last executing test programs: 46.509363686s ago: executing program 0 (id=2049): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="184000c100000000000000000000000095a9c0bb30ad3c61fbedf85a8e862c0e7cd06a6184d699001feec32ab5e8272241213a26f4a010328ee6344a41383aa4571d57255ceb3c80672f45"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5c9f}, 0xffffffffffffffcc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) 45.317229406s ago: executing program 0 (id=2051): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x14, 0x2, 0x3, 0x801}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) lseek(r7, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 44.815177885s ago: executing program 1 (id=2053): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x2, 0x0, 0x0, 0xa6}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x12, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104bf65000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b0001006572000024000280080001400000000c08000340000000dc08000440000000240500020007000000300001800c0001006269747769736500200002800800034000000004080001400000001404000780080002400000000d0900010073797a3000000000140000001100010000000000000000000700000a00000000d196fce910532322f84c241982b69f7a9b5276289215b8660d536258a5e39dd6d3d4d7f9d370e24340053d827d7f9a3d31082712534175e72a27a3febc7b0b233906531ff8aa18b3c0c51c620a196b720041f6443dd510f355c25947bc65d9bd1ad5c963d9f43b79ca68a2e03850950fd70070004049c6ac5c7b180acd600c5bec64"], 0x104}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1c, 0x17, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0x0, 0x6, 0xa, 0x40, 0x10}, @jmp={0x5, 0x0, 0xd, 0x5, 0xa, 0x18, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0xf5, &(0x7f0000000bc0)=""/245, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, r6, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x5, 0x9, 0x2d8}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f0000000d40)=[r2, r2, r10, r2, r2, r2, r3, r2], &(0x7f0000000d80)=[{0x3, 0x3, 0xe, 0x6}, {0x4, 0x4, 0xc, 0x1}], 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x700, 0x700, 0xfffffffd, 0x1, {{0x23, 0x4, 0x1, 0x30, 0x8c, 0x65, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @empty, {[@rr={0x7, 0x13, 0x2f, [@private=0xa010101, @private=0xa010100, @empty, @multicast2]}, @end, @noop, @timestamp={0x44, 0xc, 0x18, 0x0, 0x5, [0x8c6, 0x80000000]}, @rr={0x7, 0x1f, 0x9b, [@rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, @local, @empty, @multicast2, @local]}, @lsrr={0x83, 0x7, 0x44, [@rand_addr=0x64010101]}, @generic={0x15, 0x6, "7d3cd5c6"}, @ssrr={0x89, 0x1f, 0xab, [@remote, @private=0xa010101, @multicast1, @empty, @remote, @multicast2, @rand_addr=0x64010100]}, @end, @ssrr={0x89, 0xb, 0xe2, [@remote, @multicast2]}]}}}}}) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, r13, 0x6}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44.36971577s ago: executing program 1 (id=2055): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c00078008001240", @ANYBLOB="133be829ea9d52c340d06985fe2e01191b6411beb63e07e30fd2d1550cb8487f2b3e578ed378115bc7c0f1a9e5263cbdf4e998ac2558dca09d608edc1ca933028d935dafbff5aabce5595a7d4bccfc9a1bbfadeaeda810090ff6ef81cf267ca3f45ae2e0ed20ab1e79ddfce42c92619fe254a3e07843c060fb09b81e16f0ade2fb97b6c7b06375ec5f9e95126753f7fcf8fc1dbf791d0d2fc3e8355c6e"], 0x58}}, 0x0) 43.965364691s ago: executing program 1 (id=2056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f0000000500)={0x0, 0xd833, 0x8000, 0x7, 0xd1}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000100)=0x8f19, 0x0, 0x4) unshare(0x68040200) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x69}, &(0x7f0000000180)=0x4, 0x0, 0x9, 0x986, 0x1, 0x5, 0x8, 0xa}}], 0x58, 0x4004000}, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) sendmmsg$inet6(r5, &(0x7f0000000bc0), 0x0, 0x20004004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 41.86562304s ago: executing program 1 (id=2060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f0000000500)={0x0, 0xd833, 0x8000, 0x7, 0xd1}, &(0x7f0000000240), 0x0) unshare(0x68040200) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x69}, &(0x7f0000000180)=0x4, 0x0, 0x9, 0x986, 0x1, 0x5, 0x8, 0xa}}], 0x58, 0x4004000}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000bc0), 0x0, 0x20004004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 41.782497556s ago: executing program 0 (id=2061): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffe, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8003, 0x4c74, 0x8f00, 0x642, 0x1, 0xa, 0x0, 0x71, 0xa, 0x7, 0x103, 0x0, 0x5, 0x3d, 0xa, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0xf, 0x80, 0x0, 0x5, 0x5, 0x8, 0x7d4c, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c7, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x3, 0x1000004, 0x9, 0x4, 0x604, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x22, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x650, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x7fffffff, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x10000005, 0x3e7, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x5, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x81, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x103, 0x3, 0xffff, 0xffffffff, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x3, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x5, 0xb1c, 0x1, 0x200, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x81}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x12b) renameat2(r2, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b52, &(0x7f0000000000)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x541b, &(0x7f0000001780)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mremap(&(0x7f00001c8000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) timer_getoverrun(0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 41.251930373s ago: executing program 2 (id=2063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0xfffb7ffc, 0x0, {0x2b}}, 0x14}}, 0x0) 41.004849749s ago: executing program 2 (id=2065): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000300)=0xb6, 0x4) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000b64000/0x4000)=nil, 0x4000}}) 40.413658771s ago: executing program 4 (id=2066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x4004000}, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) 39.774247675s ago: executing program 1 (id=2067): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x7c80fe59fa833483, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) 39.438007917s ago: executing program 2 (id=2068): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 39.351579326s ago: executing program 4 (id=2069): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x20081, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000018, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000ae17", @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000280)={0x4, 0x2, {0x9, @struct={0x5, 0x6}, 0x0, 0x3, 0xf73, 0x2, 0x9, 0x8, 0x30, @usage=0xe, 0x3, 0xad, [0x8, 0x80000000000fff, 0x1, 0x8, 0x7ff, 0x10000]}, {0xc172, @usage=0x7e37, r1, 0xfa0f, 0xfffffffeffffffff, 0x1, 0x4, 0xfff, 0x21, @struct={0x7fff, 0x6}, 0x6, 0x7, [0xeb1, 0x76460ee7, 0x9, 0x3ff, 0x4, 0x3]}, {0x9, @usage=0xe, 0x0, 0x1, 0x5, 0x7, 0x0, 0x52, 0x14, @usage=0x3, 0x7ffffffa, 0x401, [0x81, 0xf, 0xc3c4, 0x100000000, 0x1, 0x10001]}, {0x6, 0x6, 0x1}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={r6, 0x79, 0x800000000000000}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xe, r7, 0x0, &(0x7f0000000140)=""/216) (fail_nth: 2) 38.10529032s ago: executing program 3 (id=2070): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) removexattr(0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'erspan0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r3, 0x1, 0x45, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 38.098341839s ago: executing program 2 (id=2071): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@getsa={0x28, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {@in=@private=0xa010102, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x12, 0xea, {0xea, 0x11, "02b5684321b9ca56cf3cbae05004292a9365db9731291375fe621c041e25348f602b092fa6f822f9515882e504620b09de9f1cf8663123f3d54e710f86ef34f58824159afeced7fc17d28666a9c963fec2e2e4776bdfb4777d3b99c27df8092362acad29bda0ac326e0b84cfc600a9063fa82a470648ea47d809d590abeeb4a7982047c9d9e50dab0bd3f94ad6e2ffcbe1a05707a7cf33d996025b41ff87c3c917104387c4050e28d78e490798775fe2f0acd497d72b4006d549b2858885029f2bb66b2ba1b805db702198bbb22e42ad6d67f64698707b0fe2547defa62395fd22356632b9071a5a"}}, 0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "bc563641"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xe4, 0x1, {0x22, 0x349}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x20, 0xa, 0xca, "551ba40b5e66497ebcf6b1dbeccc21b1c92979921e05ce48155a2b48d6d707848b59fa9f16e23827c5e6e25dc7a4c37d0ed0f8547196cda172a8f4652a67a385679d986d05060aa21c9779d6f342d0ecb18b5d1ba92e94ce00dcd9e48da045d89c7f6a45ac761585356cd841387327cc404810f360c3dc3c3935e0537cff4b953bb6453737c1e2a1d0b89b7044b6de47462da414224656cd4cb1dd208a46220f6abceb732f488f615d0b502084461400e1248bd3f8ad1d06f42ef4c8e48d9769fe7e5e9f307ce82fd596"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0xf, "414441b2e53d880fb9880089aba2ac"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000008341a02080000000000010902"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000380)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x11}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x83}, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="2dc3", 0x2, 0xfffffffffffffff8) 37.982813427s ago: executing program 4 (id=2072): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{}, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x128, 0x30, 0x1, 0x0, 0x0, {}, [{0x114, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xcc, 0xa, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x193e, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0x7, 0x7, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a76, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x0, 0x101, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x12b, 0x2, 0x6, 0x10001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x31e, 0x2}}]}, {0x32, 0x6, "a710c5504b6434be78a8c489993e1cf2a83398d25f31d5aab7bc7423163933c633f0d278a5b1903d14965680f8c5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0) read(r4, 0x0, 0x0) r5 = io_uring_setup(0x3ece, &(0x7f0000000340)={0x0, 0x49d2, 0x2, 0x1, 0x402f}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c000180060006008e0a0000a3ffee0c3c69ba5a491b8a1c0e0908d40d2d4aebe8a327d1ab68441cd2edcd4f1ea29cace760c4d994d3bf07e51ce73dc9c91b946c3e5a3900bacef9d674a56c66b70f3dfe16d0b40f177c8fab96a8bc25eafbb9c2f0095b512232b3d66133d18e85d476fed293acf67a5993c6c4464f3b5373"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f00000002c0)=@secondary) 37.951404607s ago: executing program 0 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000400)=""/50, 0x32}], 0x2, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)=':\x00', 0x2) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0x9, "b7889fcd"}, @main=@item_012={0x1, 0x0, 0x8, "85"}]}}, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '0'}]}}}}}}}}, 0x0) r9 = memfd_create(&(0x7f00000000c0)='wlan0\x00', 0x3) r10 = memfd_create(&(0x7f0000000100)='/\x00', 0x2) r11 = memfd_create(&(0x7f0000000140)='nl80211\x00', 0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r12) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x3, r0}) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000001c0)={0x0, 0x7, [{r4, 0x0, 0x1000000, 0x10000}, {r5, 0x0, 0x1000}, {r9, 0x0, 0x1000, 0x8000}, {r10, 0x0, 0xfffffffff0000000, 0x1000000}, {r11, 0x0, 0x100000000, 0xfffffffffffff000}, {r12, 0x0, 0x2000, 0x1000000}, {r13, 0x0, 0x0, 0x1000000}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0ef0000ffffffffffff080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 36.726770221s ago: executing program 4 (id=2074): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000000ea8, 0x2) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, r2, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000012000101210000200080000007000000", @ANYRES32=0x0, @ANYBLOB="434101000100000008001d0003010000"], 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0x0, 0x314000}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc00"/37], 0x0) 36.572501511s ago: executing program 3 (id=2075): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0xfffb7ffc, 0x0, {0x2b}}, 0x14}}, 0x0) 36.571887149s ago: executing program 3 (id=2076): r0 = socket(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) socket$inet(0x2, 0x2000000080005, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203", 0x91}], 0x1}}], 0x1, 0x240080e4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe"], 0x30}}, 0x0) socket$inet6(0xa, 0x3, 0x7) capset(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003070000000703"]}, 0x0) 35.293746366s ago: executing program 3 (id=2077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f0000000500)={0x0, 0xd833, 0x8000, 0x7, 0xd1}, &(0x7f0000000240), 0x0) unshare(0x68040200) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x69}, &(0x7f0000000180)=0x4, 0x0, 0x9, 0x986, 0x1, 0x5, 0x8, 0xa}}], 0x58, 0x4004000}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000bc0), 0x0, 0x20004004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 35.286482071s ago: executing program 2 (id=2078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) 35.141393728s ago: executing program 0 (id=2079): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) syz_clone(0x200, &(0x7f00000003c0)="1816b31593d34b0f3edb65bc82bfbb723e3133601b9d7ec7fd1a50b9f68e2d91742de02f3a56cb16a488358c2764a0068a6950825a4a6800b5cc9c654f2c08781171826f05d62aeb075f9dc94509ca577e1e52928eb3651f91cc31c9356cdecaf7f3e986d006289694ec4de4abe2316754983dd7c59c25f8b53350e32f4308e5d64a83c47388c05e7b1583d39f2a4074d06c53f84c4f9f5cc1290c4992143590579911a5238067f4e5a453", 0xab, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000240)="c7b83dcd9a2f237543630ac52bff30a2ab6adb5841817dc943df3e6c22bab9d210368b04") r8 = socket$inet6_dccp(0xa, 0x6, 0x0) r9 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r8, r10, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 35.12996101s ago: executing program 1 (id=2080): epoll_create1(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 34.176281198s ago: executing program 2 (id=2081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r4 = fcntl$dupfd(r2, 0x406, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3519, 0xf765, 0x76, 0x0, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 33.126286443s ago: executing program 3 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x2f) 33.03795571s ago: executing program 4 (id=2083): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x1, @remote, 0x3}]}, &(0x7f0000000500)=0x10) 32.901769939s ago: executing program 0 (id=2084): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r0) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c) ioctl$RTC_WKALM_RD(r1, 0x40187013, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r6, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) 25.929628477s ago: executing program 3 (id=2085): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000000ea8, 0x2) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, r4, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000012000101210000200080000007000000", @ANYRES32=0x0, @ANYBLOB="434101000100000008001d0003010000"], 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x314000}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc00"/37], 0x0) 25.801623759s ago: executing program 4 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) 0s ago: executing program 32 (id=2084): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r0) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c) ioctl$RTC_WKALM_RD(r1, 0x40187013, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r6, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) kernel console output (not intermixed with test programs): ptor of length 0, skipping remainder of the config [ 671.667090][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.678119][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 671.691316][ T5863] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 671.700385][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.711217][ T5863] usb 2-1: config 0 descriptor?? [ 671.745852][T12670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 671.879606][ T974] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 671.959536][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 672.033549][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 672.042204][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.054205][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 672.064138][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 672.077523][ T974] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 672.087065][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.104487][ T974] usb 3-1: config 0 descriptor?? [ 672.260537][T12685] __nla_validate_parse: 101 callbacks suppressed [ 672.260553][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.278385][ T9926] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 672.286895][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.295909][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.305003][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.358672][T12670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 672.471350][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.484488][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.514040][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.522994][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.534417][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.543618][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 672.552569][ T9926] usb 4-1: Using ep0 maxpacket: 32 [ 672.619806][ T9926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.653439][ T47] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 672.684748][ T9926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.764415][ T9926] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 672.779317][ T47] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 672.792019][ T9926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.863723][ T9926] usb 4-1: config 0 descriptor?? [ 673.299155][ T9926] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 673.389306][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 673.408344][ T5863] usb 5-1: USB disconnect, device number 44 [ 673.426690][ T5863] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 673.497613][ T9926] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 673.518144][ T9926] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -5 [ 673.872420][T12721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.452199][T12736] syz.4.1727: attempt to access beyond end of device [ 674.452199][T12736] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 674.465134][T12736] vxfs: unable to read disk superblock at 1 [ 674.471553][T12736] syz.4.1727: attempt to access beyond end of device [ 674.471553][T12736] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 674.485202][T12736] vxfs: unable to read disk superblock at 8 [ 674.491686][T12736] vxfs: can't find superblock. [ 674.814762][ T10] usb 3-1: USB disconnect, device number 42 [ 674.878322][ T47] usb 2-1: USB disconnect, device number 50 [ 675.044310][ T10] usb 4-1: USB disconnect, device number 44 [ 677.599562][ T974] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 677.779599][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 677.807335][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.838748][ T974] usb 4-1: config 0 has no interface number 0 [ 678.117077][ T974] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 678.128192][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.137116][ T974] usb 4-1: Product: syz [ 678.143509][ T974] usb 4-1: Manufacturer: syz [ 678.148209][ T974] usb 4-1: SerialNumber: syz [ 678.156073][ T974] usb 4-1: config 0 descriptor?? [ 678.176564][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 678.890972][T12787] syz.3.1735 (12787): drop_caches: 2 [ 678.929741][ T974] gspca_spca1528: reg_w err -110 [ 678.959306][ T974] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 679.149460][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 679.212957][ T974] usb 4-1: USB disconnect, device number 45 [ 679.304817][T12794] openvswitch: netlink: EtherType 0 is less than min 600 [ 679.633920][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.059277][ T5864] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 680.251408][ T5864] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 680.556192][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.825394][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 680.853394][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.879322][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 681.007243][ T5864] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 681.087572][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 681.148361][ T5864] usb 3-1: Product: syz [ 681.165956][ T5864] usb 3-1: Manufacturer: syz [ 681.196537][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 681.211177][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 681.217413][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.247822][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 681.248007][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 681.411013][ T5864] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 681.414464][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 681.447216][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 681.933918][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.249685][ T54] Bluetooth: Error in BCSP hdr checksum [ 682.259023][ T5869] usb 4-1: config 0 descriptor?? [ 682.294499][ T5864] usb 3-1: USB disconnect, device number 43 [ 682.709365][ T5869] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 682.889419][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 682.905170][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.917701][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 682.953419][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 683.048750][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 683.177117][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.361987][ T5869] usb 1-1: config 0 descriptor?? [ 683.565277][T12831] __nla_validate_parse: 152 callbacks suppressed [ 683.565294][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 683.705440][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 683.887791][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 683.901925][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.330791][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 684.832505][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 684.879403][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.888663][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.909664][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.919487][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.932188][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 684.959485][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 685.311086][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.317486][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.661898][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.860219][ T5863] usb 4-1: USB disconnect, device number 46 [ 685.959378][ T5869] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 686.118834][ T974] usb 1-1: USB disconnect, device number 50 [ 686.247654][T12854] syz.3.1756 (12854): drop_caches: 2 [ 686.308838][ T5869] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 686.327274][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.339412][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.779584][ T5869] usb 3-1: Product: syz [ 686.783777][ T5869] usb 3-1: Manufacturer: syz [ 686.788365][ T5869] usb 3-1: SerialNumber: syz [ 687.098595][T12849] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 687.459271][ T9926] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 687.529327][ T5864] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 687.631806][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 687.638917][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 687.710898][ T5864] usb 2-1: device descriptor read/64, error -71 [ 687.727928][T12849] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 687.739649][ T9926] usb 1-1: Using ep0 maxpacket: 16 [ 687.755562][ T9926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.780830][ T9926] usb 1-1: config 0 has no interface number 0 [ 687.796853][ T9926] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 687.807824][ T9926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.817170][ T9926] usb 1-1: Product: syz [ 687.827508][T12867] atomic_op ffff88807c053998 conn xmit_atomic 0000000000000000 [ 687.873573][ T9926] usb 1-1: Manufacturer: syz [ 687.883194][ T9926] usb 1-1: SerialNumber: syz [ 687.926725][ T9926] usb 1-1: config 0 descriptor?? [ 688.113665][ T5864] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 688.150362][ T9926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 688.683110][ T5869] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 688.698157][ T5869] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 688.749248][ T5864] usb 2-1: device descriptor read/64, error -71 [ 688.860920][ T5864] usb usb2-port1: attempt power cycle [ 689.000720][ T5869] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 689.146084][T12881] syz.0.1759 (12881): drop_caches: 2 [ 689.199876][ T9926] gspca_spca1528: reg_w err -110 [ 689.232813][ T9926] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 689.326790][ T5864] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 689.370912][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 689.373063][ T5864] usb 2-1: device descriptor read/8, error -71 [ 689.383617][ T5869] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.403722][ T5869] usb 4-1: config 0 has no interface number 0 [ 689.455960][ T5869] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 689.465717][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.478167][ T5869] usb 4-1: Product: syz [ 689.483962][ T5869] usb 4-1: Manufacturer: syz [ 689.492475][ T5869] usb 4-1: SerialNumber: syz [ 689.512016][ T5869] usb 4-1: config 0 descriptor?? [ 689.514216][ T9926] usb 1-1: USB disconnect, device number 51 [ 689.523247][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 689.570915][ T54] Bluetooth: Error in BCSP hdr checksum [ 689.680436][ T5864] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 689.700619][ T5864] usb 2-1: device descriptor read/8, error -71 [ 689.819562][ T5864] usb usb2-port1: unable to enumerate USB device [ 689.833349][T10367] Bluetooth: Error in BCSP hdr checksum [ 690.128798][T10367] Bluetooth: Error in BCSP hdr checksum [ 690.150382][ T5864] usb 3-1: USB disconnect, device number 44 [ 690.166522][T12898] syz.3.1763 (12898): drop_caches: 2 [ 690.341380][ T5869] gspca_spca1528: reg_w err -110 [ 690.369061][ T5864] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 690.381455][ T1085] Bluetooth: Error in BCSP hdr checksum [ 690.389556][ T5869] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 690.516034][ T9926] usb 4-1: USB disconnect, device number 47 [ 690.925475][T12911] lo speed is unknown, defaulting to 1000 [ 690.978097][T12911] atomic_op ffff8880350b6198 conn xmit_atomic 0000000000000000 [ 691.309272][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 691.858943][ T974] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 692.171297][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 692.180011][ T974] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 692.201800][ T974] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.212985][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.321434][T12947] __nla_validate_parse: 98 callbacks suppressed [ 692.321452][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 693.189244][ T5863] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 693.339428][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 693.352990][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.363366][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.470305][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 693.487777][ T5863] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 693.497112][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.633058][ T5863] usb 1-1: config 0 descriptor?? [ 693.710290][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.929903][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.939555][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.948392][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.957282][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.966133][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.974987][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.983834][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 693.992676][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 694.001542][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 694.014369][ T9926] usb 1-1: USB disconnect, device number 52 [ 694.086834][T12972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.487149][ T974] usb 4-1: USB disconnect, device number 48 [ 694.868394][ T974] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 695.019346][ T974] usb 4-1: device descriptor read/64, error -71 [ 695.335303][T12988] lo speed is unknown, defaulting to 1000 [ 695.574639][T12989] atomic_op ffff88805b14f998 conn xmit_atomic 0000000000000000 [ 695.719704][ T974] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 695.859268][ T974] usb 4-1: device descriptor read/64, error -71 [ 696.028788][ T974] usb usb4-port1: attempt power cycle [ 696.464953][T13000] syz.2.1782: attempt to access beyond end of device [ 696.464953][T13000] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 696.478080][T13000] vxfs: unable to read disk superblock at 1 [ 696.485223][T13000] syz.2.1782: attempt to access beyond end of device [ 696.485223][T13000] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 696.498690][T13000] vxfs: unable to read disk superblock at 8 [ 696.505080][T13000] vxfs: can't find superblock. [ 696.525230][ T974] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 696.631883][ T974] usb 4-1: device descriptor read/8, error -71 [ 697.108631][ T974] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 697.185094][ T974] usb 4-1: device descriptor read/8, error -71 [ 697.300186][ T974] usb usb4-port1: unable to enumerate USB device [ 698.679238][ T5869] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 698.799225][ T974] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 698.830046][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 698.836491][ T5869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.844604][ T5863] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 698.855524][ T5869] usb 5-1: config 0 has no interface number 0 [ 698.877110][ T5869] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 698.886949][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.899088][ T5869] usb 5-1: Product: syz [ 698.904681][ T5869] usb 5-1: Manufacturer: syz [ 698.911788][ T5869] usb 5-1: SerialNumber: syz [ 698.949299][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 698.955671][ T5869] usb 5-1: config 0 descriptor?? [ 698.965030][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 698.973588][ T974] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 698.984323][ T974] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.998005][ T974] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.007649][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.015962][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 699.032698][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.349398][ T5863] usb 2-1: config 0 has no interface number 0 [ 699.498487][ T974] usbtmc 4-1:16.0: bulk endpoints not found [ 699.512179][ T5863] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 699.521355][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.529413][ T5863] usb 2-1: Product: syz [ 699.539516][ T5863] usb 2-1: Manufacturer: syz [ 699.544170][ T5863] usb 2-1: SerialNumber: syz [ 699.551335][ T5863] usb 2-1: config 0 descriptor?? [ 699.562612][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 699.802479][T13027] syz.4.1786 (13027): drop_caches: 2 [ 699.999487][ T5869] gspca_spca1528: reg_w err -110 [ 700.019686][ T5869] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 700.497370][ T5863] gspca_spca1528: reg_w err -110 [ 700.519377][ T5863] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 700.543580][ T974] usb 5-1: USB disconnect, device number 45 [ 700.621480][T13038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.739027][T13021] syz.1.1790 (13021): drop_caches: 2 [ 700.779326][ T974] usb 2-1: USB disconnect, device number 55 [ 701.475548][ T5863] usb 4-1: USB disconnect, device number 53 [ 701.679379][ T47] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 701.725563][T13048] atomic_op ffff88805aca3198 conn xmit_atomic 0000000000000000 [ 702.269570][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 702.291245][ T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.302933][ T47] usb 5-1: config 0 has no interface number 0 [ 702.315410][ T47] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 702.327327][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.417244][ T47] usb 5-1: Product: syz [ 702.421558][ T47] usb 5-1: Manufacturer: syz [ 702.426157][ T47] usb 5-1: SerialNumber: syz [ 702.460084][ T47] usb 5-1: config 0 descriptor?? [ 702.483388][ T47] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 702.719645][ T5863] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 702.879265][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 702.887150][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.896113][ T5863] usb 4-1: config 0 has no interface number 0 [ 702.906613][ T5863] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 702.917909][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.926471][ T5863] usb 4-1: Product: syz [ 702.931244][ T5863] usb 4-1: Manufacturer: syz [ 702.935916][ T5863] usb 4-1: SerialNumber: syz [ 702.994066][T13058] syz.4.1793 (13058): drop_caches: 2 [ 703.013702][ T9926] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 703.179941][ T47] gspca_spca1528: reg_w err -110 [ 703.270476][ T47] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 703.308936][ T5863] usb 4-1: config 0 descriptor?? [ 703.319291][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 703.343164][ T9926] usb 2-1: device descriptor read/64, error -71 [ 703.351860][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 703.459705][ T974] usb 5-1: USB disconnect, device number 46 [ 703.670102][ T9926] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 703.729243][ T47] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 703.807926][T13066] syz.0.1801: attempt to access beyond end of device [ 703.807926][T13066] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 703.821239][T13066] vxfs: unable to read disk superblock at 1 [ 703.827744][T13066] syz.0.1801: attempt to access beyond end of device [ 703.827744][T13066] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 703.841073][T13066] vxfs: unable to read disk superblock at 8 [ 703.847019][T13066] vxfs: can't find superblock. [ 704.059731][ T5863] gspca_spca1528: reg_w err -110 [ 704.089237][ T9926] usb 2-1: device descriptor read/64, error -71 [ 704.174093][ T5863] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 704.179229][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 704.204144][ T9926] usb usb2-port1: attempt power cycle [ 704.306503][ T47] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.335676][ T47] usb 3-1: config 0 has no interface number 0 [ 704.365828][ T47] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 704.380988][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.454071][ T47] usb 3-1: Product: syz [ 704.458335][ T47] usb 3-1: Manufacturer: syz [ 704.522455][ T47] usb 3-1: SerialNumber: syz [ 704.549974][ T47] usb 3-1: config 0 descriptor?? [ 704.571964][ T47] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 704.592002][T13055] syz.3.1797 (13055): drop_caches: 2 [ 704.660520][ T974] usb 4-1: USB disconnect, device number 54 [ 704.679512][ T9926] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 704.699905][ T9926] usb 2-1: device descriptor read/8, error -71 [ 704.809476][ T5863] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 704.949305][ T9926] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 704.959462][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 704.971328][ T5863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.979405][ T5863] usb 5-1: config 0 has no interface number 0 [ 704.995688][ T9926] usb 2-1: device descriptor read/8, error -71 [ 705.002436][ T5863] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 705.029284][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.037279][ T5863] usb 5-1: Product: syz [ 705.048999][ T5863] usb 5-1: Manufacturer: syz [ 705.054551][ T5863] usb 5-1: SerialNumber: syz [ 705.127948][T13076] syz.2.1799 (13076): drop_caches: 2 [ 705.149800][ T9926] usb usb2-port1: unable to enumerate USB device [ 705.339988][ T47] gspca_spca1528: reg_w err -110 [ 705.375717][ T47] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 705.376443][ T5863] usb 5-1: config 0 descriptor?? [ 705.535457][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 705.731492][ T10] usb 3-1: USB disconnect, device number 45 [ 706.297329][ T5863] gspca_spca1528: reg_w err -110 [ 706.441337][ T5863] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 706.499295][ T974] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 706.548007][T13086] syz.1.1806: attempt to access beyond end of device [ 706.548007][T13086] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 706.561307][T13086] vxfs: unable to read disk superblock at 1 [ 706.567887][T13086] syz.1.1806: attempt to access beyond end of device [ 706.567887][T13086] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 706.581001][T13086] vxfs: unable to read disk superblock at 8 [ 706.586910][T13086] vxfs: can't find superblock. [ 707.029359][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 707.129846][ T974] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 707.252146][ T974] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.315331][T13091] syz.4.1803 (13091): drop_caches: 2 [ 707.329746][ T974] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 707.367965][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.401137][ T974] usbtmc 1-1:16.0: bulk endpoints not found [ 707.619849][T13096] atomic_op ffff88805d83b198 conn xmit_atomic 0000000000000000 [ 708.049973][T13095] lo speed is unknown, defaulting to 1000 [ 708.056121][T13097] atomic_op ffff8880578a6198 conn xmit_atomic 0000000000000000 [ 708.066410][ T974] usb 5-1: USB disconnect, device number 47 [ 709.465158][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 709.656309][T13116] syz.3.1813: attempt to access beyond end of device [ 709.656309][T13116] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 709.669087][T13116] vxfs: unable to read disk superblock at 1 [ 709.675138][T13116] syz.3.1813: attempt to access beyond end of device [ 709.675138][T13116] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 709.688212][T13116] vxfs: unable to read disk superblock at 8 [ 709.694149][T13116] vxfs: can't find superblock. [ 710.269374][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 710.373059][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.393193][ T10] usb 3-1: config 0 has no interface number 0 [ 710.400021][ T5863] usb 1-1: USB disconnect, device number 53 [ 710.414124][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 710.434002][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.442362][ T10] usb 3-1: Product: syz [ 710.446520][ T10] usb 3-1: Manufacturer: syz [ 710.537769][ T10] usb 3-1: SerialNumber: syz [ 710.558747][ T10] usb 3-1: config 0 descriptor?? [ 710.713495][T13127] lo speed is unknown, defaulting to 1000 [ 711.536484][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 711.569616][ T974] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 712.092018][ T10] gspca_spca1528: reg_w err -110 [ 712.110023][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 712.297375][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 712.320869][ T974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.328877][ T974] usb 5-1: config 0 has no interface number 0 [ 712.337366][ T974] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 712.353155][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.620401][T13140] syz.1.1819: attempt to access beyond end of device [ 712.620401][T13140] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 712.633384][T13140] vxfs: unable to read disk superblock at 1 [ 712.639827][T13140] syz.1.1819: attempt to access beyond end of device [ 712.639827][T13140] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 712.653099][T13140] vxfs: unable to read disk superblock at 8 [ 712.659053][T13140] vxfs: can't find superblock. [ 712.712296][ T974] usb 5-1: Product: syz [ 712.716844][ T974] usb 5-1: Manufacturer: syz [ 712.722449][ T974] usb 5-1: SerialNumber: syz [ 712.739266][ T9926] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 712.742305][ T974] usb 5-1: config 0 descriptor?? [ 712.755558][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 712.911051][ T9926] usb 1-1: Using ep0 maxpacket: 16 [ 713.139957][ T9926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.157263][ T9926] usb 1-1: config 0 has no interface number 0 [ 713.170539][T13141] syz.2.1811 (13141): drop_caches: 2 [ 713.203269][ T9926] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 713.302357][ T9926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.546777][ T9926] usb 1-1: Product: syz [ 713.804091][ T974] gspca_spca1528: reg_w err -110 [ 713.819514][ T974] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 713.844742][ T9926] usb 1-1: Manufacturer: syz [ 713.850372][ T9926] usb 1-1: SerialNumber: syz [ 713.867975][ T5867] usb 3-1: USB disconnect, device number 46 [ 713.884383][ T9926] usb 1-1: config 0 descriptor?? [ 713.913979][ T9926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 713.935737][ T971] usb 5-1: USB disconnect, device number 48 [ 714.049726][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 714.361045][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 714.379974][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.390958][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.398943][ T10] usb 4-1: Product: syz [ 714.726678][ T10] usb 4-1: Manufacturer: syz [ 714.820080][ T9926] gspca_spca1528: reg_w err -110 [ 714.834502][T13157] syz.0.1817 (13157): drop_caches: 2 [ 715.020954][ T10] usb 4-1: SerialNumber: syz [ 715.069457][ T9926] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 715.350977][T13164] lo speed is unknown, defaulting to 1000 [ 715.518024][T13165] atomic_op ffff888029154198 conn xmit_atomic 0000000000000000 [ 715.980144][T13147] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 716.203112][T13168] atomic_op ffff888025816998 conn xmit_atomic 0000000000000000 [ 716.580504][ T9926] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 716.612908][ T971] usb 1-1: USB disconnect, device number 54 [ 716.874395][ T9926] usb 5-1: Using ep0 maxpacket: 8 [ 716.900804][ T9926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.940505][ T9926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.952723][ T9926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 716.974949][T13172] lo speed is unknown, defaulting to 1000 [ 716.981374][ T9926] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 716.991965][T13147] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 717.011745][ T9926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.047555][ T9926] usb 5-1: config 0 descriptor?? [ 717.073996][T13175] atomic_op ffff8880275bd198 conn xmit_atomic 0000000000000000 [ 717.247034][ T10] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 717.456694][ T10] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 717.741229][T13187] __nla_validate_parse: 45 callbacks suppressed [ 717.741257][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.756714][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.765803][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.774910][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.783995][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.794486][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.803566][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.812641][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.821723][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 717.852416][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 718.197468][T13185] syz.1.1831: attempt to access beyond end of device [ 718.197468][T13185] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 718.211364][T13185] vxfs: unable to read disk superblock at 1 [ 718.217383][T13185] syz.1.1831: attempt to access beyond end of device [ 718.217383][T13185] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 718.230221][T13185] vxfs: unable to read disk superblock at 8 [ 718.236112][T13185] vxfs: can't find superblock. [ 718.601307][ T47] usb 4-1: USB disconnect, device number 55 [ 718.632073][ T47] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 719.003934][ T9926] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 719.202559][ T9926] usb 2-1: Using ep0 maxpacket: 16 [ 719.248045][ T9926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.273904][ T9926] usb 2-1: config 0 has no interface number 0 [ 719.373365][ T9926] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 719.494608][ T5863] usb 5-1: USB disconnect, device number 49 [ 719.617283][ T9926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.625625][ T9926] usb 2-1: Product: syz [ 719.629804][ T9926] usb 2-1: Manufacturer: syz [ 719.634439][ T9926] usb 2-1: SerialNumber: syz [ 719.648710][ T9926] usb 2-1: config 0 descriptor?? [ 719.668930][ T9926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 720.119323][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 720.294732][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 720.302169][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.315385][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.328905][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 720.835921][ T9926] gspca_spca1528: reg_w err -110 [ 720.839405][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 720.850012][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.879378][ T5867] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 720.889856][ T9926] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 720.897846][ T10] usb 3-1: config 0 descriptor?? [ 721.079549][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 721.107702][ T5867] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 721.322406][ T5867] usb 5-1: config 0 has no interface number 0 [ 721.342170][ T5867] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 721.365465][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.389819][ T5867] usb 5-1: Product: syz [ 721.394008][ T5867] usb 5-1: Manufacturer: syz [ 721.407230][T13196] syz.1.1834 (13196): drop_caches: 2 [ 721.566080][ T5867] usb 5-1: SerialNumber: syz [ 721.648210][T13220] syz.3.1841 (13220): drop_caches: 2 [ 721.692519][ T5867] usb 5-1: config 0 descriptor?? [ 721.729538][ T5867] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 721.805803][ T9926] usb 2-1: USB disconnect, device number 60 [ 722.140070][T13224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.417841][T13225] syz.4.1836 (13225): drop_caches: 2 [ 722.439602][ T5867] gspca_spca1528: reg_w err -110 [ 722.529354][ T5867] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 722.845080][ T974] usb 5-1: USB disconnect, device number 50 [ 723.816459][T13240] syz.1.1845 (13240): drop_caches: 2 [ 724.108702][ T5867] usb 3-1: USB disconnect, device number 47 [ 724.255536][T13244] lo speed is unknown, defaulting to 1000 [ 724.499025][T13245] atomic_op ffff888058523998 conn xmit_atomic 0000000000000000 [ 725.139289][ T47] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 725.979205][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 726.063763][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.077574][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.278864][ T47] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 726.315212][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.537481][T13268] syz.3.1853: attempt to access beyond end of device [ 726.537481][T13268] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 726.558480][T13268] vxfs: unable to read disk superblock at 1 [ 726.564928][T13268] syz.3.1853: attempt to access beyond end of device [ 726.564928][T13268] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 726.577776][T13268] vxfs: unable to read disk superblock at 8 [ 726.583751][T13268] vxfs: can't find superblock. [ 726.755314][ T47] usb 1-1: config 0 descriptor?? [ 727.422354][ T47] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 727.547464][ T5930] Bluetooth: Error in BCSP hdr checksum [ 727.618792][ T47] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 727.814090][T13288] lo speed is unknown, defaulting to 1000 [ 727.820557][ T47] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 727.839705][T13289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.874953][T13290] atomic_op ffff88805c1f8198 conn xmit_atomic 0000000000000000 [ 728.120520][ T47] ft260 0003:0403:6030.0010: failed to retrieve status: -5, no wakeup [ 728.426458][ T47] ft260 0003:0403:6030.0010: failed to retrieve status: -71 [ 728.490189][ T47] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 729.262509][ T47] usb 1-1: USB disconnect, device number 55 [ 729.310406][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 729.317154][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 729.629839][ T5864] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 729.838598][ T47] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 729.870716][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 729.885103][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.899230][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.055271][T13305] lo speed is unknown, defaulting to 1000 [ 730.316247][T13306] atomic_op ffff8880363e1198 conn xmit_atomic 0000000000000000 [ 730.430938][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 730.465074][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 730.477467][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 730.495284][ T47] usb 1-1: config 0 has no interface number 0 [ 730.528648][ T47] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 730.543978][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 730.585353][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.595233][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.603413][ T47] usb 1-1: Product: syz [ 730.609809][ T47] usb 1-1: Manufacturer: syz [ 730.614883][ T5864] usb 2-1: config 0 descriptor?? [ 730.620194][ T47] usb 1-1: SerialNumber: syz [ 730.632469][ T47] usb 1-1: config 0 descriptor?? [ 730.663328][ T47] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 731.380107][ T47] gspca_spca1528: reg_w err -110 [ 731.445635][T13297] syz.0.1860 (13297): drop_caches: 2 [ 731.570355][ T47] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 731.697444][T13321] __nla_validate_parse: 98 callbacks suppressed [ 731.697460][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 731.878792][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 731.946007][T13326] syz.4.1866: attempt to access beyond end of device [ 731.946007][T13326] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 731.959060][T13326] vxfs: unable to read disk superblock at 1 [ 731.965790][T13326] syz.4.1866: attempt to access beyond end of device [ 731.965790][T13326] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 731.978750][T13326] vxfs: unable to read disk superblock at 8 [ 731.984785][T13326] vxfs: can't find superblock. [ 732.277102][ T47] usb 1-1: USB disconnect, device number 56 [ 732.314237][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.354533][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.384076][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.450601][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.585297][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.595326][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.605330][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.614834][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 732.882166][T13333] atomic_op ffff88805c7cd998 conn xmit_atomic 0000000000000000 [ 733.639621][ T9926] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 733.749368][ T5867] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 733.801321][ T9926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 733.825615][ T9926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.854058][ T9926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.859210][ T974] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 733.865156][ T9926] usb 3-1: Product: syz [ 734.029789][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 734.063394][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.102318][ T974] usb 4-1: config 0 has no interface number 0 [ 734.116979][ T974] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 734.160168][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.207815][ T974] usb 4-1: Product: syz [ 734.238133][ T974] usb 4-1: Manufacturer: syz [ 734.271102][ T974] usb 4-1: SerialNumber: syz [ 734.275716][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 734.289470][ T9926] usb 3-1: Manufacturer: syz [ 734.294274][ T9926] usb 3-1: SerialNumber: syz [ 734.299390][ T5867] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 734.307467][ T5867] usb 1-1: config 0 has no interface number 0 [ 734.319638][ T5867] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.332048][ T974] usb 4-1: config 0 descriptor?? [ 734.339676][ T5867] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 734.352394][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 734.353624][ T5864] usb 2-1: USB disconnect, device number 61 [ 734.380330][ T5867] usb 1-1: config 0 interface 41 has no altsetting 0 [ 734.395082][ T5867] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 734.409207][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.417225][ T5867] usb 1-1: Product: syz [ 734.429208][ T5867] usb 1-1: Manufacturer: syz [ 734.433818][ T5867] usb 1-1: SerialNumber: syz [ 734.450885][ T5867] usb 1-1: config 0 descriptor?? [ 734.456441][T13340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 734.468740][T13340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 734.609010][T13335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 734.703702][T13340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 734.716297][T13340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 735.330863][ T974] gspca_spca1528: reg_w err -110 [ 735.366732][ T974] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 735.421159][T13356] syz.3.1870 (13356): drop_caches: 2 [ 735.594863][ T5867] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 735.786060][ T30] audit: type=1400 audit(1743662534.818:302): avc: denied { read } for pid=13357 comm="syz.4.1877" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 735.823303][T13358] netlink: 'syz.4.1877': attribute type 12 has an invalid length. [ 735.839923][ T30] audit: type=1400 audit(1743662534.818:303): avc: denied { open } for pid=13357 comm="syz.4.1877" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 735.870335][T13335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 735.889409][ T5869] usb 1-1: USB disconnect, device number 57 [ 735.920929][ T30] audit: type=1400 audit(1743662534.848:304): avc: denied { ioctl } for pid=13357 comm="syz.4.1877" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 735.961449][ T30] audit: type=1400 audit(1743662534.858:305): avc: denied { bind } for pid=13357 comm="syz.4.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 735.961724][ T47] usb 4-1: USB disconnect, device number 56 [ 735.993326][ T30] audit: type=1400 audit(1743662534.858:306): avc: denied { name_bind } for pid=13357 comm="syz.4.1877" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 736.026755][ T30] audit: type=1400 audit(1743662534.858:307): avc: denied { node_bind } for pid=13357 comm="syz.4.1877" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 736.054718][ T30] audit: type=1400 audit(1743662534.858:308): avc: denied { getopt } for pid=13357 comm="syz.4.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.098122][ T9926] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 736.110040][ T9926] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 736.260085][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 736.422093][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 736.453353][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 736.507988][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.555179][ T30] audit: type=1400 audit(1743662535.588:309): avc: denied { read } for pid=13371 comm="syz.0.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 736.579831][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 736.589386][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.597370][ T10] usb 5-1: Product: syz [ 736.617100][ T10] usb 5-1: Manufacturer: syz [ 736.621985][ T10] usb 5-1: SerialNumber: syz [ 737.338465][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 737.355477][ T10] usb 5-1: USB disconnect, device number 51 [ 737.364014][ T10] usblp0: removed [ 737.769320][ T974] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 737.959287][T13393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.005428][ T5869] usb 3-1: USB disconnect, device number 48 [ 738.028377][ T5869] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 738.059303][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 738.104058][ T974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.112977][ T974] usb 2-1: config 0 has no interface number 0 [ 738.128738][ T974] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 738.145133][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.153256][ T974] usb 2-1: Product: syz [ 738.157491][ T974] usb 2-1: Manufacturer: syz [ 738.198049][ T974] usb 2-1: SerialNumber: syz [ 738.222984][ T974] usb 2-1: config 0 descriptor?? [ 738.232849][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 738.247083][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 738.389784][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 738.396652][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.443006][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.476680][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 738.516766][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 738.526051][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.541422][ T10] usb 5-1: config 0 descriptor?? [ 738.995037][ T974] gspca_spca1528: reg_w err -110 [ 739.020577][ T974] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 739.279467][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 739.291804][T13418] __nla_validate_parse: 48 callbacks suppressed [ 739.291814][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 739.314792][T13412] syz.1.1882 (13412): drop_caches: 2 [ 739.459729][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 739.466462][ T974] usb 2-1: USB disconnect, device number 62 [ 739.496604][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.591542][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.616483][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 739.638855][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 739.682862][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 739.710325][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.745458][ T10] usb 3-1: config 0 descriptor?? [ 739.750317][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 739.892501][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 739.988427][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 740.260221][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 740.292604][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 740.793894][ T30] audit: type=1400 audit(1743662539.818:310): avc: denied { map } for pid=13438 comm="syz.3.1891" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 740.822330][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 740.996096][ T30] audit: type=1400 audit(1743662539.818:311): avc: denied { execute } for pid=13438 comm="syz.3.1891" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 741.024895][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 741.080035][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 741.113241][ T5867] usb 3-1: USB disconnect, device number 49 [ 741.149241][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 741.200041][T13452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.306288][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 741.426729][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.450521][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.502372][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 741.518311][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.531258][ T5869] usb 5-1: USB disconnect, device number 52 [ 741.574297][ T10] usb 4-1: config 0 descriptor?? [ 742.305102][ T10] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 742.344747][T13469] FAULT_INJECTION: forcing a failure. [ 742.344747][T13469] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 742.386440][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.4.1894 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 742.386464][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.386474][T13469] Call Trace: [ 742.386480][T13469] [ 742.386486][T13469] dump_stack_lvl+0x16c/0x1f0 [ 742.386513][T13469] should_fail_ex+0x512/0x640 [ 742.386533][T13469] should_fail_alloc_page+0xe7/0x130 [ 742.386555][T13469] prepare_alloc_pages+0x3c2/0x610 [ 742.386582][T13469] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 742.386604][T13469] ? find_held_lock+0x2b/0x80 [ 742.386626][T13469] ? is_bpf_text_address+0x8a/0x1a0 [ 742.386644][T13469] ? bpf_ksym_find+0x127/0x1c0 [ 742.386665][T13469] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 742.386691][T13469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 742.386707][T13469] ? kernel_text_address+0x8d/0x100 [ 742.386727][T13469] ? unwind_get_return_address+0x59/0xa0 [ 742.386748][T13469] ? arch_stack_walk+0xa6/0x100 [ 742.386776][T13469] ? __lock_acquire+0x5ca/0x1ba0 [ 742.386792][T13469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.386813][T13469] ? policy_nodemask+0xea/0x4e0 [ 742.386833][T13469] alloc_pages_mpol+0x1fb/0x550 [ 742.386853][T13469] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 742.386874][T13469] ? filemap_get_entry+0x1a7/0x3b0 [ 742.386899][T13469] folio_alloc_noprof+0x20/0x2d0 [ 742.386921][T13469] filemap_alloc_folio_noprof+0x3a1/0x470 [ 742.386949][T13469] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 742.386991][T13469] __filemap_get_folio+0x5e9/0xc10 [ 742.387019][T13469] filemap_fault+0x669/0x2740 [ 742.387045][T13469] ? __pfx_filemap_fault+0x10/0x10 [ 742.387065][T13469] ? __mod_memcg_lruvec_state+0x533/0x760 [ 742.387093][T13469] ? __pfx_filemap_map_pages+0x10/0x10 [ 742.387113][T13469] ? pte_alloc_one+0x2b1/0x380 [ 742.387137][T13469] ? __pfx_filemap_map_pages+0x10/0x10 [ 742.387154][T13469] __do_fault+0x10a/0x490 [ 742.387174][T13469] ? __pfx_filemap_map_pages+0x10/0x10 [ 742.387192][T13469] do_pte_missing+0x1a6/0x3fb0 [ 742.387218][T13469] ? mtree_range_walk+0x718/0xc00 [ 742.387237][T13469] ? find_held_lock+0x2b/0x80 [ 742.387259][T13469] __handle_mm_fault+0x103d/0x2a40 [ 742.387295][T13469] ? __pfx___handle_mm_fault+0x10/0x10 [ 742.387335][T13469] ? find_vma+0xbf/0x140 [ 742.387355][T13469] ? __pfx_find_vma+0x10/0x10 [ 742.387379][T13469] handle_mm_fault+0x3fe/0xad0 [ 742.387409][T13469] do_user_addr_fault+0x7a6/0x1370 [ 742.387431][T13469] ? rcu_is_watching+0x12/0xc0 [ 742.387454][T13469] exc_page_fault+0x5c/0xc0 [ 742.387472][T13469] asm_exc_page_fault+0x26/0x30 [ 742.387488][T13469] RIP: 0010:__put_user_4+0xd/0x20 [ 742.387508][T13469] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 742.387523][T13469] RSP: 0018:ffffc90004da7e28 EFLAGS: 00050202 [ 742.387538][T13469] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000200000000080 [ 742.387548][T13469] RDX: ffff888030782440 RSI: ffffffff893eb464 RDI: ffffffff8bf45860 [ 742.387558][T13469] RBP: 1ffff920009b4fc9 R08: e7151b5d2ecc2001 R09: 0000000000000001 [ 742.387569][T13469] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 742.387578][T13469] R13: 0000000000000009 R14: 0000000000000002 R15: dffffc0000000000 [ 742.387596][T13469] ? __sys_socketpair+0x114/0x5a0 [ 742.387625][T13469] __sys_socketpair+0x120/0x5a0 [ 742.387651][T13469] ? __pfx___sys_socketpair+0x10/0x10 [ 742.387679][T13469] ? __pfx_ksys_write+0x10/0x10 [ 742.387693][T13469] ? rcu_is_watching+0x12/0xc0 [ 742.387716][T13469] __x64_sys_socketpair+0x96/0x100 [ 742.387741][T13469] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.387759][T13469] do_syscall_64+0xcd/0x260 [ 742.387779][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.387794][T13469] RIP: 0033:0x7f99a5f8d169 [ 742.387807][T13469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.387821][T13469] RSP: 002b:00007f99a6e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 742.387834][T13469] RAX: ffffffffffffffda RBX: 00007f99a61a5fa0 RCX: 00007f99a5f8d169 [ 742.387842][T13469] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 742.387850][T13469] RBP: 00007f99a6e45090 R08: 0000000000000000 R09: 0000000000000000 [ 742.387859][T13469] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 742.387867][T13469] R13: 0000000000000000 R14: 00007f99a61a5fa0 R15: 00007ffdbf3b80d8 [ 742.387889][T13469] [ 742.389757][ T10] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 742.890410][ T10] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 743.117523][ T10] ft260 0003:0403:6030.0011: failed to retrieve status: -5, no wakeup [ 743.370270][ T10] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 743.761947][ T10] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 744.059225][ T5867] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 744.106685][T13494] lo speed is unknown, defaulting to 1000 [ 744.113474][T13496] tmpfs: Bad value for 'mpol' [ 744.113548][ T30] audit: type=1400 audit(1743662543.148:312): avc: denied { mounton } for pid=13495 comm="syz.1.1899" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 744.207787][ T30] audit: type=1400 audit(1743662543.238:313): avc: denied { ioctl } for pid=13498 comm="syz.1.1902" path="socket:[35125]" dev="sockfs" ino=35125 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 744.259464][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 744.273137][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.290084][ T974] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 744.291222][ T5867] usb 3-1: config 0 has no interface number 0 [ 744.304075][ T30] audit: type=1400 audit(1743662543.318:314): avc: denied { create } for pid=13498 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 744.320820][ T5867] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 744.333098][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.341261][ T5867] usb 3-1: Product: syz [ 744.345422][ T5867] usb 3-1: Manufacturer: syz [ 744.350169][ T5867] usb 3-1: SerialNumber: syz [ 744.356826][ T5867] usb 3-1: config 0 descriptor?? [ 744.362059][ T30] audit: type=1400 audit(1743662543.318:315): avc: denied { map } for pid=13498 comm="syz.1.1902" path="socket:[35127]" dev="sockfs" ino=35127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 744.385842][ T30] audit: type=1400 audit(1743662543.318:316): avc: denied { read } for pid=13498 comm="syz.1.1902" path="socket:[35127]" dev="sockfs" ino=35127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 744.411264][ T5867] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 744.419888][ T30] audit: type=1400 audit(1743662543.328:317): avc: denied { write } for pid=13498 comm="syz.1.1902" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 744.489286][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 744.500555][ T974] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.511528][ T974] usb 1-1: config 0 has no interface number 0 [ 744.522502][ T974] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 744.532476][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.544095][ T974] usb 1-1: Product: syz [ 744.548259][ T974] usb 1-1: Manufacturer: syz [ 744.554061][ T974] usb 1-1: SerialNumber: syz [ 744.569693][ T974] usb 1-1: config 0 descriptor?? [ 744.578562][ T974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 744.829781][ T5869] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 744.879805][ T5869] usb 4-1: device reset changed ep0 maxpacket size! [ 744.916740][ T10] usb 4-1: USB disconnect, device number 57 [ 745.151388][T13493] syz.0.1901 (13493): drop_caches: 2 [ 745.169223][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 745.187235][ T5867] gspca_spca1528: reg_w err -110 [ 745.248389][T13508] syz.2.1898 (13508): drop_caches: 2 [ 745.289511][ T974] gspca_spca1528: reg_w err -110 [ 745.291331][ T5867] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 745.314860][ T974] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 745.342565][ T974] usb 1-1: USB disconnect, device number 58 [ 745.411079][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.422810][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 745.436953][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 745.454828][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 745.468158][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 745.479705][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.492840][ T10] usb 4-1: config 0 descriptor?? [ 745.498236][T13494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 745.530408][ T974] usb 3-1: USB disconnect, device number 50 [ 745.639436][ T5869] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 745.789544][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 745.796697][ T5869] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 745.806494][ T5869] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 745.817441][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 745.826105][ T5869] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 745.835230][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.846165][ T5869] usb 2-1: Product: syz [ 745.851403][ T5869] usb 2-1: Manufacturer: syz [ 745.856061][ T5869] usb 2-1: SerialNumber: syz [ 745.868972][ T5869] usb 2-1: config 0 descriptor?? [ 745.921723][ T10] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 745.936259][ T10] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 745.957416][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 746.029400][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 746.029578][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 746.100782][ T5869] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 746.151620][T13519] program syz.2.1907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.373176][ T5867] usb 4-1: USB disconnect, device number 58 [ 746.409007][ T5869] usb 2-1: USB disconnect, device number 63 [ 746.455836][ T30] audit: type=1400 audit(1743662545.468:318): avc: denied { create } for pid=13517 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 746.524466][ T30] audit: type=1400 audit(1743662545.468:319): avc: denied { write } for pid=13517 comm="syz.2.1907" path="socket:[34556]" dev="sockfs" ino=34556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 746.755834][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.762131][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.255840][T13541] __nla_validate_parse: 98 callbacks suppressed [ 748.255855][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 748.278768][ T30] audit: type=1400 audit(1743662547.288:320): avc: denied { ioctl } for pid=13540 comm="syz.3.1913" path="socket:[35285]" dev="sockfs" ino=35285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 748.394084][T13546] ALSA: seq fatal error: cannot create timer (-22) [ 748.401682][ T30] audit: type=1400 audit(1743662547.428:321): avc: denied { write } for pid=13540 comm="syz.3.1913" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 748.487642][T13541] bond0: (slave bond_slave_0): Releasing backup interface [ 748.888009][T13566] warning: `syz.2.1922' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 750.234504][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 750.758842][T13581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.828420][T13589] xt_hashlimit: size too large, truncated to 1048576 [ 751.144706][T13588] : renamed from bond0 (while UP) [ 751.159579][ T30] audit: type=1400 audit(1743662550.178:322): avc: denied { write } for pid=13586 comm="syz.4.1927" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 751.234674][ T30] audit: type=1400 audit(1743662550.178:323): avc: denied { ioctl } for pid=13586 comm="syz.4.1927" path="socket:[35424]" dev="sockfs" ino=35424 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 751.438274][T13595] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 751.476903][T13595] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1929'. [ 752.072614][ T30] audit: type=1400 audit(1743662551.108:324): avc: denied { write } for pid=13603 comm="syz.4.1933" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 752.261115][ T5867] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 752.499190][ T5867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 752.534468][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.566260][ T30] audit: type=1400 audit(1743662551.138:325): avc: denied { shutdown } for pid=13602 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.736553][T13614] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 752.748977][ T30] audit: type=1400 audit(1743662551.508:326): avc: denied { bind } for pid=13612 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 752.769517][T13614] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 753.258438][ T5867] usb 1-1: Product: syz [ 753.266173][T13614] [U] 4°×XZ^Yˆ±„™)ÛÀ´´ÈMÕC°¼.Œ OÅÈžÛPšO¼­W [ 753.272940][T13614] [U] ‚ä%Z [ 753.277132][T13614] [U] ¾8`Ñ}—[TÃÚJ#ZÏ~»Ž3µݥI~ÇD‚%8@7J÷ÝÍ|{9Dœ¤C¤ÏÜE+ÇOÆK?%§6 [ 753.289562][T13614] [U] ®ÛP>BÐÌ–ÖZ% [ 753.298658][T13614] [U] îI)=§–‹×#Fš/»UI~)YS¸…‘Œ‡Ú=¥›¼×ŠÙ4€ƒÍ F¾XÉ&Ç%$K ÂÓ'”.7•*9|AÔU\ÈÀP–ÇV¦»Â|ÌÔŠ [ 753.323197][ T5867] usb 1-1: Manufacturer: syz [ 753.345388][ T5867] usb 1-1: SerialNumber: syz [ 753.379327][T13614] [U] Ü£¿ˆºÚK [ 753.383604][T13614] [U] ÏOW×.ÜWÛ ¢ZGʳ¸÷Ô Ð´š€Å$JÄYR7€È/•1ZT7LË[+¼Ð [ 753.391178][T13614] [U] ^ [ 753.394458][T13614] [U] TË!#ÝÍÓ‡˜Åµ$BIÆN,<œT¦[:D¶#8Ã(΢E"¶6†Y§Ë¡ÁËEÉÚF¿L&°1ÁY¯Ð0ÁDBÀŠ­¿BÊ1Æߦʶ84 ¹+N3ѾÚ=CÒI»Ô/6ˆ}ÄÛARÛ- -ÄÉO„IÝÙ9ÊØ¥M˜Z [ 753.412146][T13614] [U] ,8‰ÆO®ªP9÷ÊÚUGÒÝ—TXF½¼Ê])“‡ŠA3°_ ‚D¾"ȈÛXË÷Ó«Ÿ¨XÚÀœÍÆ÷ZDÂÇÄݳ ÂÁ!ÁWÈÀA 9ž‰@Ù‚Ë3ÃX+„ƒ§ÑZAO] Ò8X³Œ¾X{ÈËÓ÷( ))Î27YË 3Á³,Ô!KW(CѱœÃIÃEº´¤ŸÍ\AMл¹ØCUÔ0*%ÉOHCÐ|;XCKÞŽ@VÈNQ³Z [ 753.433447][T13614] [U] Å£’Ô¶¢‡¹DÇ‚`=…ÆØNž¿<ʸ²Ý]Q [ 753.447299][ T5867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 753.457733][T13614] [U] K‡EÐZÈ’F9Ǩ{ [ 753.469420][ T30] audit: type=1400 audit(1743662551.508:327): avc: denied { node_bind } for pid=13612 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 753.587491][ T47] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 753.663425][T13603] [U] Z‘IÜ]?.|‡É"%šBÊÉ)À‹`ÂÙݾ6™VO}«'‘V°ß¾±‡¯ÅÄI\M¯„;S¹ QS²K3ŸÞ‰DY­_Û-T€40 ËÁOP•ÂEß´ŸPÇÁÑ<!AUØÜË> Z²Ã¹6– [ 753.665356][ T30] audit: type=1400 audit(1743662551.508:328): avc: denied { read } for pid=13612 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 753.714414][ T30] audit: type=1400 audit(1743662552.598:329): avc: denied { firmware_load } for pid=47 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 753.786482][ T30] audit: type=1400 audit(1743662552.818:330): avc: denied { append } for pid=13623 comm="syz.1.1939" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 754.099293][ T971] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 754.261741][ T971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.286530][ T971] usb 4-1: not running at top speed; connect to a high speed hub [ 754.288049][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.299439][ T971] usb 4-1: config 140 has an invalid interface number: 70 but max is 0 [ 754.304483][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.630007][ T971] usb 4-1: config 140 has no interface number 0 [ 754.636334][ T971] usb 4-1: config 140 interface 70 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 754.663642][ T10] usb 1-1: USB disconnect, device number 59 [ 754.682318][ T47] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 754.697965][ T47] ath9k_htc: Failed to initialize the device [ 754.710526][T13640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.770584][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 754.778897][ T971] usb 4-1: config 140 interface 70 has no altsetting 0 [ 754.807539][ T971] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5 [ 754.817294][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.837479][ T971] usb 4-1: Product: syz [ 754.842934][ T971] usb 4-1: Manufacturer: syz [ 754.893549][ T971] usb 4-1: SerialNumber: syz [ 754.925462][T13621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 755.239721][ T47] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 755.247497][ T971] usb 4-1: USB disconnect, device number 59 [ 755.409226][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 755.492932][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.539475][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.573226][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 755.599224][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 755.658802][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.726053][ T47] usb 5-1: config 0 descriptor?? [ 755.759296][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 755.786831][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 755.851711][ T10] usb 2-1: config 0 has no interface number 0 [ 755.889637][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 755.960918][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.997184][ T10] usb 2-1: Product: syz [ 756.016319][ T10] usb 2-1: Manufacturer: syz [ 756.041921][ T10] usb 2-1: SerialNumber: syz [ 756.079592][ T10] usb 2-1: config 0 descriptor?? [ 756.120711][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 756.182544][ T47] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 756.219434][ T971] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 756.382905][ T47] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 756.419409][ T971] usb 4-1: device descriptor read/64, error -71 [ 756.449538][ T47] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 756.533480][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 756.594952][ T47] usb 5-1: USB disconnect, device number 53 [ 756.707829][ T971] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 756.849849][ T10] gspca_spca1528: reg_w err -110 [ 756.882533][ T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 756.911123][ T971] usb 4-1: device descriptor read/64, error -71 [ 756.999242][T13679] syz.1.1943 (13679): drop_caches: 2 [ 757.051195][ T971] usb usb4-port1: attempt power cycle [ 757.750022][ T971] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 757.873478][ T971] usb 4-1: device descriptor read/8, error -71 [ 758.420408][T13687] netlink: 212404 bytes leftover after parsing attributes in process `syz.2.1948'. [ 758.489583][ T971] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 758.639971][ T971] usb 4-1: device descriptor read/8, error -71 [ 759.128487][ T971] usb usb4-port1: unable to enumerate USB device [ 759.313856][ T10] usb 2-1: USB disconnect, device number 64 [ 759.493298][T13698] lo speed is unknown, defaulting to 1000 [ 759.726619][T13699] atomic_op ffff888078f6b998 conn xmit_atomic 0000000000000000 [ 759.987833][ T30] audit: type=1400 audit(1743662559.018:331): avc: denied { map } for pid=13706 comm="syz.1.1954" path="socket:[36082]" dev="sockfs" ino=36082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 760.019716][T13707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1954'. [ 760.055705][T13708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 760.062232][T13708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 760.080525][T13708] vhci_hcd vhci_hcd.0: Device attached [ 760.113394][T13714] FAULT_INJECTION: forcing a failure. [ 760.113394][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 760.127202][T13714] CPU: 0 UID: 0 PID: 13714 Comm: syz.0.1956 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 760.127225][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 760.127235][T13714] Call Trace: [ 760.127241][T13714] [ 760.127247][T13714] dump_stack_lvl+0x16c/0x1f0 [ 760.127273][T13714] should_fail_ex+0x512/0x640 [ 760.127294][T13714] _copy_to_user+0x32/0xd0 [ 760.127315][T13714] simple_read_from_buffer+0xcb/0x170 [ 760.127344][T13714] proc_fail_nth_read+0x197/0x270 [ 760.127372][T13714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.127400][T13714] ? rw_verify_area+0xcf/0x680 [ 760.127423][T13714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.127450][T13714] vfs_read+0x1de/0xc70 [ 760.127486][T13714] ? __pfx___mutex_lock+0x10/0x10 [ 760.127506][T13714] ? __pfx_vfs_read+0x10/0x10 [ 760.127539][T13714] ? __fget_files+0x20e/0x3c0 [ 760.127562][T13714] ksys_read+0x12a/0x240 [ 760.127576][T13714] ? __pfx_ksys_read+0x10/0x10 [ 760.127590][T13714] ? rcu_is_watching+0x12/0xc0 [ 760.127618][T13714] do_syscall_64+0xcd/0x260 [ 760.127639][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.127656][T13714] RIP: 0033:0x7fbef0d8bb7c [ 760.127669][T13714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 760.127685][T13714] RSP: 002b:00007fbef1c99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.127701][T13714] RAX: ffffffffffffffda RBX: 00007fbef0fa5fa0 RCX: 00007fbef0d8bb7c [ 760.127717][T13714] RDX: 000000000000000f RSI: 00007fbef1c990a0 RDI: 0000000000000012 [ 760.127726][T13714] RBP: 00007fbef1c99090 R08: 0000000000000000 R09: 0000000000000000 [ 760.127734][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.127744][T13714] R13: 0000000000000000 R14: 00007fbef0fa5fa0 R15: 00007fff21d10b58 [ 760.127766][T13714] [ 760.154217][T13715] vhci_hcd vhci_hcd.0: port 0 already used [ 760.209829][T13697] ======================================================= [ 760.209829][T13697] WARNING: The mand mount option has been deprecated and [ 760.209829][T13697] and is ignored by this kernel. Remove the mand [ 760.209829][T13697] option from the mount to silence this warning. [ 760.209829][T13697] ======================================================= [ 760.215663][ T30] audit: type=1400 audit(1743662559.248:332): avc: denied { remount } for pid=13695 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 760.395599][T13709] vhci_hcd: connection closed [ 760.412795][ T1085] vhci_hcd: stop threads [ 760.435807][ T1085] vhci_hcd: release socket [ 760.519522][ T971] usb 42-1: SetAddress Request (2) to port 0 [ 760.525989][ T971] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 760.858494][ T1085] vhci_hcd: disconnect device [ 761.068863][ T971] usb 42-1: enqueue for inactive port 0 [ 761.920879][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1961'. [ 762.009390][ T971] usb usb42-port1: attempt power cycle [ 762.098564][ T30] audit: type=1400 audit(1743662561.128:333): avc: denied { write } for pid=13737 comm="syz.4.1963" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 762.580853][ T971] usb usb42-port1: unable to enumerate USB device [ 762.604117][T13745] netlink: 'syz.2.1964': attribute type 13 has an invalid length. [ 762.614073][T13744] netlink: 'syz.2.1964': attribute type 13 has an invalid length. [ 762.773540][T13744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.829748][ T974] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 762.854201][T13745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.877872][T13742] lo speed is unknown, defaulting to 1000 [ 762.979242][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 763.000829][ T974] usb 2-1: config index 0 descriptor too short (expected 12336, got 77) [ 763.012596][ T974] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 763.041592][ T974] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 763.064752][ T974] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 763.083196][ T974] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 763.095556][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.123039][ T974] usb 2-1: Product: syz [ 763.137733][ T974] usb 2-1: Manufacturer: syz [ 763.142497][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 763.160804][ T974] usb 2-1: SerialNumber: syz [ 763.168316][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.180375][ T10] usb 5-1: config 0 has no interface number 0 [ 763.288709][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 763.308747][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.317109][ T10] usb 5-1: Product: syz [ 763.321484][ T10] usb 5-1: Manufacturer: syz [ 763.335239][ T10] usb 5-1: SerialNumber: syz [ 763.417518][ T10] usb 5-1: config 0 descriptor?? [ 763.727529][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 763.990786][ T30] audit: type=1400 audit(1743662563.028:334): avc: denied { write } for pid=13769 comm="syz.2.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 764.768758][ T10] gspca_spca1528: reg_w err -110 [ 764.790849][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 765.077361][ T974] usb 2-1: USB disconnect, device number 65 [ 765.249378][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 765.250379][T13786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.464149][T13775] syz.4.1965 (13775): drop_caches: 2 [ 765.559113][T13777] IPv6: addrconf: prefix option has invalid lifetime [ 767.340876][ T30] audit: type=1400 audit(1743662566.368:335): avc: denied { setopt } for pid=13808 comm="syz.0.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.862530][ T30] audit: type=1400 audit(1743662566.368:336): avc: denied { write } for pid=13808 comm="syz.0.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 768.119730][ T30] audit: type=1400 audit(1743662566.448:337): avc: denied { bind } for pid=13798 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 768.186733][ T30] audit: type=1400 audit(1743662566.448:338): avc: denied { name_bind } for pid=13798 comm="syz.3.1978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 768.207532][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.269490][ T974] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 769.285949][ T30] audit: type=1400 audit(1743662566.448:339): avc: denied { node_bind } for pid=13798 comm="syz.3.1978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 769.306759][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.313773][ T30] audit: type=1400 audit(1743662566.458:340): avc: denied { listen } for pid=13798 comm="syz.3.1978" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 769.463678][ T30] audit: type=1400 audit(1743662566.468:341): avc: denied { accept } for pid=13798 comm="syz.3.1978" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 769.488575][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.505690][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.518099][ T30] audit: type=1400 audit(1743662566.468:342): avc: denied { write } for pid=13798 comm="syz.3.1978" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=54868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 769.543567][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.004342][ T974] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 770.013454][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.025086][ T974] usb 2-1: config 0 descriptor?? [ 770.481155][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'. [ 770.663597][ T974] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 770.952742][ T30] audit: type=1400 audit(1743662569.988:343): avc: denied { load_policy } for pid=13814 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 770.953222][T13815] SELinux: policydb version 26144 does not match my version range 15-34 [ 771.033794][ T5863] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 771.060017][ T47] usb 5-1: USB disconnect, device number 54 [ 771.071878][T13815] SELinux: failed to load policy [ 771.125865][ T974] hid-led 0003:0FC5:B080.0014: probe with driver hid-led failed with error -71 [ 771.147780][ T974] usb 2-1: USB disconnect, device number 66 [ 771.199403][ T5869] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 771.207453][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 771.734327][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.748306][ T5863] usb 4-1: config 0 has no interface number 0 [ 771.764192][ T5863] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 771.775680][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.784189][ T5863] usb 4-1: Product: syz [ 771.788408][ T5863] usb 4-1: Manufacturer: syz [ 771.793835][ T5863] usb 4-1: SerialNumber: syz [ 771.801139][ T5863] usb 4-1: config 0 descriptor?? [ 771.811879][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 771.970294][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 771.981618][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.941863][ T5869] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 772.970244][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.327509][ T5869] usb 3-1: config 0 descriptor?? [ 773.440440][ T5863] gspca_spca1528: reg_w err -110 [ 773.562444][ T5863] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 773.730621][T13861] syz.3.1987 (13861): drop_caches: 2 [ 773.829373][ T971] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 774.059250][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 774.065658][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.067618][ T5863] usb 4-1: USB disconnect, device number 64 [ 774.080107][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 774.098528][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 774.098932][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 774.116140][ T971] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 774.121384][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 774.580132][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.594578][ T971] usb 1-1: config 0 descriptor?? [ 774.645482][ T5869] usb 3-1: USB disconnect, device number 51 [ 774.666576][ T30] audit: type=1400 audit(1743662573.698:344): avc: denied { write } for pid=13867 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 774.963118][T13883] FAULT_INJECTION: forcing a failure. [ 774.963118][T13883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.976778][T13883] CPU: 1 UID: 0 PID: 13883 Comm: syz.2.2001 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 774.976799][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 774.976809][T13883] Call Trace: [ 774.976815][T13883] [ 774.976821][T13883] dump_stack_lvl+0x16c/0x1f0 [ 774.976845][T13883] should_fail_ex+0x512/0x640 [ 774.976865][T13883] _copy_from_user+0x2e/0xd0 [ 774.976883][T13883] userfaultfd_ioctl+0x2671/0x3890 [ 774.976911][T13883] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 774.976931][T13883] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 774.976956][T13883] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 774.976999][T13883] ? selinux_file_ioctl+0x180/0x270 [ 774.977021][T13883] ? selinux_file_ioctl+0xb4/0x270 [ 774.977044][T13883] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 774.977068][T13883] ? __x64_sys_ioctl+0x190/0x200 [ 774.977090][T13883] __x64_sys_ioctl+0x190/0x200 [ 774.977114][T13883] do_syscall_64+0xcd/0x260 [ 774.977135][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.977152][T13883] RIP: 0033:0x7fb44e78d169 [ 774.977165][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.977180][T13883] RSP: 002b:00007fb44f529038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.977196][T13883] RAX: ffffffffffffffda RBX: 00007fb44e9a6160 RCX: 00007fb44e78d169 [ 774.977206][T13883] RDX: 0000200000000100 RSI: 00000000c020aa08 RDI: 0000000000000005 [ 774.977216][T13883] RBP: 00007fb44f529090 R08: 0000000000000000 R09: 0000000000000000 [ 774.977226][T13883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.977235][T13883] R13: 0000000000000000 R14: 00007fb44e9a6160 R15: 00007ffd0290f298 [ 774.977257][T13883] [ 775.316963][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.326274][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.337196][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.348294][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.358795][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.369302][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.432704][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.439240][ T5869] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 775.442415][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.466125][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.489174][T13889] __nla_validate_parse: 31 callbacks suppressed [ 775.489217][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.508177][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.520520][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.521005][ T5863] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 775.530848][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.530983][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.531105][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.531251][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.531403][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.531531][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.531677][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 775.698186][T13894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.733080][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 775.819298][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 775.855151][ T5869] usb 2-1: config 0 has no interface number 0 [ 775.883950][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.909072][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.926816][ T5869] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 775.944494][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.968932][ T5869] usb 2-1: Product: syz [ 775.973317][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 775.987423][ T5869] usb 2-1: Manufacturer: syz [ 776.000618][ T5869] usb 2-1: SerialNumber: syz [ 776.059393][ T5869] usb 2-1: config 0 descriptor?? [ 776.064848][ T5863] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 776.102758][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 776.115691][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.140129][ T5863] usb 5-1: config 0 descriptor?? [ 776.216816][T13902] FAULT_INJECTION: forcing a failure. [ 776.216816][T13902] name failslab, interval 1, probability 0, space 0, times 0 [ 776.230259][T13902] CPU: 1 UID: 0 PID: 13902 Comm: syz.2.2006 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 776.230281][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 776.230291][T13902] Call Trace: [ 776.230296][T13902] [ 776.230303][T13902] dump_stack_lvl+0x16c/0x1f0 [ 776.230325][T13902] should_fail_ex+0x512/0x640 [ 776.230347][T13902] ? fs_reclaim_acquire+0xae/0x150 [ 776.230372][T13902] ? tomoyo_encode2+0x100/0x3e0 [ 776.230393][T13902] should_failslab+0xc2/0x120 [ 776.230411][T13902] __kmalloc_noprof+0xd2/0x510 [ 776.230434][T13902] tomoyo_encode2+0x100/0x3e0 [ 776.230457][T13902] tomoyo_encode+0x29/0x50 [ 776.230477][T13902] tomoyo_realpath_from_path+0x18f/0x6e0 [ 776.230501][T13902] ? tomoyo_profile+0x47/0x60 [ 776.230527][T13902] tomoyo_path_number_perm+0x245/0x580 [ 776.230545][T13902] ? tomoyo_path_number_perm+0x237/0x580 [ 776.230566][T13902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.230585][T13902] ? find_held_lock+0x2b/0x80 [ 776.230626][T13902] ? find_held_lock+0x2b/0x80 [ 776.230645][T13902] ? hook_file_ioctl_common+0x145/0x410 [ 776.230675][T13902] ? __fget_files+0x20e/0x3c0 [ 776.230696][T13902] security_file_ioctl+0x9b/0x240 [ 776.230719][T13902] __x64_sys_ioctl+0xb7/0x200 [ 776.230742][T13902] do_syscall_64+0xcd/0x260 [ 776.230764][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.230780][T13902] RIP: 0033:0x7fb44e78d169 [ 776.230792][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.230808][T13902] RSP: 002b:00007fb44f56b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.230824][T13902] RAX: ffffffffffffffda RBX: 00007fb44e9a5fa0 RCX: 00007fb44e78d169 [ 776.230835][T13902] RDX: 0000200000000d40 RSI: 00000000000089f2 RDI: 0000000000000003 [ 776.230844][T13902] RBP: 00007fb44f56b090 R08: 0000000000000000 R09: 0000000000000000 [ 776.230854][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.230862][T13902] R13: 0000000000000000 R14: 00007fb44e9a5fa0 R15: 00007ffd0290f298 [ 776.230884][T13902] [ 776.230899][T13902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.571485][ T5863] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 776.588237][ T5863] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 776.609045][ T5863] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 777.434701][ T5869] gspca_spca1528: reg_w err -110 [ 777.481660][ T5869] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 777.523990][ T47] usb 5-1: USB disconnect, device number 55 [ 777.537989][T13905] syz.1.2002 (13905): drop_caches: 2 [ 777.604044][ T5869] usb 1-1: USB disconnect, device number 60 [ 777.709418][ T9926] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 777.729772][ T971] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 777.869327][ T9926] usb 4-1: Using ep0 maxpacket: 16 [ 777.877142][ T9926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.885759][ T9926] usb 4-1: config 0 has no interface number 0 [ 777.897187][ T9926] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 777.906928][ T9926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.915513][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 777.921346][ T9926] usb 4-1: Product: syz [ 777.926010][ T9926] usb 4-1: Manufacturer: syz [ 777.931101][ T9926] usb 4-1: SerialNumber: syz [ 777.936006][ T971] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.944014][ T971] usb 3-1: config 0 has no interface number 0 [ 777.967184][ T9926] usb 4-1: config 0 descriptor?? [ 777.976354][ T971] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 777.987209][ T9926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 777.994247][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.999514][ T5869] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 778.002412][ T971] usb 3-1: Product: syz [ 778.014890][ T971] usb 3-1: Manufacturer: syz [ 778.019908][ T971] usb 3-1: SerialNumber: syz [ 778.040328][ T971] usb 3-1: config 0 descriptor?? [ 778.051884][ T971] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 778.723105][ T9926] gspca_spca1528: reg_w err -110 [ 778.725415][ T5869] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 778.742841][ T9926] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 778.745963][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.770412][ T971] gspca_spca1528: reg_w err -110 [ 778.771085][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 778.789467][ T971] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 779.039348][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 779.060783][ T5869] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 779.073486][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 779.084517][ T5869] usb 1-1: Product: syz [ 779.097319][ T5869] usb 1-1: Manufacturer: syz [ 779.354751][T13920] syz.3.2008 (13920): drop_caches: 2 [ 779.425860][ T5869] cdc_wdm 1-1:1.0: skipping garbage [ 779.450484][ T5869] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 779.490618][ T9926] usb 4-1: USB disconnect, device number 65 [ 780.119874][T13214] usb 3-1: USB disconnect, device number 52 [ 780.168354][ T5869] usb 1-1: USB disconnect, device number 61 [ 780.238606][ T971] usb 2-1: USB disconnect, device number 67 [ 780.277797][T13931] syz.1.2015: attempt to access beyond end of device [ 780.277797][T13931] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 780.519324][ T974] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 781.059211][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 781.065601][ T974] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 781.074084][ T974] usb 4-1: config 4 has no interface number 0 [ 781.081367][ T974] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 781.091714][ T974] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 781.101955][ T974] usb 4-1: config 4 interface 51 has no altsetting 0 [ 781.112485][ T974] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 781.121581][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.131893][ T974] usb 4-1: Product: syz [ 781.136033][ T974] usb 4-1: Manufacturer: syz [ 781.140662][ T974] usb 4-1: SerialNumber: syz [ 781.150960][T13932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 781.158458][T13932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 781.209275][ T971] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 781.361577][T13944] syz.2.2018 uses obsolete (PF_INET,SOCK_PACKET) [ 781.472602][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 781.560194][ T971] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 781.582138][T13932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 781.646998][ T971] usb 2-1: config 179 has no interface number 0 [ 781.665883][T13932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 781.712481][ T971] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 782.040590][ T971] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 782.066066][ T974] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, 0e:ff:6f:ec:80:b7 [ 782.107579][ T971] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 782.119651][ T971] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 782.131317][ T971] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 782.144728][ T971] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 782.171699][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.230088][T13931] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 782.327789][T13952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 782.550341][T13948] block device autoloading is deprecated and will be removed. [ 782.735116][ T974] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 782.754000][ T30] audit: type=1400 audit(1743662581.738:345): avc: denied { create } for pid=13930 comm="syz.1.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 782.759396][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 782.782198][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 782.830739][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.849575][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.886863][ T971] usb 2-1: USB disconnect, device number 68 [ 782.916562][T13214] usb 4-1: USB disconnect, device number 66 [ 782.925015][T13214] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 783.096751][ T974] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 783.109550][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.137489][ T974] usb 5-1: Product: syz [ 783.153083][ T974] usb 5-1: Manufacturer: syz [ 783.184498][ T974] usb 5-1: SerialNumber: syz [ 783.201582][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.252285][ T974] usb 5-1: config 0 descriptor?? [ 783.415929][T13974] libceph: resolve '0.' (ret=-3): failed [ 783.582174][T13981] overlayfs: failed to resolve './file1': -2 [ 783.810015][ T974] usb-storage 5-1:0.0: USB Mass Storage device detected [ 784.036256][ T974] usb 5-1: USB disconnect, device number 56 [ 785.000993][T13997] lo speed is unknown, defaulting to 1000 [ 785.237688][T13998] atomic_op ffff888021f7a198 conn xmit_atomic 0000000000000000 [ 785.401007][ T30] audit: type=1400 audit(1743662584.268:346): avc: denied { create } for pid=13987 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 785.487781][ T30] audit: type=1400 audit(1743662584.268:347): avc: denied { bind } for pid=13987 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 785.506983][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.572708][ T30] audit: type=1400 audit(1743662584.268:348): avc: denied { write } for pid=13987 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 785.648196][T14004] lo speed is unknown, defaulting to 1000 [ 787.041014][T14023] FAULT_INJECTION: forcing a failure. [ 787.041014][T14023] name failslab, interval 1, probability 0, space 0, times 0 [ 787.114225][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.3.2033 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 787.114250][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 787.114259][T14023] Call Trace: [ 787.114264][T14023] [ 787.114271][T14023] dump_stack_lvl+0x16c/0x1f0 [ 787.114297][T14023] should_fail_ex+0x512/0x640 [ 787.114313][T14023] ? __kmalloc_noprof+0xbf/0x510 [ 787.114332][T14023] ? kernfs_fop_write_iter+0x237/0x510 [ 787.114355][T14023] should_failslab+0xc2/0x120 [ 787.114375][T14023] __kmalloc_noprof+0xd2/0x510 [ 787.114398][T14023] kernfs_fop_write_iter+0x237/0x510 [ 787.114425][T14023] vfs_write+0x5ba/0x1180 [ 787.114448][T14023] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 787.114473][T14023] ? __pfx___mutex_lock+0x10/0x10 [ 787.114492][T14023] ? __pfx_vfs_write+0x10/0x10 [ 787.114523][T14023] ksys_write+0x12a/0x240 [ 787.114539][T14023] ? __pfx_ksys_write+0x10/0x10 [ 787.114552][T14023] ? rcu_is_watching+0x12/0xc0 [ 787.114580][T14023] do_syscall_64+0xcd/0x260 [ 787.114601][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.114618][T14023] RIP: 0033:0x7f004218d169 [ 787.114632][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.114648][T14023] RSP: 002b:00007f004304c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.114663][T14023] RAX: ffffffffffffffda RBX: 00007f00423a5fa0 RCX: 00007f004218d169 [ 787.114674][T14023] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 787.114683][T14023] RBP: 00007f004304c090 R08: 0000000000000000 R09: 0000000000000000 [ 787.114693][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.114701][T14023] R13: 0000000000000000 R14: 00007f00423a5fa0 R15: 00007ffe5480dce8 [ 787.114724][T14023] [ 787.306301][T14033] __nla_validate_parse: 4 callbacks suppressed [ 787.306315][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 787.364923][T14030] Invalid ELF header magic: != ELF [ 787.371044][ T30] audit: type=1400 audit(1743662586.398:349): avc: denied { module_load } for pid=14029 comm="syz.2.2035" path="/435/bus" dev="tmpfs" ino=2256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 787.394073][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.757375][ T30] audit: type=1400 audit(1743662586.608:350): avc: denied { mount } for pid=14029 comm="syz.2.2035" name="/" dev="ocfs2_dlmfs" ino=37920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 787.781343][ T30] audit: type=1400 audit(1743662586.758:351): avc: denied { execute } for pid=14003 comm="syz.0.2028" path="/418/cpu.stat" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 787.862714][ T30] audit: type=1400 audit(1743662586.888:352): avc: denied { ioctl } for pid=14032 comm="syz.4.2036" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 788.737334][ T30] audit: type=1326 audit(1743662587.768:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.2.2038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb44e78d169 code=0x0 [ 789.438492][ T30] audit: type=1326 audit(1743662588.468:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 789.546105][ T30] audit: type=1326 audit(1743662588.498:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 789.732776][ T30] audit: type=1326 audit(1743662588.498:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 789.770862][ T30] audit: type=1326 audit(1743662588.498:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 789.924703][ T30] audit: type=1326 audit(1743662588.498:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 789.999733][ T30] audit: type=1326 audit(1743662588.498:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 790.061956][ T30] audit: type=1326 audit(1743662588.498:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.4.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 790.720083][T14085] lo speed is unknown, defaulting to 1000 [ 790.905509][T14086] atomic_op ffff88806b499198 conn xmit_atomic 0000000000000000 [ 791.179345][ T5869] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 791.509706][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 791.578299][ T5869] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 791.607767][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.726546][ T5869] usb 4-1: Product: syz [ 791.732624][ T5869] usb 4-1: Manufacturer: syz [ 791.816691][ T5869] usb 4-1: SerialNumber: syz [ 791.850087][ T5869] usb 4-1: config 0 descriptor?? [ 791.854070][T14094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.909829][ T5869] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 793.055885][T14104] syz.3.2045 (14104): drop_caches: 2 [ 793.159213][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 793.165947][ T5869] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 793.176260][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.212634][ T5869] usb 1-1: config 0 descriptor?? [ 793.234931][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 793.234945][ T30] audit: type=1400 audit(1743662592.268:366): avc: denied { ioctl } for pid=14106 comm="syz.1.2053" path="socket:[38016]" dev="sockfs" ino=38016 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.278010][ T5869] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 793.729360][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 794.223161][ T5869] gspca_nw80x: reg_w err -110 [ 794.237270][ T5869] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 794.399577][ T30] audit: type=1400 audit(1743662593.228:367): avc: denied { ioctl } for pid=14099 comm="syz.0.2051" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 794.814990][ T5869] usb 4-1: USB disconnect, device number 67 [ 794.990912][T14126] lo speed is unknown, defaulting to 1000 [ 795.237669][T14127] atomic_op ffff8880363bc198 conn xmit_atomic 0000000000000000 [ 795.342375][ T30] audit: type=1400 audit(1743662594.378:368): avc: denied { connect } for pid=14129 comm="syz.3.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 795.445233][ T30] audit: type=1400 audit(1743662594.378:369): avc: denied { read } for pid=14125 comm="syz.4.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 795.465916][ T30] audit: type=1400 audit(1743662594.458:370): avc: denied { getopt } for pid=14129 comm="syz.3.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 796.086352][ T9926] usb 1-1: USB disconnect, device number 62 [ 796.111804][ T30] audit: type=1326 audit(1743662595.088:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14125 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 796.408740][ T30] audit: type=1326 audit(1743662595.088:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14125 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a5f8d169 code=0x7ffc0000 [ 796.432669][ T30] audit: type=1400 audit(1743662595.338:373): avc: denied { bind } for pid=14129 comm="syz.3.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 796.453446][ T30] audit: type=1400 audit(1743662595.348:374): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 796.874089][ T30] audit: type=1400 audit(1743662595.898:375): avc: denied { connect } for pid=14150 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 797.084940][T14161] lo speed is unknown, defaulting to 1000 [ 797.324966][T14162] atomic_op ffff888013718998 conn xmit_atomic 0000000000000000 [ 797.953315][T14151] sctp: failed to load transform for md5: -2 [ 798.536894][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 798.536909][ T30] audit: type=1326 audit(1743662597.568:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 798.877569][T14181] FAULT_INJECTION: forcing a failure. [ 798.877569][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.890788][T14181] CPU: 0 UID: 0 PID: 14181 Comm: syz.4.2069 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 798.890810][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 798.890819][T14181] Call Trace: [ 798.890825][T14181] [ 798.890832][T14181] dump_stack_lvl+0x16c/0x1f0 [ 798.890855][T14181] should_fail_ex+0x512/0x640 [ 798.890875][T14181] _copy_to_user+0x32/0xd0 [ 798.890895][T14181] copy_regset_to_user+0x189/0x250 [ 798.890916][T14181] arch_ptrace+0x36f/0x650 [ 798.890943][T14181] __x64_sys_ptrace+0x17c/0x2c0 [ 798.890968][T14181] do_syscall_64+0xcd/0x260 [ 798.890990][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.891007][T14181] RIP: 0033:0x7f99a5f8d169 [ 798.891020][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.891035][T14181] RSP: 002b:00007f99a6e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 798.891050][T14181] RAX: ffffffffffffffda RBX: 00007f99a61a6160 RCX: 00007f99a5f8d169 [ 798.891061][T14181] RDX: 0000000000000000 RSI: 0000000000000552 RDI: 000000000000000e [ 798.891070][T14181] RBP: 00007f99a6e03090 R08: 0000000000000000 R09: 0000000000000000 [ 798.891080][T14181] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 798.891089][T14181] R13: 0000000000000000 R14: 00007f99a61a6160 R15: 00007ffdbf3b80d8 [ 798.891110][T14181] [ 799.674692][ T30] audit: type=1326 audit(1743662597.608:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 799.751517][T14183] syz.2.2068 (14183): drop_caches: 2 [ 799.882886][ T30] audit: type=1326 audit(1743662597.608:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 799.918964][ T30] audit: type=1326 audit(1743662597.608:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 799.983849][ T30] audit: type=1326 audit(1743662597.608:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 800.063557][ T30] audit: type=1326 audit(1743662597.608:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbef0d8d169 code=0x7ffc0000 [ 800.089974][ T30] audit: type=1400 audit(1743662599.078:387): avc: denied { ioctl } for pid=14189 comm="syz.3.2070" path="socket:[37837]" dev="sockfs" ino=37837 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.119463][ T30] audit: type=1400 audit(1743662599.078:388): avc: denied { write } for pid=14189 comm="syz.3.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.211927][ T5863] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 800.379494][ T9926] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 800.569908][ T9926] usb 1-1: Using ep0 maxpacket: 16 [ 800.598264][ T1085] Bluetooth: Error in BCSP hdr checksum [ 800.599354][ T9926] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.620961][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.643450][ T5863] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.655213][ T9926] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.678246][ T9926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 800.688383][ T9926] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 800.692746][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.706151][ T9926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.717161][ T9926] usb 1-1: config 0 descriptor?? [ 800.731962][ T5863] usb 3-1: config 0 descriptor?? [ 800.741433][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 800.822984][T14195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.204812][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 801.219794][ T30] audit: type=1400 audit(1743662600.248:389): avc: denied { nlmsg_read } for pid=14185 comm="syz.2.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 801.233160][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 801.255977][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 801.258398][ T9926] mcp2200 0003:04D8:00DF.0016: item fetching failed at offset 6/7 [ 801.264522][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 801.275239][ T9926] mcp2200 0003:04D8:00DF.0016: can't parse reports [ 801.279090][ T5863] pwc: recv_control_msg error -32 req 04 val 1300 [ 801.287321][ T9926] mcp2200 0003:04D8:00DF.0016: probe with driver mcp2200 failed with error -22 [ 801.301819][ T5863] pwc: recv_control_msg error -32 req 04 val 1400 [ 801.317760][ T5863] pwc: recv_control_msg error -32 req 02 val 2000 [ 801.434837][T14203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2076'. [ 801.489339][ T971] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 801.599438][T14186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.659309][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 801.692311][T14186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.701823][ T971] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 801.711172][ T971] usb 5-1: config 0 has no interface number 0 [ 801.746451][ T971] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 801.758297][ T5863] pwc: recv_control_msg error -32 req 04 val 1500 [ 801.758613][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.777736][ T971] usb 5-1: Product: syz [ 801.782583][ T971] usb 5-1: Manufacturer: syz [ 801.790526][ T971] usb 5-1: SerialNumber: syz [ 801.805204][ T971] usb 5-1: config 0 descriptor?? [ 801.818255][ T971] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 801.832859][ T974] usb 1-1: USB disconnect, device number 63 [ 801.988819][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 801.997256][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 802.006922][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 802.014094][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 802.021679][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 802.028383][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 802.042598][ T5863] pwc: Registered as video103. [ 802.048929][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 802.064229][ T5863] usb 3-1: USB disconnect, device number 53 [ 802.350588][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 802.357469][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 802.373007][T14205] syz.4.2074 (14205): drop_caches: 2 [ 802.546034][ T971] gspca_spca1528: reg_w err -110 [ 802.570718][ T971] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 802.959398][ T30] audit: type=1400 audit(1743662601.908:390): avc: denied { append } for pid=14210 comm="syz.0.2079" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.796368][ T5869] usb 5-1: USB disconnect, device number 57 [ 803.933015][ T30] audit: type=1400 audit(1743662602.968:391): avc: denied { connect } for pid=14217 comm="syz.2.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 804.083587][T14220] lo speed is unknown, defaulting to 1000 [ 804.328384][T14221] atomic_op ffff88807bab1998 conn xmit_atomic 0000000000000000 [ 804.534616][ T30] audit: type=1400 audit(1743662603.558:392): avc: denied { setopt } for pid=14210 comm="syz.0.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 804.808428][ T30] audit: type=1400 audit(1743662603.838:393): avc: denied { getopt } for pid=14214 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 805.189486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfad400: rx timeout, send abort [ 805.199460][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfad400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 808.295885][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.208766][ C0] sched: DL replenish lagged too much [ 810.087371][ T5869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 839.454209][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 869.749890][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.769076][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 949.776043][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5825/1:b..l [ 949.784311][ C1] rcu: (detected by 1, t=10503 jiffies, g=57021, q=355 ncpus=2) [ 949.792022][ C1] task:syz-executor state:R running task stack:24232 pid:5825 tgid:5825 ppid:1 task_flags:0x40054c flags:0x00004006 [ 949.806400][ C1] Call Trace: [ 949.809679][ C1] [ 949.812609][ C1] __schedule+0x116f/0x5de0 [ 949.817107][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 949.822296][ C1] ? __pfx___schedule+0x10/0x10 [ 949.827157][ C1] ? mark_held_locks+0x49/0x80 [ 949.831917][ C1] preempt_schedule_irq+0x51/0x90 [ 949.836932][ C1] irqentry_exit+0x36/0x90 [ 949.841331][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 949.847320][ C1] RIP: 0010:stack_access_ok+0x9c/0x200 [ 949.852793][ C1] Code: 84 c0 74 08 3c 03 0f 8e 0b 01 00 00 8b 13 85 d2 74 23 49 39 ef 77 1e 48 39 e9 76 19 4a 8d 54 25 00 49 39 d7 0f 92 c0 48 39 d1 <0f> 93 c2 20 d0 0f 85 ba 00 00 00 48 8d 7b 28 48 8d 4b 20 48 b8 00 [ 949.872403][ C1] RSP: 0018:ffffc90003f8f4f8 EFLAGS: 00000202 [ 949.878465][ C1] RAX: 0000000000000001 RBX: ffffc90003f8f5a8 RCX: ffffc90003f90000 [ 949.886417][ C1] RDX: ffffc90003f8fbc0 RSI: ffffc90003f8fbb8 RDI: ffffc90003f8f5a8 [ 949.894385][ C1] RBP: ffffc90003f8fbb8 R08: ffffffff911aeb30 R09: 0000000000000000 [ 949.902360][ C1] R10: 0000000000000001 R11: 00000000000079fe R12: 0000000000000008 [ 949.910328][ C1] R13: ffffc90003f8f5b8 R14: ffffc90003f8f5b0 R15: ffffc90003f88000 [ 949.918321][ C1] unwind_next_frame+0xb7d/0x20a0 [ 949.923337][ C1] ? __mmput+0x12a/0x410 [ 949.927586][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 949.933741][ C1] arch_stack_walk+0x94/0x100 [ 949.938417][ C1] ? __mmput+0x12a/0x410 [ 949.942652][ C1] stack_trace_save+0x8e/0xc0 [ 949.947331][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 949.952710][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 949.957637][ C1] kasan_save_stack+0x33/0x60 [ 949.962295][ C1] ? kasan_save_stack+0x33/0x60 [ 949.967144][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 949.972515][ C1] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 949.978572][ C1] ? kmem_cache_free+0x173/0x4d0 [ 949.983488][ C1] ? exit_mmap+0x511/0xb90 [ 949.987905][ C1] ? __mmput+0x12a/0x410 [ 949.992188][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 949.998333][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 950.003519][ C1] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 950.009416][ C1] kmem_cache_free+0x173/0x4d0 [ 950.014178][ C1] ? exit_mmap+0x511/0xb90 [ 950.018590][ C1] exit_mmap+0x511/0xb90 [ 950.022823][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 950.027595][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 950.032548][ C1] __mmput+0x12a/0x410 [ 950.036621][ C1] mmput+0x62/0x70 [ 950.040344][ C1] do_exit+0x9d1/0x2d10 [ 950.044496][ C1] ? __pfx___might_resched+0x10/0x10 [ 950.049785][ C1] ? __pfx_do_exit+0x10/0x10 [ 950.054369][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 950.059393][ C1] ? find_held_lock+0x2b/0x80 [ 950.064074][ C1] do_group_exit+0xd3/0x2a0 [ 950.068574][ C1] get_signal+0x2673/0x26d0 [ 950.073080][ C1] ? kmem_cache_free+0x2d4/0x4d0 [ 950.078006][ C1] ? fd_install+0x225/0x750 [ 950.082493][ C1] ? __pfx_get_signal+0x10/0x10 [ 950.087348][ C1] ? do_sys_openat2+0x157/0x1d0 [ 950.092200][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 950.097742][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 950.103889][ C1] ? rcu_is_watching+0x12/0xc0 [ 950.108659][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 950.114290][ C1] do_syscall_64+0xda/0x260 [ 950.118786][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.124660][ C1] RIP: 0033:0x7fbef0d8ca61 [ 950.129069][ C1] RSP: 002b:00007fff21d10e70 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 950.137468][ C1] RAX: 0000000000000003 RBX: 00000000000005c8 RCX: 00007fbef0d8ca61 [ 950.145422][ C1] RDX: 0000000000090800 RSI: 00007fbef0e0e5c0 RDI: 00000000ffffff9c [ 950.153386][ C1] RBP: 00007fff21d10f1c R08: 0000000000000000 R09: 0000000000000000 [ 950.161354][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00000000000001aa [ 950.169319][ C1] R13: 0000000000000000 R14: 00000000000c5f3f R15: 00007fff21d10f70 [ 950.177294][ C1] [ 950.180309][ C1] rcu: rcu_preempt kthread starved for 9820 jiffies! g57021 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 950.191411][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 950.201370][ C1] rcu: RCU grace-period kthread stack dump: [ 950.207241][ C1] task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 950.220699][ C1] Call Trace: [ 950.223976][ C1] [ 950.226908][ C1] __schedule+0x116f/0x5de0 [ 950.231419][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 950.236359][ C1] ? __pfx___schedule+0x10/0x10 [ 950.241211][ C1] ? find_held_lock+0x2b/0x80 [ 950.245900][ C1] ? schedule+0x2d7/0x3a0 [ 950.250228][ C1] schedule+0xe7/0x3a0 [ 950.254292][ C1] schedule_timeout+0x123/0x290 [ 950.259155][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 950.264542][ C1] ? __pfx_process_timeout+0x10/0x10 [ 950.269845][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 950.275657][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 950.281123][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 950.285889][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 950.291185][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 950.296040][ C1] rcu_gp_kthread+0x270/0x380 [ 950.300716][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 950.305911][ C1] ? rcu_is_watching+0x12/0xc0 [ 950.310675][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 950.315872][ C1] ? __kthread_parkme+0x19e/0x250 [ 950.320912][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 950.326105][ C1] kthread+0x3c2/0x780 [ 950.330172][ C1] ? __pfx_kthread+0x10/0x10 [ 950.334754][ C1] ? __pfx_kthread+0x10/0x10 [ 950.339341][ C1] ? __pfx_kthread+0x10/0x10 [ 950.343926][ C1] ? __pfx_kthread+0x10/0x10 [ 950.348511][ C1] ? rcu_is_watching+0x12/0xc0 [ 950.353273][ C1] ? __pfx_kthread+0x10/0x10 [ 950.357851][ C1] ret_from_fork+0x45/0x80 [ 950.362262][ C1] ? __pfx_kthread+0x10/0x10 [ 950.366865][ C1] ret_from_fork_asm+0x1a/0x30 [ 950.371660][ C1] [ 950.374680][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 950.380994][ C1] Sending NMI from CPU 1 to CPUs 0: [ 950.386192][ C0] NMI backtrace for cpu 0 [ 950.386203][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 950.386221][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 950.386228][ C0] RIP: 0010:__lock_acquire+0x4f5/0x1ba0 [ 950.386245][ C0] Code: 0a 48 83 f9 ff 0f 85 56 05 00 00 c7 44 24 2c 01 00 00 00 48 89 0b 41 8b 86 e8 0a 00 00 85 c0 74 14 48 8d 04 80 0f b6 44 c5 f9 <32> 43 21 a8 60 0f 85 6e 05 00 00 48 89 c8 89 4c 24 10 48 c1 e8 20 [ 950.386258][ C0] RSP: 0018:ffffc90000006ff0 EFLAGS: 00000002 [ 950.386269][ C0] RAX: 0000000000000020 RBX: ffffffff8e098280 RCX: f501fefe41178ce3 [ 950.386279][ C0] RDX: 0000000000000000 RSI: ffffffff8e098280 RDI: ffffffff8e097740 [ 950.386288][ C0] RBP: ffffffff8e098230 R08: 0000000000000000 R09: 0000000000000000 [ 950.386296][ C0] R10: 0000000000000000 R11: ffffffff8e3c15c0 R12: 0000000000000003 [ 950.386305][ C0] R13: 0000000000000001 R14: ffffffff8e097740 R15: 0000000000000000 [ 950.386313][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 950.386327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.386336][ C0] CR2: 00007f0042377d38 CR3: 0000000034d1a000 CR4: 00000000003526f0 [ 950.386345][ C0] DR0: 0000000000000001 DR1: 0000000000000000 DR2: 0000000000000000 [ 950.386353][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 950.386361][ C0] Call Trace: [ 950.386366][ C0] [ 950.386373][ C0] ? lock_acquire+0x179/0x350 [ 950.386387][ C0] lock_acquire+0x179/0x350 [ 950.386398][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 950.386416][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 950.386432][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.386450][ C0] unwind_next_frame+0xd1/0x20a0 [ 950.386466][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 950.386481][ C0] ? common_startup_64+0x13e/0x148 [ 950.386498][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.386515][ C0] arch_stack_walk+0x94/0x100 [ 950.386534][ C0] ? common_startup_64+0x13e/0x148 [ 950.386551][ C0] stack_trace_save+0x8e/0xc0 [ 950.386567][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 950.386583][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 950.386596][ C0] kasan_save_stack+0x33/0x60 [ 950.386609][ C0] ? kasan_save_stack+0x33/0x60 [ 950.386621][ C0] ? kasan_save_track+0x14/0x30 [ 950.386632][ C0] ? kasan_save_free_info+0x3b/0x60 [ 950.386649][ C0] ? __kasan_slab_free+0x51/0x70 [ 950.386661][ C0] ? kmem_cache_free+0x2d4/0x4d0 [ 950.386674][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 950.386691][ C0] ? consume_skb+0xcc/0x100 [ 950.386706][ C0] ? nft_synproxy_do_eval+0xa6b/0xd80 [ 950.386722][ C0] ? nft_do_chain+0x2e6/0x1920 [ 950.386738][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 950.386751][ C0] ? nf_hook_slow+0xbb/0x200 [ 950.386763][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 950.386775][ C0] ? ip_local_deliver+0x169/0x1f0 [ 950.386787][ C0] ? ip_rcv+0x2c3/0x5d0 [ 950.386799][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 950.386812][ C0] ? __netif_receive_skb+0x1d/0x160 [ 950.386823][ C0] ? process_backlog+0x442/0x15e0 [ 950.386835][ C0] ? __napi_poll.constprop.0+0xb7/0x550 [ 950.386847][ C0] ? net_rx_action+0xa97/0x1010 [ 950.386859][ C0] ? handle_softirqs+0x216/0x8e0 [ 950.386874][ C0] ? __irq_exit_rcu+0x109/0x170 [ 950.386889][ C0] ? irq_exit_rcu+0x9/0x30 [ 950.386905][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 950.386919][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 950.386933][ C0] ? acpi_safe_halt+0x1a/0x20 [ 950.386948][ C0] ? acpi_idle_enter+0xc5/0x160 [ 950.386964][ C0] ? cpuidle_enter_state+0xb2/0x510 [ 950.386978][ C0] ? cpuidle_enter+0x4e/0xa0 [ 950.386995][ C0] ? do_idle+0x378/0x510 [ 950.387010][ C0] ? cpu_startup_entry+0x4f/0x60 [ 950.387025][ C0] ? rest_init+0x16b/0x2b0 [ 950.387040][ C0] ? start_kernel+0x3e9/0x4d0 [ 950.387054][ C0] ? x86_64_start_reservations+0x18/0x30 [ 950.387067][ C0] ? x86_64_start_kernel+0xb0/0xc0 [ 950.387080][ C0] ? common_startup_64+0x13e/0x148 [ 950.387102][ C0] kasan_save_track+0x14/0x30 [ 950.387114][ C0] kasan_save_free_info+0x3b/0x60 [ 950.387130][ C0] __kasan_slab_free+0x51/0x70 [ 950.387148][ C0] kmem_cache_free+0x2d4/0x4d0 [ 950.387160][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 950.387179][ C0] kfree_skbmem+0x1a4/0x1f0 [ 950.387196][ C0] consume_skb+0xcc/0x100 [ 950.387210][ C0] nft_synproxy_do_eval+0xa6b/0xd80 [ 950.387227][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 950.387244][ C0] ? ip_vs_conn_out_get+0x67f/0xb20 [ 950.387262][ C0] ? ip_vs_service_find+0x19d/0x1020 [ 950.387281][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 950.387298][ C0] nft_do_chain+0x2e6/0x1920 [ 950.387315][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 950.387330][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 950.387346][ C0] ? ip_vs_in_hook+0xe10/0x27a0 [ 950.387357][ C0] ? ip_vs_in_hook+0x329/0x27a0 [ 950.387375][ C0] nft_do_chain_inet+0x18a/0x340 [ 950.387389][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 950.387406][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 950.387425][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 950.387440][ C0] nf_hook_slow+0xbb/0x200 [ 950.387452][ C0] nf_hook.constprop.0+0x422/0x750 [ 950.387464][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 950.387477][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 950.387489][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 950.387502][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 950.387518][ C0] ip_local_deliver+0x169/0x1f0 [ 950.387530][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 950.387543][ C0] ip_rcv+0x2c3/0x5d0 [ 950.387554][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 950.387565][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 950.387579][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 950.387592][ C0] ? lock_acquire+0x179/0x350 [ 950.387606][ C0] ? process_backlog+0x3f0/0x15e0 [ 950.387618][ C0] __netif_receive_skb+0x1d/0x160 [ 950.387630][ C0] process_backlog+0x442/0x15e0 [ 950.387645][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 950.387658][ C0] ? rcu_is_watching+0x12/0xc0 [ 950.387675][ C0] net_rx_action+0xa97/0x1010 [ 950.387690][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 950.387704][ C0] ? rcu_is_watching+0x12/0xc0 [ 950.387719][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 950.387732][ C0] ? tmigr_handle_remote+0x132/0x380 [ 950.387751][ C0] ? run_timer_base+0x121/0x190 [ 950.387768][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 950.387787][ C0] handle_softirqs+0x216/0x8e0 [ 950.387805][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 950.387823][ C0] __irq_exit_rcu+0x109/0x170 [ 950.387838][ C0] irq_exit_rcu+0x9/0x30 [ 950.387853][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 950.387867][ C0] [ 950.387872][ C0] [ 950.387877][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 950.387890][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 950.387907][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 50 bf 34 08 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 28 2f 8e 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 950.387919][ C0] RSP: 0018:ffffffff8e007d68 EFLAGS: 00000246 [ 950.387929][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b7173e9 [ 950.387938][ C0] RDX: 0000000000000001 RSI: ffff888141692800 RDI: ffff888141692864 [ 950.387946][ C0] RBP: ffff888141692864 R08: 0000000000000001 R09: ffffed10170865bd [ 950.387954][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: ffff888020721800 [ 950.387963][ C0] R13: ffffffff8f0496a0 R14: 0000000000000000 R15: 0000000000000000 [ 950.387973][ C0] ? ct_kernel_exit+0x139/0x190 [ 950.387989][ C0] acpi_idle_enter+0xc5/0x160 [ 950.388006][ C0] cpuidle_enter_state+0xb2/0x510 [ 950.388021][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 950.388037][ C0] cpuidle_enter+0x4e/0xa0 [ 950.388054][ C0] do_idle+0x378/0x510 [ 950.388069][ C0] ? __pfx_do_idle+0x10/0x10 [ 950.388084][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 950.388105][ C0] cpu_startup_entry+0x4f/0x60 [ 950.388121][ C0] rest_init+0x16b/0x2b0 [ 950.388136][ C0] ? acpi_subsystem_init+0x133/0x180 [ 950.388158][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 950.388173][ C0] start_kernel+0x3e9/0x4d0 [ 950.388186][ C0] x86_64_start_reservations+0x18/0x30 [ 950.388199][ C0] x86_64_start_kernel+0xb0/0xc0 [ 950.388213][ C0] common_startup_64+0x13e/0x148 [ 950.388231][ C0] [ 953.561948][ T1296] ieee802154 phy1 wpan1: encryption failed: -22