748][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.224969][ T5864] usb 6-1: config 0 descriptor?? [ 636.236173][ T5866] usb 3-1: USB disconnect, device number 14 [ 636.858206][ T25] ath6kl: Failed to submit usb control message: -110 [ 636.865074][ T25] ath6kl: unable to send the bmi data to the device: -110 [ 636.872371][ T25] ath6kl: Unable to send get target info: -110 [ 637.533912][ T25] ath6kl: Failed to init ath6kl core: -110 [ 637.540957][ T25] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 637.578980][ T25] usb 4-1: USB disconnect, device number 6 [ 637.618293][T12817] FAULT_INJECTION: forcing a failure. [ 637.618293][T12817] name failslab, interval 1, probability 0, space 0, times 0 [ 637.631225][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.4.1911 Not tainted 6.13.0-rc1-syzkaller #0 [ 637.640264][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 637.650322][T12817] Call Trace: [ 637.653588][T12817] [ 637.656498][T12817] dump_stack_lvl+0x16c/0x1f0 [ 637.661168][T12817] should_fail_ex+0x497/0x5b0 [ 637.665840][T12817] ? fs_reclaim_acquire+0xae/0x150 [ 637.670947][T12817] should_failslab+0xc2/0x120 [ 637.675615][T12817] __kmalloc_noprof+0xcb/0x510 [ 637.680375][T12817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 637.686003][T12817] tomoyo_realpath_from_path+0xb9/0x720 [ 637.691546][T12817] ? tomoyo_path_number_perm+0x235/0x590 [ 637.697170][T12817] ? tomoyo_path_number_perm+0x235/0x590 [ 637.702797][T12817] tomoyo_path_number_perm+0x248/0x590 [ 637.708242][T12817] ? tomoyo_path_number_perm+0x235/0x590 [ 637.713874][T12817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 637.719863][T12817] ? __pfx_lock_release+0x10/0x10 [ 637.724873][T12817] ? trace_lock_acquire+0x14e/0x1f0 [ 637.730064][T12817] ? lock_acquire+0x2f/0xb0 [ 637.734564][T12817] ? __fget_files+0x40/0x3a0 [ 637.739149][T12817] ? __fget_files+0x206/0x3a0 [ 637.743818][T12817] security_file_ioctl+0x9b/0x240 [ 637.748838][T12817] __x64_sys_ioctl+0xb7/0x200 [ 637.753518][T12817] do_syscall_64+0xcd/0x250 [ 637.758025][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.763907][T12817] RIP: 0033:0x7fadedf80849 [ 637.768306][T12817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.787912][T12817] RSP: 002b:00007fadeece5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.796310][T12817] RAX: ffffffffffffffda RBX: 00007fadee146160 RCX: 00007fadedf80849 [ 637.804263][T12817] RDX: 0000000020000100 RSI: 00000000c02c5341 RDI: 0000000000000003 [ 637.812218][T12817] RBP: 00007fadeece50a0 R08: 0000000000000000 R09: 0000000000000000 [ 637.820169][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.828119][T12817] R13: 0000000000000001 R14: 00007fadee146160 R15: 00007fff11477138 [ 637.836082][T12817] [ 637.849239][T12817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 638.768101][ T5864] usbhid 6-1:0.0: can't add hid device: -71 [ 638.775231][ T5864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 638.837555][ T5864] usb 6-1: USB disconnect, device number 78 [ 639.680103][ T5864] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 640.403496][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 640.550434][T12865] FAULT_INJECTION: forcing a failure. [ 640.550434][T12865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.568101][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.2.1926 Not tainted 6.13.0-rc1-syzkaller #0 [ 640.577152][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.587213][T12865] Call Trace: [ 640.590488][T12865] [ 640.593415][T12865] dump_stack_lvl+0x16c/0x1f0 [ 640.598099][T12865] should_fail_ex+0x497/0x5b0 [ 640.602785][T12865] _copy_from_user+0x2e/0xd0 [ 640.607379][T12865] copy_msghdr_from_user+0x99/0x160 [ 640.612583][T12865] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 640.618388][T12865] ___sys_sendmsg+0xff/0x1e0 [ 640.622973][T12865] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.628185][T12865] ? __pfx_lock_release+0x10/0x10 [ 640.633215][T12865] ? trace_lock_acquire+0x14e/0x1f0 [ 640.638433][T12865] ? __fget_files+0x206/0x3a0 [ 640.643114][T12865] __sys_sendmsg+0x16e/0x220 [ 640.647701][T12865] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.652827][T12865] do_syscall_64+0xcd/0x250 [ 640.657335][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.663231][T12865] RIP: 0033:0x7fee2b980849 [ 640.667646][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.687258][T12865] RSP: 002b:00007fee2c7ae058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.695681][T12865] RAX: ffffffffffffffda RBX: 00007fee2bb45fa0 RCX: 00007fee2b980849 [ 640.703664][T12865] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 640.711638][T12865] RBP: 00007fee2c7ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 640.719610][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.727578][T12865] R13: 0000000000000000 R14: 00007fee2bb45fa0 R15: 00007ffd4c046d38 [ 640.735569][T12865] [ 640.738695][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.744640][T12867] FAULT_INJECTION: forcing a failure. [ 640.744640][T12867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.744664][T12867] CPU: 1 UID: 0 PID: 12867 Comm: syz.3.1927 Not tainted 6.13.0-rc1-syzkaller #0 [ 640.766667][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.776724][T12867] Call Trace: [ 640.780025][T12867] [ 640.782941][T12867] dump_stack_lvl+0x16c/0x1f0 [ 640.787611][T12867] should_fail_ex+0x497/0x5b0 [ 640.792281][T12867] _copy_from_user+0x2e/0xd0 [ 640.796857][T12867] copy_msghdr_from_user+0x99/0x160 [ 640.802042][T12867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 640.807841][T12867] ___sys_sendmsg+0xff/0x1e0 [ 640.812416][T12867] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.817604][T12867] ? __pfx_lock_release+0x10/0x10 [ 640.822610][T12867] ? trace_lock_acquire+0x14e/0x1f0 [ 640.827801][T12867] ? __fget_files+0x206/0x3a0 [ 640.832465][T12867] __sys_sendmsg+0x16e/0x220 [ 640.837035][T12867] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.842140][T12867] do_syscall_64+0xcd/0x250 [ 640.846631][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.852508][T12867] RIP: 0033:0x7f1014180849 [ 640.856904][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.876492][T12867] RSP: 002b:00007f1014f2d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.884887][T12867] RAX: ffffffffffffffda RBX: 00007f1014345fa0 RCX: 00007f1014180849 [ 640.892837][T12867] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000003 [ 640.900791][T12867] RBP: 00007f1014f2d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 640.908746][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.916695][T12867] R13: 0000000000000000 R14: 00007f1014345fa0 R15: 00007fffc84cfa88 [ 640.924656][T12867] [ 640.988024][T12869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.139273][T12869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.177095][T12869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.549729][ T5866] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 641.649856][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 641.744737][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.756356][ T5866] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 641.767759][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.802856][ T5866] usb 4-1: config 0 descriptor?? [ 641.827285][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.840041][ T25] usb 2-1: config 0 has no interfaces? [ 641.879292][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 641.894995][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.929970][ T25] usb 2-1: config 0 descriptor?? [ 641.968435][ T5864] usb 6-1: unable to get BOS descriptor or descriptor too short [ 641.981314][ T5864] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 642.005958][ T5864] usb 6-1: can't read configurations, error -71 [ 642.288333][T12888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12888 comm=syz.2.1934 [ 642.976940][ T29] audit: type=1400 audit(1733127181.003:675): avc: denied { recv } for pid=12868 comm="syz.4.1928" saddr=10.128.0.169 src=49406 daddr=10.128.0.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 643.649739][T12905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1937'. [ 643.659155][T12905] tipc: Invalid UDP bearer configuration [ 643.659190][T12905] tipc: Enabling of bearer rejected, failed to enable media [ 644.052657][ T29] audit: type=1400 audit(1733127182.003:676): avc: denied { execmem } for pid=12917 comm="syz.4.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 644.179696][ T969] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 644.248608][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 644.260774][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 644.277856][ T5866] usb 4-1: USB disconnect, device number 7 [ 644.329610][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 644.335784][ T969] usb 3-1: config 4 has an invalid interface number: 57 but max is 3 [ 644.344120][ T969] usb 3-1: config 4 has an invalid interface number: 65 but max is 3 [ 644.352348][ T969] usb 3-1: config 4 has an invalid interface number: 212 but max is 3 [ 644.360560][ T969] usb 3-1: config 4 has an invalid interface number: 21 but max is 3 [ 644.369102][ T969] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 644.393691][ T969] usb 3-1: config 4 has an invalid interface number: 111 but max is 3 [ 644.408566][ T969] usb 3-1: config 4 has an invalid interface number: 111 but max is 3 [ 644.420107][ T969] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 644.432117][ T969] usb 3-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 644.443260][ T969] usb 3-1: config 4 has no interface number 0 [ 644.449382][ T969] usb 3-1: config 4 has no interface number 1 [ 644.449657][ T5864] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 644.458441][ T969] usb 3-1: config 4 has no interface number 2 [ 644.474113][ T969] usb 3-1: config 4 has no interface number 3 [ 644.480580][ T969] usb 3-1: config 4 has no interface number 4 [ 644.486779][ T969] usb 3-1: config 4 interface 57 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 644.502844][ T969] usb 3-1: config 4 interface 57 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 644.509321][ T5866] usb 2-1: USB disconnect, device number 4 [ 644.514568][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.533611][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.543641][ T969] usb 3-1: config 4 interface 57 altsetting 0 endpoint 0x3 has invalid maxpacket 1064, setting to 64 [ 644.558525][ T969] usb 3-1: config 4 interface 57 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 644.561698][T12934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12934 comm=syz.1.1946 [ 644.577179][ T969] usb 3-1: too many endpoints for config 4 interface 65 altsetting 254: 200, using maximum allowed: 30 [ 644.600758][ T969] usb 3-1: config 4 interface 65 altsetting 254 has an endpoint descriptor with address 0x43, changing to 0x3 [ 644.616765][ T969] usb 3-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x3, skipping [ 644.627795][ T969] usb 3-1: config 4 interface 65 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 644.646102][ T969] usb 3-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0xA, skipping [ 644.665258][ T969] usb 3-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x2, skipping [ 644.676514][ T969] usb 3-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x6, skipping [ 644.692086][ T969] usb 3-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x8, skipping [ 644.704981][ T969] usb 3-1: config 4 interface 65 altsetting 254 has 9 endpoint descriptors, different from the interface descriptor's value: 200 [ 644.723822][ T969] usb 3-1: config 4 interface 212 altsetting 149 has an endpoint descriptor with address 0x18, changing to 0x8 [ 644.736879][ T969] usb 3-1: config 4 interface 212 altsetting 149 has a duplicate endpoint with address 0x8, skipping [ 644.755781][ T969] usb 3-1: config 4 interface 212 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 644.767072][ T969] usb 3-1: config 4 interface 212 altsetting 149 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 644.781959][ T969] usb 3-1: config 4 interface 212 altsetting 149 has a duplicate endpoint with address 0x2, skipping [ 644.793823][ T969] usb 3-1: config 4 interface 212 altsetting 149 has a duplicate endpoint with address 0x3, skipping [ 644.807428][ T969] usb 3-1: config 4 interface 212 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 644.924906][ T969] usb 3-1: config 4 interface 212 altsetting 149 has a duplicate endpoint with address 0xF, skipping [ 644.941157][ T969] usb 3-1: config 4 interface 212 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 644.953401][ T969] usb 3-1: config 4 interface 212 altsetting 149 has a duplicate endpoint with address 0x8, skipping [ 644.980537][ T969] usb 3-1: config 4 interface 212 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 644.991873][ T969] usb 3-1: config 4 interface 212 altsetting 149 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 645.198959][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 645.209864][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 645.347764][ T969] usb 3-1: config 4 interface 21 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 645.379412][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 645.390291][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 645.409261][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 645.419948][ T969] usb 3-1: config 4 interface 21 altsetting 9 has an endpoint descriptor with address 0x11, changing to 0x1 [ 645.431483][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 645.442142][ T969] usb 3-1: config 4 interface 21 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 645.451939][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 645.462582][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 645.473194][ T969] usb 3-1: config 4 interface 21 altsetting 9 has an endpoint descriptor with address 0x14, changing to 0x4 [ 645.485492][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 645.510189][T12941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12941 comm=syz.4.1948 [ 645.556494][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 645.567203][ T969] usb 3-1: config 4 interface 21 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 645.577921][ T969] usb 3-1: config 4 interface 21 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 645.591166][ T969] usb 3-1: too many endpoints for config 4 interface 111 altsetting 136: 125, using maximum allowed: 30 [ 645.602366][ T969] usb 3-1: config 4 interface 111 altsetting 136 has a duplicate endpoint with address 0xE, skipping [ 645.613452][ T969] usb 3-1: config 4 interface 111 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 125 [ 645.626855][ T969] usb 3-1: config 4 interface 65 has no altsetting 0 [ 645.633632][ T969] usb 3-1: config 4 interface 212 has no altsetting 0 [ 645.640481][ T969] usb 3-1: config 4 interface 21 has no altsetting 0 [ 645.647207][ T969] usb 3-1: config 4 interface 111 has no altsetting 0 [ 645.654162][ T969] usb 3-1: config 4 interface 111 has no altsetting 1 [ 645.723283][ T969] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1c.d5 [ 645.738251][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.751803][ T969] usb 3-1: Product: syz [ 645.758111][ T969] usb 3-1: Manufacturer: syz [ 645.776457][ T969] usb 3-1: SerialNumber: syz [ 646.060674][ T969] usb 3-1: Interface #212 referenced by multiple IADs [ 646.071162][ T969] usb 3-1: Interface #111 referenced by multiple IADs [ 646.350105][ T969] ------------[ cut here ]------------ [ 646.355616][ T969] usb 3-1: BOGUS urb xfer, pipe 1 != type 3 [ 646.388820][ T969] WARNING: CPU: 0 PID: 969 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 646.398517][ T969] Modules linked in: [ 646.402934][ T969] CPU: 0 UID: 0 PID: 969 Comm: kworker/0:2 Not tainted 6.13.0-rc1-syzkaller #0 [ 646.412264][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 646.422390][ T969] Workqueue: usb_hub_wq hub_event [ 646.427421][ T969] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 646.433039][ T969] Code: 84 3c 02 00 00 e8 35 47 ae fa 4c 89 ef e8 ed fe d9 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 e3 2d 8c e8 c6 90 6e fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 47 ae fa 49 81 c4 c0 05 00 00 e9 [ 646.452770][ T969] RSP: 0018:ffffc90003c9ee60 EFLAGS: 00010286 [ 646.458854][ T969] RAX: 0000000000000000 RBX: ffff88806ddcfc00 RCX: ffffc9001a7bc000 [ 646.466886][ T969] RDX: 0000000000100000 RSI: ffffffff815a5166 RDI: 0000000000000001 [ 646.475036][ T969] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 646.483181][ T969] R10: 0000000000000001 R11: 00000000000000e0 R12: 0000000000000003 [ 646.491268][ T969] R13: ffff8880626940a8 R14: ffff88801ee8f580 R15: ffff88806ddcfc7c [ 646.499248][ T969] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 646.508245][ T969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.514878][ T969] CR2: 00007f101430d178 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 646.522918][ T969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.530903][ T969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 646.538874][ T969] Call Trace: [ 646.542201][ T969] [ 646.545157][ T969] ? __warn+0xea/0x3c0 [ 646.549228][ T969] ? usb_submit_urb+0xe4b/0x1730 [ 646.554221][ T969] ? report_bug+0x3c0/0x580 [ 646.558743][ T969] ? handle_bug+0x54/0xa0 [ 646.563139][ T969] ? exc_invalid_op+0x17/0x50 [ 646.567827][ T969] ? asm_exc_invalid_op+0x1a/0x20 [ 646.573005][ T969] ? __warn_printk+0x1a6/0x350 [ 646.577781][ T969] ? usb_submit_urb+0xe4b/0x1730 [ 646.582803][ T969] ? __init_swait_queue_head+0xca/0x150 [ 646.588367][ T969] usb_start_wait_urb+0x103/0x4c0 [ 646.593441][ T969] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 646.599017][ T969] ? __asan_memset+0x23/0x50 [ 646.603695][ T969] usb_bulk_msg+0x22c/0x550 [ 646.608221][ T969] amradio_send_cmd+0x2e2/0x940 [ 646.613102][ T969] ? __pfx_amradio_send_cmd+0x10/0x10 [ 646.618476][ T969] ? read_word_at_a_time+0xe/0x20 [ 646.623546][ T969] ? sized_strscpy+0xae/0x2e0 [ 646.628236][ T969] usb_amradio_probe+0x4a3/0x8a0 [ 646.633210][ T969] usb_probe_interface+0x300/0x9c0 [ 646.638327][ T969] ? __pfx_usb_probe_interface+0x10/0x10 [ 646.644018][ T969] really_probe+0x23e/0xa90 [ 646.648536][ T969] __driver_probe_device+0x1de/0x440 [ 646.653875][ T969] driver_probe_device+0x4c/0x1b0 [ 646.658915][ T969] __device_attach_driver+0x1df/0x310 [ 646.664342][ T969] ? __pfx___device_attach_driver+0x10/0x10 [ 646.670304][ T969] bus_for_each_drv+0x157/0x1e0 [ 646.675180][ T969] ? __pfx_bus_for_each_drv+0x10/0x10 [ 646.680745][ T969] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.685979][ T969] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 646.691875][ T969] __device_attach+0x1e8/0x4b0 [ 646.696655][ T969] ? __pfx___device_attach+0x10/0x10 [ 646.702015][ T969] ? do_raw_spin_unlock+0x172/0x230 [ 646.707235][ T969] bus_probe_device+0x17f/0x1c0 [ 646.712137][ T969] device_add+0x114b/0x1a70 [ 646.716663][ T969] ? __pfx_device_add+0x10/0x10 [ 646.721585][ T969] ? wakeup_sysfs_add+0x51/0x60 [ 646.726456][ T969] usb_set_configuration+0x10cb/0x1c50 [ 646.732106][ T969] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 646.738194][ T969] usb_generic_driver_probe+0xb1/0x110 [ 646.743721][ T969] usb_probe_device+0xec/0x3e0 [ 646.748501][ T969] ? __pfx_usb_probe_device+0x10/0x10 [ 646.753953][ T969] really_probe+0x23e/0xa90 [ 646.758467][ T969] __driver_probe_device+0x1de/0x440 [ 646.763776][ T969] ? usb_driver_applicable+0x1c7/0x220 [ 646.769244][ T969] driver_probe_device+0x4c/0x1b0 [ 646.774302][ T969] __device_attach_driver+0x1df/0x310 [ 646.779727][ T969] ? __pfx___device_attach_driver+0x10/0x10 [ 646.785618][ T969] bus_for_each_drv+0x157/0x1e0 [ 646.790540][ T969] ? __pfx_bus_for_each_drv+0x10/0x10 [ 646.795947][ T969] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.801230][ T969] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 646.807059][ T969] __device_attach+0x1e8/0x4b0 [ 646.812060][ T969] ? __pfx___device_attach+0x10/0x10 [ 646.817362][ T969] ? do_raw_spin_unlock+0x172/0x230 [ 646.822640][ T969] bus_probe_device+0x17f/0x1c0 [ 646.827514][ T969] device_add+0x114b/0x1a70 [ 646.832782][ T969] ? __pfx_device_add+0x10/0x10 [ 646.837650][ T969] ? add_device_randomness+0xb8/0xf0 [ 646.843027][ T969] usb_new_device+0xd90/0x1a10 [ 646.847796][ T969] ? __pfx_usb_new_device+0x10/0x10 [ 646.853063][ T969] hub_event+0x2d9a/0x4e10 [ 646.857495][ T969] ? __pfx_hub_event+0x10/0x10 [ 646.862310][ T969] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 646.867964][ T969] ? rcu_is_watching+0x12/0xc0 [ 646.872832][ T969] ? trace_lock_acquire+0x14e/0x1f0 [ 646.878051][ T969] ? process_one_work+0x921/0x1ba0 [ 646.883241][ T969] ? lock_acquire+0x2f/0xb0 [ 646.887757][ T969] ? process_one_work+0x921/0x1ba0 [ 646.892954][ T969] process_one_work+0x9c5/0x1ba0 [ 646.897919][ T969] ? __pfx_hcd_resume_work+0x10/0x10 [ 646.903284][ T969] ? __pfx_process_one_work+0x10/0x10 [ 646.908667][ T969] ? rcu_is_watching+0x12/0xc0 [ 646.913554][ T969] ? assign_work+0x1a0/0x250 [ 646.918158][ T969] worker_thread+0x6c8/0xf00 [ 646.922794][ T969] ? __kthread_parkme+0x148/0x220 [ 646.927831][ T969] ? __pfx_worker_thread+0x10/0x10 [ 646.933003][ T969] kthread+0x2c1/0x3a0 [ 646.937074][ T969] ? _raw_spin_unlock_irq+0x23/0x50 [ 646.942333][ T969] ? __pfx_kthread+0x10/0x10 [ 646.946936][ T969] ret_from_fork+0x45/0x80 [ 646.951411][ T969] ? __pfx_kthread+0x10/0x10 [ 646.956020][ T969] ret_from_fork_asm+0x1a/0x30 [ 646.960863][ T969] [ 646.963884][ T969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 646.971159][ T969] CPU: 0 UID: 0 PID: 969 Comm: kworker/0:2 Not tainted 6.13.0-rc1-syzkaller #0 [ 646.980086][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 646.990142][ T969] Workqueue: usb_hub_wq hub_event [ 646.995167][ T969] Call Trace: [ 646.999215][ T969] [ 647.002138][ T969] dump_stack_lvl+0x3d/0x1f0 [ 647.006727][ T969] panic+0x71d/0x800 [ 647.010629][ T969] ? __pfx_panic+0x10/0x10 [ 647.015049][ T969] ? show_trace_log_lvl+0x29d/0x3d0 [ 647.020252][ T969] ? usb_submit_urb+0xe4b/0x1730 [ 647.025201][ T969] check_panic_on_warn+0xab/0xb0 [ 647.030140][ T969] __warn+0xf6/0x3c0 [ 647.034026][ T969] ? usb_submit_urb+0xe4b/0x1730 [ 647.038962][ T969] report_bug+0x3c0/0x580 [ 647.043276][ T969] handle_bug+0x54/0xa0 [ 647.047422][ T969] exc_invalid_op+0x17/0x50 [ 647.051923][ T969] asm_exc_invalid_op+0x1a/0x20 [ 647.056760][ T969] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 647.062307][ T969] Code: 84 3c 02 00 00 e8 35 47 ae fa 4c 89 ef e8 ed fe d9 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 e3 2d 8c e8 c6 90 6e fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 47 ae fa 49 81 c4 c0 05 00 00 e9 [ 647.081899][ T969] RSP: 0018:ffffc90003c9ee60 EFLAGS: 00010286 [ 647.087954][ T969] RAX: 0000000000000000 RBX: ffff88806ddcfc00 RCX: ffffc9001a7bc000 [ 647.095907][ T969] RDX: 0000000000100000 RSI: ffffffff815a5166 RDI: 0000000000000001 [ 647.103860][ T969] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 647.111814][ T969] R10: 0000000000000001 R11: 00000000000000e0 R12: 0000000000000003 [ 647.119770][ T969] R13: ffff8880626940a8 R14: ffff88801ee8f580 R15: ffff88806ddcfc7c [ 647.127731][ T969] ? __warn_printk+0x1a6/0x350 [ 647.132493][ T969] ? __init_swait_queue_head+0xca/0x150 [ 647.138043][ T969] usb_start_wait_urb+0x103/0x4c0 [ 647.143059][ T969] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 647.148598][ T969] ? __asan_memset+0x23/0x50 [ 647.153174][ T969] usb_bulk_msg+0x22c/0x550 [ 647.157672][ T969] amradio_send_cmd+0x2e2/0x940 [ 647.162515][ T969] ? __pfx_amradio_send_cmd+0x10/0x10 [ 647.167872][ T969] ? read_word_at_a_time+0xe/0x20 [ 647.172885][ T969] ? sized_strscpy+0xae/0x2e0 [ 647.177570][ T969] usb_amradio_probe+0x4a3/0x8a0 [ 647.182501][ T969] usb_probe_interface+0x300/0x9c0 [ 647.187602][ T969] ? __pfx_usb_probe_interface+0x10/0x10 [ 647.193231][ T969] really_probe+0x23e/0xa90 [ 647.197732][ T969] __driver_probe_device+0x1de/0x440 [ 647.203017][ T969] driver_probe_device+0x4c/0x1b0 [ 647.208047][ T969] __device_attach_driver+0x1df/0x310 [ 647.213410][ T969] ? __pfx___device_attach_driver+0x10/0x10 [ 647.219298][ T969] bus_for_each_drv+0x157/0x1e0 [ 647.224139][ T969] ? __pfx_bus_for_each_drv+0x10/0x10 [ 647.229515][ T969] ? lockdep_hardirqs_on+0x7c/0x110 [ 647.234724][ T969] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 647.240528][ T969] __device_attach+0x1e8/0x4b0 [ 647.245297][ T969] ? __pfx___device_attach+0x10/0x10 [ 647.250576][ T969] ? do_raw_spin_unlock+0x172/0x230 [ 647.255769][ T969] bus_probe_device+0x17f/0x1c0 [ 647.260612][ T969] device_add+0x114b/0x1a70 [ 647.265109][ T969] ? __pfx_device_add+0x10/0x10 [ 647.269954][ T969] ? wakeup_sysfs_add+0x51/0x60 [ 647.274805][ T969] usb_set_configuration+0x10cb/0x1c50 [ 647.280261][ T969] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 647.286320][ T969] usb_generic_driver_probe+0xb1/0x110 [ 647.291772][ T969] usb_probe_device+0xec/0x3e0 [ 647.296522][ T969] ? __pfx_usb_probe_device+0x10/0x10 [ 647.301879][ T969] really_probe+0x23e/0xa90 [ 647.306381][ T969] __driver_probe_device+0x1de/0x440 [ 647.311654][ T969] ? usb_driver_applicable+0x1c7/0x220 [ 647.317120][ T969] driver_probe_device+0x4c/0x1b0 [ 647.322135][ T969] __device_attach_driver+0x1df/0x310 [ 647.327494][ T969] ? __pfx___device_attach_driver+0x10/0x10 [ 647.333385][ T969] bus_for_each_drv+0x157/0x1e0 [ 647.338231][ T969] ? __pfx_bus_for_each_drv+0x10/0x10 [ 647.343592][ T969] ? lockdep_hardirqs_on+0x7c/0x110 [ 647.348777][ T969] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 647.354572][ T969] __device_attach+0x1e8/0x4b0 [ 647.359326][ T969] ? __pfx___device_attach+0x10/0x10 [ 647.364599][ T969] ? do_raw_spin_unlock+0x172/0x230 [ 647.369795][ T969] bus_probe_device+0x17f/0x1c0 [ 647.374635][ T969] device_add+0x114b/0x1a70 [ 647.379131][ T969] ? __pfx_device_add+0x10/0x10 [ 647.383972][ T969] ? add_device_randomness+0xb8/0xf0 [ 647.389253][ T969] usb_new_device+0xd90/0x1a10 [ 647.394021][ T969] ? __pfx_usb_new_device+0x10/0x10 [ 647.399208][ T969] hub_event+0x2d9a/0x4e10 [ 647.403630][ T969] ? __pfx_hub_event+0x10/0x10 [ 647.408380][ T969] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 647.414002][ T969] ? rcu_is_watching+0x12/0xc0 [ 647.418760][ T969] ? trace_lock_acquire+0x14e/0x1f0 [ 647.423954][ T969] ? process_one_work+0x921/0x1ba0 [ 647.429051][ T969] ? lock_acquire+0x2f/0xb0 [ 647.433542][ T969] ? process_one_work+0x921/0x1ba0 [ 647.438644][ T969] process_one_work+0x9c5/0x1ba0 [ 647.443573][ T969] ? __pfx_hcd_resume_work+0x10/0x10 [ 647.448846][ T969] ? __pfx_process_one_work+0x10/0x10 [ 647.454203][ T969] ? rcu_is_watching+0x12/0xc0 [ 647.458963][ T969] ? assign_work+0x1a0/0x250 [ 647.463539][ T969] worker_thread+0x6c8/0xf00 [ 647.468123][ T969] ? __kthread_parkme+0x148/0x220 [ 647.473140][ T969] ? __pfx_worker_thread+0x10/0x10 [ 647.478238][ T969] kthread+0x2c1/0x3a0 [ 647.482296][ T969] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.487485][ T969] ? __pfx_kthread+0x10/0x10 [ 647.492065][ T969] ret_from_fork+0x45/0x80 [ 647.496468][ T969] ? __pfx_kthread+0x10/0x10 [ 647.501047][ T969] ret_from_fork_asm+0x1a/0x30 [ 647.505811][ T969] [ 647.509009][ T969] Kernel Offset: disabled [ 647.513371][ T969] Rebooting in 86400 seconds..