last executing test programs: 1m43.734238252s ago: executing program 0 (id=1963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000), 0xfffbffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f0000000cc0), 0x7, 0x80502) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000100)=""/171) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001600)=ANY=[], 0x0) 1m42.614064101s ago: executing program 0 (id=1966): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x7) getpid() mmap(&(0x7f0000358000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x12ca0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002020702500000000002020207b1af8ff000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) 1m41.531376905s ago: executing program 0 (id=1971): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecaff0f0000ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286c030000004ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000800)="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", 0x29a}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) (fail_nth: 1) 1m39.946590725s ago: executing program 0 (id=1976): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000), 0xfffbffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f0000000cc0), 0x7, 0x80502) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000100)=""/171) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001600)=ANY=[], 0x0) 1m38.010811071s ago: executing program 0 (id=1986): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808006404b9d7a41449c50000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000010006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)='H', 0x1}], 0x1}, 0x881) sendto$packet(r0, &(0x7f0000001300)="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", 0x1000, 0x4040840, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0x9, 0x6, @local}, 0x14) recvmsg(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x4f, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x98}}, 0x0) 1m32.797777451s ago: executing program 0 (id=1998): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRES16=r0], 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1a, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) creat(&(0x7f0000000400)='./file0\x00', 0x28) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x2239, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m3.666376018s ago: executing program 2 (id=2048): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x100000000, 0x0) syz_usb_connect(0x4, 0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/304], 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x2, "12d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = io_uring_setup(0x3c8e, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getrlimit(0x3, &(0x7f00000000c0)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045104, 0xfffffffffffffffe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "ea70ebf25edeb9a1ef0bc091d9e8d6254f3b4e06f333de58702eccd64a8511e4f47bd0f07d4b94b91516bb47e0ae3ad7b4586927f4eded307507b048"}, 0x47) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000280)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) 1m1.730464928s ago: executing program 2 (id=2054): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0xfffffffffffffffe) 1m0.981249801s ago: executing program 2 (id=2056): r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = socket$inet_dccp(0x2, 0x6, 0x0) syncfs(r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe40, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 58.102102069s ago: executing program 2 (id=2057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="00000000ab33ad601fbd5c23321bdd1f5234f27ea51c27a8", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001300)=[{{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040040}}, {{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f00000010c0)='+', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[], 0x18, 0x20008090}}], 0x2, 0x0) 56.944885804s ago: executing program 2 (id=2062): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x59}}], 0x500, 0x20010100, 0x0) 49.564074141s ago: executing program 2 (id=2063): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xa, &(0x7f0000000180)={0xc9, 0x2}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r5, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x2902, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40046f41, 0x20000502) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000600000009b3200ee954"], 0x0, 0x0}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x4) 12.268359925s ago: executing program 1 (id=2115): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x59}}], 0x500, 0x20010100, 0x0) 10.946923486s ago: executing program 1 (id=2117): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001540)="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", 0x1a1}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_usb_connect(0x0, 0x43, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240000000d240f01000000000000000000080013"], 0x0) madvise(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x11) syz_usb_connect(0x0, 0x5e, &(0x7f0000000b80)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208", @ANYBLOB="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", @ANYRES64=r0], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 10.753473753s ago: executing program 3 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa41870ff2c3a4a10, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) io_submit(0x0, 0x0, &(0x7f0000000700)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x10}, @TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "e501008e1641c83fa580856d4e397c0a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8.591255397s ago: executing program 4 (id=2120): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = getpid() r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f00000008c0)='-', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x10c}}, 0x4010) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000c80)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00060000000e0001006e657464657673696d0000000f0002006e6574646576734c1690252f07234faf625d0b696d30000008000b0025fbffff0800010070636900110002003030300000000008000b0007000000"], 0x88}, 0x1, 0x0, 0x0, 0xc080}, 0x4080) setsockopt(r2, 0x9, 0x6, &(0x7f0000000040)="e85a9f88a598eb2258ca533ddc6ad48abe90ca56bef309a84fb1fe9bcfe70af3ccda5566615bb0d0401d206f91709e843beb163b99df031bffcd415dc537e922ea7277d1b2d6d868b3e9cbc872992d5c4c08bf4d371d8f564db8a625b88b783122f398a8b7c70a78900496ff4522247b9899bcb040d729da34b1da83056983f25e506262277639410eb8ba61277acf37a5238aba6d79f9ddd3cdedd94acacf221645530815847436d1ef3a5b35be8146ec0adf8eea0bee1ed2c8a42ea382253dcce206fb13e92322b09f3271f21e37692bc069aeee24d0", 0xd7) r6 = memfd_create(&(0x7f0000000600)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\xc3!\tom\x96\x81\x1a{M\xd4c\x1f\x1d\x1c\x86\xb0\xce#\x19<\xf8\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) pipe(&(0x7f0000002180)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002200)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f00000021c0), {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x80000000, 0x5d, 0xb27e, 0x1, 0x0, "b6c32e782f977217731ce920990355d783faf0b1bd25c259a8ecb75e20f2d8e5fd7476c175b3867394f2179de2c545f5c9da4944517d6b2c23c3360dc1254c1c"}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002580)=ANY=[@ANYBLOB="18477c76db807fa12ff35036585329d5f8dc25e19f5f8db8a5fbd54127aeaf748a0f4d6c38971dee2003e4f9082ca899ff5dd71c4b98e8c6c56064076ce6334c7882ca844c85ff4a5dff97044c90e3ae3d3043c8320a0cf7f5f1e8a16f75371a20e1f6383ae9a702cc607a1f758fb9c4bd1c5076c57ab30cf3fab991121aba4939aae7fcc0551babc2cc52b29e5d19a7a626755e8bc134c7e4789beec005fd3360de1e9e46b7af40141574b6b7a38fef8e7a7b88640625877e7382631d4a1ebb716ea66356240f7f70fc93f68baaaaa9585c8b1bbe83af62af52c217622eccf610e4b5bb0f9d6b62933b9cfc4e1b662e358ea8fd533bd1c6852b88d426a57eac09ad662be74a6bb52abc85f77db89df07c092047dd8ce4192e5bb6ffec9aa5195d3748ad5105508cf114b273a6dda481eefda936c2a233790d4ec2d20d65ee8129735f25e1dbb74da315b5c8b843877330eb8fe05b43b58a1930d58e6af6945c611dbe1a7a891b65931a67a6de7d921de95e1c009bd1da799e12b185dd47746869750095c70cb0ed234f196d7f47872b6769618c", @ANYRES64=r3, @ANYBLOB="070000000000001400000000000000000800000000000000402d2f5c260d802d000000000000000000000000000000000a000000000000002f3e0d762f6375736500000000000000"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, r5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r9, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00"/43], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket(0x25, 0x1, 0x4) recvfrom$packet(r11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x3f], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)) close_range(r1, 0xffffffffffffffff, 0x0) 8.092860058s ago: executing program 3 (id=2123): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000) sched_setscheduler(r1, 0x0, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000100), 0xc7) mmap(&(0x7f0000358000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x12ca0000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002020702500000000002020207b1af8ff000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) 7.108393143s ago: executing program 3 (id=2124): mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x03a\xe2S%\xcc\x14G\v\'\xc5\xbe\xc2\xfe\x00?\xfd\fu\xbdw\x9d\xa2\xbe\x872\x16 6\xf0\xc0\xc8+\xfal\x91\xae\xda\xc5\xbc\xaa\x8aT\xc7\x1c\x8c\x90\x81\bc\x13\xed\x91\f\xd0[\xb8\xe8\x17\rrK\xf8;\xc9\xa2Q\x0fK>\x92?\x9fK_\x82(\x04h\xfbwf\xc3\x86}\x0f\x00\x8a\xde\xab#NDsG\xee\x02\xc4\xa9\xb5\xf6\xf5\xae\xcb\xd0\xe2z\x9d\xd22Mq\xfd\x0fh\'\x1eF\xc6_\xf0w`\xf48\x9eX\x16\xb7\xcc\x89\xd9'}}]}) syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x188, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x56, 0xc, "1d1b09685b0c6e22686c1f5a3df488bf779cfb1d4c9a3d2de38e82b0e977f8df8daa891279b5e441e0b1da4b721bf99615178ad56e5639e7044048008dd0cfd4806fc80340b45ba6c5f5dcb5283d0e87c201"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6a612a5c}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e89626c}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x8b, 0xc, "56e509e8526932096e8b0201892347ddbf49b188d22eefff962f62b9201fc9c18f0d0a0c60c9351f66bd2b1721d63a4510ac56ed9b33b8a68b69bfb28d904e0ddb1925854f95eb2465f745f3384168576456ad312eea218f99852c5107a5af96daa5f97cc36870fca3506fdc36a473786ee6737641603dfdbb24a374fc509192f412bdf8d956c7"}]}], {0x14}}, 0x1fc}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000280)=0x98e1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="f5"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 6.786569206s ago: executing program 1 (id=2125): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x59}}], 0x500, 0x20010100, 0x0) 5.672891147s ago: executing program 1 (id=2126): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000d80)=ANY=[@ANYRES16=r1], 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname(r2, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000c0000000000000", @ANYRES32, @ANYBLOB="01f0fff7000000000000000000000000000000007eae03a2c95033c7a3a3eae50a7d57cb345cd9a3b0d825c7057aa7efbdbc64982df7791b28c5db995fd05cbf9eb0cb1ae8a3bac13460aa346b73df95690b48c4cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) clock_settime(0x0, &(0x7f00000009c0)={r4, r5+60000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000002000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x4}, {0x1, 0x2, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0xc0182101, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffec0}], 0x1, 0x0) madvise(&(0x7f000041c000/0x1000)=nil, 0x1000, 0x15) r10 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x18}) 4.537979344s ago: executing program 1 (id=2127): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xa, &(0x7f0000000180)={0xc9, 0x2}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r5, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) close_range(0xffffffffffffffff, r7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x2902, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40046f41, 0x20000502) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000600000009b3200ee954"], 0x0, 0x0}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x4) 4.273246753s ago: executing program 4 (id=2128): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES64], 0x40}, 0x20000000) 2.566492622s ago: executing program 3 (id=2129): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) 2.418148772s ago: executing program 4 (id=2130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b00000000000000000f"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x2d, 0xfb, &(0x7f0000000300)="e4965247dffcc539f2f8abf5e3cf136557d6182a02393163287d3409631e4850399840af2c44d824dbcdda5435", &(0x7f00000006c0)=""/251, 0x8, 0x0, 0xb, 0x1000, &(0x7f0000000380)="3078b17af3f13cc7c5a833", &(0x7f0000000b00)="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", 0x2, 0x0, 0x7}, 0x50) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) 1.149936718s ago: executing program 3 (id=2131): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000380)=0xa, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000ea8757c8ce949500"/41], 0x18}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x2, 0x8, 0x3, 0x2a8, r5, 0x2, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003480)={{r8}, &(0x7f0000003400), &(0x7f0000003440)='%pS \x00'}, 0x20) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1411, 0x1, 0x0, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2040}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000000000000000000000070000000000000000000000000000000000000000000af1ad74b0026148913b3b890000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000500040000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004b000000000000004c3070ad5092e52bb5267bb183458015e77c22f54c6aa588f12b54196493df69796f7fcc94e48669dd2ec096288e50fa3f874708c489e6aaf7d1ae8621833f76e86e126f2c20aca62cb1810000000000"], 0x0, 0x0}) r12 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, r10, {0xd7, 0x0, 0x0, {0x2, 0x100000000, 0x6, 0x6, 0x6, 0x8000, 0x2, 0x9, 0x2, 0x4000, 0x5, r11, r12, 0x6, 0x2}}}, 0x78) 1.079238505s ago: executing program 4 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000) sched_setscheduler(r1, 0x0, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000100), 0xc7) mmap(&(0x7f0000358000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x12ca0000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002020702500000000002020207b1af8ff000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) 1.916038ms ago: executing program 4 (id=2133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044", 0x39, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffe8e, &(0x7f0000000480)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102381, 0x18fed}], 0x1, 0x70a2759d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x800000, @mcast1, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid', @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x400a02, 0xee) memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c00050000000000000000002000010000177830000c0005000203aaaaaaaaaaaa0c0005000202aaaaaaaaaa"], 0x4c}}, 0x0) 0s ago: executing program 1 (id=2134): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=@unlock_all, 0xb) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='erofs\x00', 0x4806, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7ffffcb8}]}) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) mkdir(0x0, 0x180) sched_setaffinity(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): added [ 1116.481448][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.504436][T12648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.526299][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.584617][T12648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.622481][T12648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.635915][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.677004][T12648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.716495][T12787] kvm: kvm [12786]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x260000000000 [ 1116.719195][T12780] dccp_close: ABORT with 32 bytes unread [ 1116.731124][T12787] kvm: kvm [12786]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x264500000080 [ 1116.762315][ T29] audit: type=1400 audit(1726607184.758:1037): avc: denied { setopt } for pid=12793 comm="syz.2.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1116.817061][ T944] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1116.862840][T12648] hsr_slave_0: entered promiscuous mode [ 1116.913235][T12648] hsr_slave_1: entered promiscuous mode [ 1117.024750][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.060252][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.094112][ T944] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1117.219209][ T29] audit: type=1400 audit(1726607185.188:1038): avc: denied { write } for pid=12793 comm="syz.2.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1117.766980][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1117.791047][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.802060][ T944] usb 4-1: config 0 descriptor?? [ 1117.820646][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1117.832026][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1118.054522][T12796] infiniband syz1: set active [ 1118.059788][T12796] infiniband syz1: added vcan0 [ 1118.189562][T12796] RDS/IB: syz1: added [ 1118.195334][T12796] smc: adding ib device syz1 with port count 1 [ 1118.202074][T12796] smc: ib device syz1 port 1 has pnetid [ 1118.247576][ T5278] vcan0 speed is unknown, defaulting to 1000 [ 1118.294512][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1118.573495][ T5224] vcan0 speed is unknown, defaulting to 1000 [ 1118.582539][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1118.721411][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1118.861123][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1118.997889][T12796] vcan0 speed is unknown, defaulting to 1000 [ 1119.737301][ T944] hid (null): bogus close delimiter [ 1121.015579][T12648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1121.090644][T12648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1121.139256][T12648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1121.182990][T12648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1121.226274][ T944] usb 4-1: string descriptor 0 read error: -71 [ 1121.254833][ T944] uclogic 0003:256C:006D.0035: failed retrieving string descriptor #200: -71 [ 1121.308762][ T944] uclogic 0003:256C:006D.0035: failed retrieving pen parameters: -71 [ 1121.348455][ T944] uclogic 0003:256C:006D.0035: failed probing pen v2 parameters: -71 [ 1121.392138][ T944] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 1121.410949][ T944] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71 [ 1121.477510][ T944] usb 4-1: USB disconnect, device number 46 [ 1121.649269][T12648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.719008][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.761400][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.768600][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.842151][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.849326][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.972675][T12820] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1780'. [ 1122.792300][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1122.824975][T12832] FAULT_INJECTION: forcing a failure. [ 1122.824975][T12832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.005630][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.2.1783 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1123.016093][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1123.026151][T12832] Call Trace: [ 1123.029427][T12832] [ 1123.032356][T12832] dump_stack_lvl+0x16c/0x1f0 [ 1123.037051][T12832] should_fail_ex+0x497/0x5b0 [ 1123.041764][T12832] _copy_to_user+0x30/0xc0 [ 1123.046193][T12832] video_usercopy+0xf37/0x1600 [ 1123.050967][T12832] ? __pfx___video_do_ioctl+0x10/0x10 [ 1123.056348][T12832] ? __pfx_video_usercopy+0x10/0x10 [ 1123.061569][T12832] v4l2_ioctl+0x1ba/0x250 [ 1123.065901][T12832] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1123.070754][T12832] __x64_sys_ioctl+0x18d/0x210 [ 1123.075522][T12832] do_syscall_64+0xcd/0x250 [ 1123.080031][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.085935][T12832] RIP: 0033:0x7f073797def9 [ 1123.090355][T12832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.109965][T12832] RSP: 002b:00007f0738834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1123.118467][T12832] RAX: ffffffffffffffda RBX: 00007f0737b35f80 RCX: 00007f073797def9 [ 1123.126434][T12832] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 1123.134405][T12832] RBP: 00007f0738834090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.142374][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.150345][T12832] R13: 0000000000000000 R14: 00007f0737b35f80 R15: 00007ffde98d7b78 [ 1123.158338][T12832] [ 1123.260595][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.285305][T12648] veth0_vlan: entered promiscuous mode [ 1126.719439][T12853] erofs: Unknown parameter '/dev/vga_arbiter' [ 1126.952376][T12648] veth1_vlan: entered promiscuous mode [ 1127.099839][T12648] veth0_macvtap: entered promiscuous mode [ 1127.115887][T12648] veth1_macvtap: entered promiscuous mode [ 1127.212440][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.248630][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.265103][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.303056][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.336368][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.394950][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.624421][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.639516][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.652674][T12648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.681782][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.700764][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.741484][T12865] fuse: Bad value for 'fd' [ 1127.763869][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.774613][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.785057][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.448172][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.491915][T12648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.519580][T12648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.564436][T12648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.792913][T12648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.831223][T12648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.847602][T12648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.860863][ T5224] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1128.906506][T12648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.099214][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.122516][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.183039][ T5224] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.830528][ T5224] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.900712][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.931156][ T5224] usb 4-1: config 0 descriptor?? [ 1129.999580][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.040567][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.249011][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.277134][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.432564][ T5224] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x4 [ 1130.452224][ T5224] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1130.502060][ T5224] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1130.535839][ T5224] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1130.584399][ T5224] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 1130.626306][ T5224] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1130.740238][ T5224] usb 4-1: USB disconnect, device number 47 [ 1133.769260][T12901] erofs: Unknown parameter '/dev/vga_arbiter' [ 1133.891323][T12906] erofs: Unknown parameter '/dev/vga_arbiter' [ 1136.669326][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1136.830978][ T29] audit: type=1400 audit(1726607204.698:1039): avc: denied { getopt } for pid=12915 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1137.017770][ T29] audit: type=1400 audit(1726607205.018:1040): avc: denied { read } for pid=12928 comm="syz.1.1805" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1137.070507][ T29] audit: type=1400 audit(1726607205.018:1041): avc: denied { open } for pid=12928 comm="syz.1.1805" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1138.135960][T12929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1138.164812][T12929] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1138.202004][ T29] audit: type=1400 audit(1726607206.208:1042): avc: denied { create } for pid=12950 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1138.230797][T12929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1138.248514][T12929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1138.256445][T12953] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1138.257054][ T29] audit: type=1400 audit(1726607206.208:1043): avc: denied { connect } for pid=12950 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1138.297946][T12929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1138.304651][T12953] audit: out of memory in audit_log_start [ 1138.323483][T12929] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1138.346477][T12929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1138.354628][T12929] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1138.383655][T12929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1138.396119][T12929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1138.425710][T12929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1138.737129][ T5278] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1139.310264][T12962] erofs: Unknown parameter '/dev/vga_arbiter' [ 1139.346786][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 1139.401519][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.415635][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.426290][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.440310][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.450475][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.461769][ T5278] usb 5-1: config 0 descriptor?? [ 1140.327285][ T9714] Bluetooth: hci4: command 0x0406 tx timeout [ 1140.335887][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 1140.410434][ T9714] Bluetooth: hci1: command 0x0c1a tx timeout [ 1140.416565][ T9714] Bluetooth: hci0: command 0x0406 tx timeout [ 1140.422825][ T5226] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 1140.763811][ T5278] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x4 [ 1140.781840][ T5278] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1140.807084][ T5278] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1140.828980][ T5278] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1140.841140][ T5278] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 1140.856766][ T5278] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1141.138054][ T941] usb 5-1: USB disconnect, device number 53 [ 1141.433198][ T9714] Bluetooth: hci5: command 0x0406 tx timeout [ 1143.006469][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 1143.012705][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.021277][ T5229] Bluetooth: hci1: command 0x0c1a tx timeout [ 1143.036136][ T5226] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 1143.340090][ T9714] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.491092][T12984] FAULT_INJECTION: forcing a failure. [ 1143.491092][T12984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.506033][T12984] CPU: 0 UID: 0 PID: 12984 Comm: syz.4.1822 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1143.516487][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1143.526571][T12984] Call Trace: [ 1143.529870][T12984] [ 1143.532814][T12984] dump_stack_lvl+0x16c/0x1f0 [ 1143.537524][T12984] should_fail_ex+0x497/0x5b0 [ 1143.542285][T12984] ? fs_reclaim_acquire+0xae/0x160 [ 1143.547434][T12984] should_fail_alloc_page+0xe7/0x130 [ 1143.552748][T12984] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1143.558943][T12984] ? mark_held_locks+0x9f/0xe0 [ 1143.563744][T12984] ? fl_create+0x1b1/0xd50 [ 1143.568181][T12984] __alloc_pages_noprof+0x194/0x2460 [ 1143.573505][T12984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1143.579342][T12984] ? stack_depot_save_flags+0x31b/0x8f0 [ 1143.584952][T12984] ? kasan_save_stack+0x42/0x60 [ 1143.589837][T12984] ? kasan_save_stack+0x33/0x60 [ 1143.594723][T12984] ? kasan_save_track+0x14/0x30 [ 1143.599609][T12984] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1143.605355][T12984] ? do_ipv6_setsockopt+0x104e/0x4790 [ 1143.610766][T12984] ? tcp_setsockopt+0xa4/0x100 [ 1143.615561][T12984] ? __sys_setsockopt+0x1a4/0x270 [ 1143.620616][T12984] ? __x64_sys_setsockopt+0xbd/0x160 [ 1143.625936][T12984] ? do_syscall_64+0xcd/0x250 [ 1143.630651][T12984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.636784][T12984] ? fl_create+0x1b1/0xd50 [ 1143.641234][T12984] ___kmalloc_large_node+0x7f/0x1a0 [ 1143.646473][T12984] __kmalloc_large_node_noprof+0x1c/0x70 [ 1143.652146][T12984] __kmalloc_noprof.cold+0xc/0x61 [ 1143.657203][T12984] ? kasan_save_track+0x14/0x30 [ 1143.662099][T12984] fl_create+0x1b1/0xd50 [ 1143.666381][T12984] ? __pfx_fl_create+0x10/0x10 [ 1143.671174][T12984] ? hlock_class+0x4e/0x130 [ 1143.675714][T12984] ? __pfx_register_lock_class+0x10/0x10 [ 1143.681409][T12984] ? __pfx_lock_release+0x10/0x10 [ 1143.686482][T12984] ? __might_fault+0xe3/0x190 [ 1143.691204][T12984] ipv6_flowlabel_opt+0xa84/0x2ea0 [ 1143.696360][T12984] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1143.701933][T12984] ? sockopt_lock_sock+0x54/0x70 [ 1143.706904][T12984] ? mark_held_locks+0x9f/0xe0 [ 1143.711697][T12984] ? sockopt_lock_sock+0x54/0x70 [ 1143.716671][T12984] ? __local_bh_enable_ip+0xa4/0x120 [ 1143.721990][T12984] ? do_ipv6_setsockopt+0x104e/0x4790 [ 1143.727393][T12984] do_ipv6_setsockopt+0x104e/0x4790 [ 1143.732637][T12984] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1143.738219][T12984] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1143.743622][T12984] ? avc_has_perm+0x11b/0x1c0 [ 1143.748322][T12984] ? __pfx_avc_has_perm+0x10/0x10 [ 1143.753383][T12984] ? sock_has_perm+0x25d/0x2f0 [ 1143.758178][T12984] ? __pfx_sock_has_perm+0x10/0x10 [ 1143.763318][T12984] ? __pfx___lock_acquire+0x10/0x10 [ 1143.768549][T12984] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 1143.775003][T12984] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1143.781502][T12990] raw_sendmsg: syz.2.1819 forgot to set AF_INET. Fix it! [ 1143.781832][T12984] ? ipv6_setsockopt+0xcb/0x170 [ 1143.793700][T12984] ipv6_setsockopt+0xcb/0x170 [ 1143.798416][T12984] tcp_setsockopt+0xa4/0x100 [ 1143.803046][T12984] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1143.808981][T12984] do_sock_setsockopt+0x222/0x480 [ 1143.814033][T12984] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1143.819616][T12984] ? __fget_files+0x244/0x3f0 [ 1143.824331][T12984] ? __fget_light+0x173/0x210 [ 1143.829041][T12984] __sys_setsockopt+0x1a4/0x270 [ 1143.833933][T12984] ? __pfx___sys_setsockopt+0x10/0x10 [ 1143.839333][T12984] ? fput+0x30/0x390 [ 1143.843260][T12984] ? ksys_write+0x1ab/0x260 [ 1143.847787][T12984] ? __pfx_ksys_write+0x10/0x10 [ 1143.852667][T12984] __x64_sys_setsockopt+0xbd/0x160 [ 1143.857808][T12984] ? do_syscall_64+0x91/0x250 [ 1143.862507][T12984] ? lockdep_hardirqs_on+0x7c/0x110 [ 1143.867739][T12984] do_syscall_64+0xcd/0x250 [ 1143.872271][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.878197][T12984] RIP: 0033:0x7f2c3fd7def9 [ 1143.882627][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.902260][T12984] RSP: 002b:00007f2c40ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1143.910704][T12984] RAX: ffffffffffffffda RBX: 00007f2c3ff35f80 RCX: 00007f2c3fd7def9 [ 1143.918705][T12984] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1143.926704][T12984] RBP: 00007f2c40ab2090 R08: 000000000000fe60 R09: 0000000000000000 [ 1143.934703][T12984] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1143.942693][T12984] R13: 0000000000000000 R14: 00007f2c3ff35f80 R15: 00007ffd0797f9b8 [ 1143.950706][T12984] [ 1143.953848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.107126][ T941] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1144.273323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.347010][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 1144.437231][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.464651][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.594259][ T941] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1144.939956][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.002820][ T941] usb 4-1: config 0 descriptor?? [ 1145.037055][ T9714] Bluetooth: hci1: command 0x0c1a tx timeout [ 1145.037176][ T5226] Bluetooth: hci0: command 0x0406 tx timeout [ 1145.566946][ T941] savu 0003:1E7D:2D5A.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1145.768464][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.753045][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.128838][ T5226] Bluetooth: hci0: command 0x0406 tx timeout [ 1147.396518][T12991] trusted_key: encrypted_key: hex blob is missing [ 1148.148060][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1831'. [ 1149.123684][T13014] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1828'. [ 1149.133472][ T9288] usb 4-1: USB disconnect, device number 48 [ 1149.217714][ T5278] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1149.689583][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.827053][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.953586][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1149.988155][T13041] FAULT_INJECTION: forcing a failure. [ 1149.988155][T13041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.015258][ T5278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1150.042116][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.055590][T13041] CPU: 0 UID: 0 PID: 13041 Comm: syz.1.1835 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1150.066063][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1150.076146][T13041] Call Trace: [ 1150.079446][T13041] [ 1150.082391][T13041] dump_stack_lvl+0x16c/0x1f0 [ 1150.087088][T13041] should_fail_ex+0x497/0x5b0 [ 1150.091771][T13041] ? fs_reclaim_acquire+0xae/0x160 [ 1150.096876][T13041] should_fail_alloc_page+0xe7/0x130 [ 1150.102169][T13041] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1150.108340][T13041] __alloc_pages_noprof+0x194/0x2460 [ 1150.113657][T13041] ? hlock_class+0x4e/0x130 [ 1150.118169][T13041] ? mark_lock+0xb5/0xc60 [ 1150.122511][T13041] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1150.128239][T13041] ? hlock_class+0x4e/0x130 [ 1150.132747][T13041] ? mark_lock+0xb5/0xc60 [ 1150.137088][T13041] ? hlock_class+0x4e/0x130 [ 1150.141598][T13041] ? mark_lock+0xb5/0xc60 [ 1150.145931][T13041] ? __pfx_mark_lock+0x10/0x10 [ 1150.150714][T13041] ? __pfx_mark_lock+0x10/0x10 [ 1150.155486][T13041] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1150.161387][T13041] ? policy_nodemask+0xea/0x4e0 [ 1150.166252][T13041] alloc_pages_mpol_noprof+0x275/0x610 [ 1150.171725][T13041] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1150.177802][T13041] ? hlock_class+0x4e/0x130 [ 1150.182322][T13041] ? find_held_lock+0x2d/0x110 [ 1150.187105][T13041] folio_alloc_mpol_noprof+0x36/0xd0 [ 1150.192487][T13041] vma_alloc_folio_noprof+0xee/0x1b0 [ 1150.197778][T13041] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1150.203708][T13041] ? __pfx___lock_acquire+0x10/0x10 [ 1150.208929][T13041] ? __pfx_lock_acquire+0x10/0x10 [ 1150.213995][T13041] do_wp_page+0xfd7/0x3430 [ 1150.218529][T13041] ? __pfx_lock_acquire+0x10/0x10 [ 1150.223585][T13041] ? __pfx_do_wp_page+0x10/0x10 [ 1150.228456][T13041] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1150.233842][T13041] ? find_held_lock+0x2d/0x110 [ 1150.238623][T13041] __handle_mm_fault+0x2474/0x5650 [ 1150.243761][T13041] ? __pfx___handle_mm_fault+0x10/0x10 [ 1150.249225][T13041] ? follow_page_pte+0x3dc/0x1cf0 [ 1150.254274][T13041] handle_mm_fault+0x498/0xa60 [ 1150.259051][T13041] __get_user_pages+0x475/0x15c0 [ 1150.264026][T13041] ? __pfx___get_user_pages+0x10/0x10 [ 1150.269421][T13041] ? down_read_killable+0xcc/0x380 [ 1150.274550][T13041] ? __pfx_down_read_killable+0x10/0x10 [ 1150.280105][T13041] ? __pfx_mark_lock+0x10/0x10 [ 1150.284883][T13041] __gup_longterm_locked+0x22e/0x1b30 [ 1150.290270][T13041] ? __pfx_lock_release+0x10/0x10 [ 1150.295302][T13041] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1150.301112][T13041] ? sanity_check_pinned_pages+0x23/0x1220 [ 1150.306931][T13041] gup_fast_fallback+0x153d/0x24e0 [ 1150.312343][T13041] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1150.317809][T13041] ? kernel_text_address+0x8d/0x100 [ 1150.323020][T13041] ? __kernel_text_address+0xd/0x40 [ 1150.328258][T13041] ? unwind_get_return_address+0x45/0xe0 [ 1150.333897][T13041] pin_user_pages_fast+0xa8/0x100 [ 1150.338928][T13041] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1150.344571][T13041] iov_iter_extract_pages+0x397/0x1f30 [ 1150.350045][T13041] ? __pfx_mark_lock+0x10/0x10 [ 1150.354817][T13041] ? hlock_class+0x4e/0x130 [ 1150.359328][T13041] ? sock_kmalloc+0x111/0x170 [ 1150.364008][T13041] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1150.369913][T13041] ? __kasan_kmalloc+0xaa/0xb0 [ 1150.374688][T13041] ? __kmalloc_noprof+0x1e8/0x400 [ 1150.379719][T13041] ? sock_kmalloc+0x111/0x170 [ 1150.384394][T13041] ? af_alg_alloc_areq+0xbc/0x2e0 [ 1150.389427][T13041] ? skcipher_recvmsg+0x326/0x1020 [ 1150.394550][T13041] ? skcipher_recvmsg_nokey+0x66/0x90 [ 1150.399940][T13041] ? sock_recvmsg+0x1f6/0x250 [ 1150.404615][T13041] ? __sys_recvfrom+0x1a5/0x2e0 [ 1150.409473][T13041] ? __x64_sys_recvfrom+0xe0/0x1c0 [ 1150.414588][T13041] ? do_syscall_64+0xcd/0x250 [ 1150.419268][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.425356][T13041] extract_iter_to_sg+0xf82/0x20b0 [ 1150.430494][T13041] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1150.436083][T13041] af_alg_get_rsgl+0x2c4/0x810 [ 1150.440867][T13041] skcipher_recvmsg+0x386/0x1020 [ 1150.445829][T13041] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 1150.451560][T13041] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1150.456942][T13041] ? lockdep_hardirqs_on+0x7c/0x110 [ 1150.462151][T13041] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 1150.467877][T13041] ? __local_bh_enable_ip+0xa4/0x120 [ 1150.473173][T13041] skcipher_recvmsg_nokey+0x66/0x90 [ 1150.478391][T13041] sock_recvmsg+0x1f6/0x250 [ 1150.482900][T13041] __sys_recvfrom+0x1a5/0x2e0 [ 1150.487587][T13041] ? __pfx___sys_recvfrom+0x10/0x10 [ 1150.492810][T13041] ? __fget_files+0x244/0x3f0 [ 1150.497505][T13041] ? ksys_write+0x1ab/0x260 [ 1150.502009][T13041] ? __pfx_ksys_write+0x10/0x10 [ 1150.506866][T13041] __x64_sys_recvfrom+0xe0/0x1c0 [ 1150.511817][T13041] ? do_syscall_64+0x91/0x250 [ 1150.516494][T13041] ? lockdep_hardirqs_on+0x7c/0x110 [ 1150.521701][T13041] do_syscall_64+0xcd/0x250 [ 1150.526207][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.532114][T13041] RIP: 0033:0x7f6501d7def9 [ 1150.536534][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.556142][T13041] RSP: 002b:00007f6502b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1150.564560][T13041] RAX: ffffffffffffffda RBX: 00007f6501f36130 RCX: 00007f6501d7def9 [ 1150.572530][T13041] RDX: ffffffffffffffbf RSI: 00000000200030c0 RDI: 0000000000000005 [ 1150.580505][T13041] RBP: 00007f6502b5a090 R08: 0000000000000000 R09: ffffffffffffff54 [ 1150.588477][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.596445][T13041] R13: 0000000000000001 R14: 00007f6501f36130 R15: 00007ffc47bc6778 [ 1150.604434][T13041] [ 1150.636355][ T5278] usb 3-1: config 0 descriptor?? [ 1151.387766][ T5278] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x4 [ 1151.396410][ T5278] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1151.404964][ T5278] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1151.417993][ T5278] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1151.426296][ T5278] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1151.439924][ T5278] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1151.727569][ T5224] usb 3-1: USB disconnect, device number 39 [ 1159.212429][T13073] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1159.220317][T13073] vhci_hcd: invalid port number 10 [ 1159.225765][T13073] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1161.036493][ T941] usb 2-1: USB disconnect, device number 32 [ 1161.139093][ T29] audit: type=1400 audit(1726607229.108:1044): avc: denied { write } for pid=13078 comm="syz.0.1843" path="socket:[49341]" dev="sockfs" ino=49341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1162.750026][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 1168.024878][ T9714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1168.037949][ T9714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1168.054671][ T9714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1168.094191][ T9714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1168.102134][ T9714] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1168.120407][ T9714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1168.126412][ T1123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.265170][T13112] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1850'. [ 1169.355758][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1169.370626][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1169.379227][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1169.389185][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1169.397233][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1169.404562][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1169.751955][ T1123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.849768][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1854'. [ 1170.013052][ T1123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.062008][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1170.180452][ T1123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.237312][ T9714] Bluetooth: hci2: command tx timeout [ 1170.796003][ T1123] bridge_slave_1: left allmulticast mode [ 1170.959037][T13132] xt_CONNSECMARK: invalid mode: 0 [ 1171.269121][T13131] hfs: can't find a HFS filesystem on dev nullb0 [ 1171.290248][ T1123] bridge_slave_1: left promiscuous mode [ 1171.315193][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.358080][ T1123] bridge_slave_0: left allmulticast mode [ 1171.382695][ T1123] bridge_slave_0: left promiscuous mode [ 1171.407075][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.518267][ T9714] Bluetooth: hci0: command tx timeout [ 1172.879300][ T9714] Bluetooth: hci2: command tx timeout [ 1173.607100][ T9714] Bluetooth: hci0: command tx timeout [ 1174.965045][ T9714] Bluetooth: hci2: command tx timeout [ 1175.276094][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.301919][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.325322][ T1123] bond0 (unregistering): Released all slaves [ 1175.365952][T13113] vcan0 speed is unknown, defaulting to 1000 [ 1175.681006][ T9714] Bluetooth: hci0: command tx timeout [ 1176.145512][T13130] vcan0 speed is unknown, defaulting to 1000 [ 1176.460652][T13103] chnl_net:caif_netlink_parms(): no params data found [ 1176.807013][ T9031] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1176.917062][ T944] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1176.951630][T13113] chnl_net:caif_netlink_parms(): no params data found [ 1176.975222][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.982880][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.991335][T13103] bridge_slave_0: entered allmulticast mode [ 1176.999006][ T9031] usb 3-1: Using ep0 maxpacket: 16 [ 1177.006551][ T9031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.008298][T13103] bridge_slave_0: entered promiscuous mode [ 1177.017635][ T9031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.017700][ T9031] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1177.017733][ T9031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.020481][ T9031] usb 3-1: config 0 descriptor?? [ 1177.030239][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.063404][ T9714] Bluetooth: hci2: command tx timeout [ 1177.069838][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.077890][T13103] bridge_slave_1: entered allmulticast mode [ 1177.085742][T13103] bridge_slave_1: entered promiscuous mode [ 1177.104523][ T1123] hsr_slave_0: left promiscuous mode [ 1177.110971][ T1123] hsr_slave_1: left promiscuous mode [ 1177.122790][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.130742][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.140583][ T944] usb 1-1: config 0 has an invalid interface number: 121 but max is 0 [ 1177.148944][ T944] usb 1-1: config 0 has no interface number 0 [ 1177.155073][ T944] usb 1-1: config 0 interface 121 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1177.168327][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.175787][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.204225][ T944] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=8a.3d [ 1177.208706][ T1123] veth1_macvtap: left promiscuous mode [ 1177.213537][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.225884][ T1123] veth0_macvtap: left promiscuous mode [ 1177.227199][ T944] usb 1-1: Product: syz [ 1177.232803][ T1123] veth1_vlan: left promiscuous mode [ 1177.236614][ T944] usb 1-1: Manufacturer: syz [ 1177.243796][ T1123] veth0_vlan: left promiscuous mode [ 1177.246469][ T944] usb 1-1: SerialNumber: syz [ 1177.260156][ T944] usb 1-1: config 0 descriptor?? [ 1177.494546][T13166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.522765][T13166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.550574][T13166] trusted_key: encrypted_key: hex blob is missing [ 1177.640081][T13166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.667728][T13166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.764433][ T9714] Bluetooth: hci0: command tx timeout [ 1177.928388][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.165514][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 1178.255739][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 1178.685750][T13174] hfs: can't find a HFS filesystem on dev nullb0 [ 1179.784528][ T9288] usb 1-1: USB disconnect, device number 54 [ 1180.641072][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.691208][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.569933][T13103] team0: Port device team_slave_0 added [ 1181.705070][T13113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.773831][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.791907][T13113] bridge_slave_0: entered allmulticast mode [ 1181.833530][T13113] bridge_slave_0: entered promiscuous mode [ 1181.881048][T13103] team0: Port device team_slave_1 added [ 1182.036763][T13113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.047129][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.054376][T13113] bridge_slave_1: entered allmulticast mode [ 1182.128878][T13113] bridge_slave_1: entered promiscuous mode [ 1182.321664][ T9031] usbhid 3-1:0.0: can't add hid device: -32 [ 1182.489202][ T29] audit: type=1400 audit(1726607250.488:1045): avc: denied { setopt } for pid=13197 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1182.669190][ T9031] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1182.702182][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.716771][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.784611][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.813661][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1182.835799][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1182.846535][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1182.858099][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1182.865959][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1182.874587][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1182.888204][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.951279][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.963784][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.014619][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.195552][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.235775][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.522269][T13103] hsr_slave_0: entered promiscuous mode [ 1183.578146][T13103] hsr_slave_1: entered promiscuous mode [ 1183.592311][T13103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.634069][T13103] Cannot create hsr debugfs directory [ 1183.695817][T13113] team0: Port device team_slave_0 added [ 1183.711663][T13113] team0: Port device team_slave_1 added [ 1183.883679][T13204] vcan0 speed is unknown, defaulting to 1000 [ 1184.133365][ T1123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.330195][ T1123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.347768][T11612] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1184.425953][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.451983][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.482612][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.511165][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.518643][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.548285][T11612] usb 1-1: Using ep0 maxpacket: 16 [ 1184.559844][T11612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.581384][T11612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.602897][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.613774][T11612] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1184.624822][T11612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.642416][T11612] usb 1-1: config 0 descriptor?? [ 1184.710031][ T1123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.901969][ T1123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.958063][ T9714] Bluetooth: hci5: command tx timeout [ 1185.086275][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.100771][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.112835][T13211] trusted_key: encrypted_key: hex blob is missing [ 1185.130051][T13113] hsr_slave_0: entered promiscuous mode [ 1185.144366][T13113] hsr_slave_1: entered promiscuous mode [ 1185.153071][T13113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.161996][T13113] Cannot create hsr debugfs directory [ 1185.180415][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.209569][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.852342][ T1123] bridge_slave_1: left allmulticast mode [ 1185.862727][ T1123] bridge_slave_1: left promiscuous mode [ 1185.876519][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.912928][ T1123] bridge_slave_0: left allmulticast mode [ 1185.925098][ T1123] bridge_slave_0: left promiscuous mode [ 1185.931411][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.062954][ T9714] Bluetooth: hci5: command tx timeout [ 1188.754694][T13234] 9pnet: p9_errstr2errno: server reported unknown error [ 1188.868432][T13235] Cannot find add_set index 0 as target [ 1189.126633][ T9714] Bluetooth: hci5: command tx timeout [ 1189.562987][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.727094][ T29] audit: type=1400 audit(1726607257.688:1046): avc: denied { audit_write } for pid=13241 comm="syz.2.1883" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1189.799917][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.187032][ T29] audit: type=1107 audit(1726607257.698:1047): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='H=+,kce*MM;_)J~$C߾ fXHuAg,8XٯmHz|/?՟SZkQK(~IA(ݕZRb^ʤ<=VLP{YX}\Zd;闑"(_3U!@#Z&wj' [ 1190.198431][T11612] usbhid 1-1:0.0: can't add hid device: -32 [ 1190.238553][T11612] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1190.254176][ T1123] bond0 (unregistering): Released all slaves [ 1190.551146][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 1190.899842][T13204] chnl_net:caif_netlink_parms(): no params data found [ 1190.924076][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.988151][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.038418][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.058558][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.079605][T13252] trusted_key: encrypted_key: hex blob is missing [ 1191.202377][ T9714] Bluetooth: hci5: command tx timeout [ 1191.236263][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.265836][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.583221][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.600392][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.607973][T13204] bridge_slave_0: entered allmulticast mode [ 1191.615159][T13204] bridge_slave_0: entered promiscuous mode [ 1191.624267][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.649186][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.670420][T13204] bridge_slave_1: entered allmulticast mode [ 1191.678825][T13204] bridge_slave_1: entered promiscuous mode [ 1191.715589][ T1123] hsr_slave_0: left promiscuous mode [ 1191.725532][ T1123] hsr_slave_1: left promiscuous mode [ 1191.736551][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.745551][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.776345][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.783970][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.826018][ T1123] veth1_macvtap: left promiscuous mode [ 1191.831989][ T1123] veth0_macvtap: left promiscuous mode [ 1191.839463][ T1123] veth1_vlan: left promiscuous mode [ 1191.846095][ T1123] veth0_vlan: left promiscuous mode [ 1193.588434][T13268] hfs: can't find a HFS filesystem on dev nullb0 [ 1193.878240][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 1194.015739][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 1194.036116][T13275] Cannot find add_set index 0 as target [ 1198.001763][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.020990][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.036018][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.047832][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.059208][T13290] trusted_key: encrypted_key: hex blob is missing [ 1198.147694][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.168478][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.610506][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.655599][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.802288][T13103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1198.901021][T13204] team0: Port device team_slave_0 added [ 1199.012631][T13103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1199.052382][T13103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1199.069833][T13103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1199.094167][T13204] team0: Port device team_slave_1 added [ 1199.440229][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.652521][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.152479][T13302] hfs: can't find a HFS filesystem on dev nullb0 [ 1200.174432][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.206293][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.213703][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.245595][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.542311][T13204] hsr_slave_0: entered promiscuous mode [ 1200.585393][T13204] hsr_slave_1: entered promiscuous mode [ 1200.602014][T13204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1200.613984][T13204] Cannot create hsr debugfs directory [ 1200.836578][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.113624][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.929693][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.983242][T13113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1202.123170][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.161730][T13113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1202.307424][T13113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1202.353190][T13113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1202.629212][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.737837][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.743227][T13324] hfs: can't find a HFS filesystem on dev nullb0 [ 1202.805167][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.812394][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.902023][ T1123] bridge_slave_1: left allmulticast mode [ 1202.910071][ T1123] bridge_slave_1: left promiscuous mode [ 1202.921168][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.966245][ T1123] bridge_slave_0: left allmulticast mode [ 1202.974842][ T1123] bridge_slave_0: left promiscuous mode [ 1202.980759][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.130483][T13327] FAULT_INJECTION: forcing a failure. [ 1203.130483][T13327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.151878][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.2.1903 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1203.162349][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1203.172453][T13327] Call Trace: [ 1203.175722][T13327] [ 1203.178652][T13327] dump_stack_lvl+0x16c/0x1f0 [ 1203.183359][T13327] should_fail_ex+0x497/0x5b0 [ 1203.188051][T13327] _copy_from_user+0x30/0xf0 [ 1203.192655][T13327] __keyctl_dh_compute+0x1b4/0xf50 [ 1203.197767][T13327] ? __pfx___lock_acquire+0x10/0x10 [ 1203.202966][T13327] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1203.208596][T13327] ? ksys_write+0x12f/0x260 [ 1203.213105][T13327] ? __pfx_lock_release+0x10/0x10 [ 1203.218143][T13327] keyctl_dh_compute+0xd3/0x140 [ 1203.222990][T13327] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1203.228444][T13327] ? ksys_write+0x1ab/0x260 [ 1203.232937][T13327] ? __pfx_ksys_write+0x10/0x10 [ 1203.237780][T13327] __do_sys_keyctl+0x4df/0x590 [ 1203.242550][T13327] do_syscall_64+0xcd/0x250 [ 1203.247065][T13327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.252956][T13327] RIP: 0033:0x7f073797def9 [ 1203.257359][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.276991][T13327] RSP: 002b:00007f0738834038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1203.285403][T13327] RAX: ffffffffffffffda RBX: 00007f0737b35f80 RCX: 00007f073797def9 [ 1203.293372][T13327] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 1203.301335][T13327] RBP: 00007f0738834090 R08: 0000000020000180 R09: 0000000000000000 [ 1203.309306][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.317294][T13327] R13: 0000000000000000 R14: 00007f0737b35f80 R15: 00007ffde98d7b78 [ 1203.325289][T13327] [ 1204.522978][ T29] audit: type=1107 audit(1726607271.908:1048): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='H=+,kce*MM;_)J~$C߾ fXHuAg,8XٯmHz|/?՟SZkQK(~IA(ݕZRb^ʤ<=VLP{YX}\Zd;闑"(_3U!@#Z&wj' [ 1204.823410][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.861206][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.996613][T13341] trusted_key: encrypted_key: insufficient parameters specified [ 1205.019200][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.029848][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.288262][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.306095][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.325599][ T1123] bond0 (unregistering): Released all slaves [ 1205.471504][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.478673][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.186312][T13353] erofs: Unknown parameter '/dev/vga_arbiter' [ 1206.422799][ T29] audit: type=1400 audit(1726607274.428:1049): avc: denied { write } for pid=13349 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1206.443948][T13354] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1910'. [ 1206.812584][T13113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.821481][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 1206.973295][ T1123] hsr_slave_0: left promiscuous mode [ 1206.981209][ T1123] hsr_slave_1: left promiscuous mode [ 1206.987480][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.994889][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.005292][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.013280][ T29] audit: type=1400 audit(1726607275.018:1050): avc: denied { append } for pid=13355 comm="syz.2.1912" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1207.047346][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.111683][ T1123] veth1_macvtap: left promiscuous mode [ 1207.120911][ T1123] veth0_macvtap: left promiscuous mode [ 1207.126637][ T1123] veth1_vlan: left promiscuous mode [ 1207.132466][ T1123] veth0_vlan: left promiscuous mode [ 1208.275021][ T29] audit: type=1400 audit(1726607276.278:1051): avc: denied { map } for pid=13361 comm="syz.0.1913" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1208.301869][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 1208.330822][ T29] audit: type=1400 audit(1726607276.278:1052): avc: denied { execute } for pid=13361 comm="syz.0.1913" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1208.415819][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 1208.533969][ T29] audit: type=1400 audit(1726607276.528:1053): avc: denied { setopt } for pid=13361 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1211.483725][ T29] audit: type=1326 audit(1726607279.398:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.0.1914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21a497def9 code=0x0 [ 1211.990575][T13113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.117678][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.124931][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.164387][T13377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.212830][T13377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.266555][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.273834][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.327854][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1212.466360][T13204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1212.481469][T13204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1212.495411][T13204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1212.522978][T13204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1212.556094][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.878922][T13103] veth0_vlan: entered promiscuous mode [ 1213.012440][T13384] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1917'. [ 1213.022851][T13384] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 1213.366119][T13103] veth1_vlan: entered promiscuous mode [ 1214.029063][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.041104][T13388] erofs: Unknown parameter '/dev/vga_arbiter' [ 1214.089030][T13103] veth0_macvtap: entered promiscuous mode [ 1214.151205][T13103] veth1_macvtap: entered promiscuous mode [ 1214.220701][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.263621][T13204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.285862][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.293050][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.311989][T13399] hfs: can't find a HFS filesystem on dev nullb0 [ 1214.390461][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.410493][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.424420][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.439001][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.465901][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.520815][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1921'. [ 1214.524493][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.540568][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.624005][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.660618][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.690948][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.711302][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.733984][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.799750][T13103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.811448][T13103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.820408][T13103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.829434][T13103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.876733][T13113] veth0_vlan: entered promiscuous mode [ 1214.931235][T13113] veth1_vlan: entered promiscuous mode [ 1215.394401][T13113] veth0_macvtap: entered promiscuous mode [ 1215.414133][T13113] veth1_macvtap: entered promiscuous mode [ 1215.533081][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.573749][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.614166][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.641454][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.664891][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1215.706307][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.750636][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.787413][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.803481][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.818560][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.838144][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.999222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.028864][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.042863][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1216.072390][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.083137][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1216.093875][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.114509][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1216.604340][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.849222][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.892848][T13113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.920078][T13113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.946976][T13113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.955738][T13113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.985457][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.156532][ T29] audit: type=1400 audit(1726607285.148:1055): avc: denied { ioctl } for pid=13419 comm="syz.0.1926" path="/dev/nvram" dev="devtmpfs" ino=625 ioctlcmd=0xaee0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1217.372077][T13430] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1217.379822][T13430] vhci_hcd: invalid port number 10 [ 1217.385026][T13430] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1217.493734][T13429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.686315][T13429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.998408][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.055963][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.202843][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.225912][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.452240][T13439] Cannot find add_set index 0 as target [ 1218.534528][T13444] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1846'. [ 1218.620056][T13204] veth0_vlan: entered promiscuous mode [ 1218.651513][T13448] Cannot find add_set index 0 as target [ 1218.676004][T13204] veth1_vlan: entered promiscuous mode [ 1218.785484][T13204] veth0_macvtap: entered promiscuous mode [ 1218.798853][T13204] veth1_macvtap: entered promiscuous mode [ 1218.838355][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.864366][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.881107][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.898871][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.916678][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.932831][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.945178][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.961558][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.034689][T13204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.221473][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.260828][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.302729][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.350333][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.382680][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.420733][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.496832][T13204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.518565][T13204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.532160][T13204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.571031][T13204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.581516][T13204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.601916][T13204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.617256][T13204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.985041][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.999334][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.050609][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.060540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.135663][T13463] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1221.840387][T13481] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1221.851086][T13481] vhci_hcd: invalid port number 10 [ 1221.856388][T13481] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1222.620911][T13478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1939'. [ 1222.813870][ T29] audit: type=1400 audit(1726607290.818:1056): avc: denied { getopt } for pid=13490 comm="syz.1.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1222.839875][T13495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.667981][T13495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.745622][T13495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.779335][T13495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.229812][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.252830][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.370963][T13519] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1224.378763][T13519] vhci_hcd: invalid port number 10 [ 1224.383948][T13519] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1225.315558][T13526] FAULT_INJECTION: forcing a failure. [ 1225.315558][T13526] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.397098][T13526] CPU: 1 UID: 0 PID: 13526 Comm: syz.0.1953 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1225.407572][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1225.417656][T13526] Call Trace: [ 1225.420948][T13526] [ 1225.423890][T13526] dump_stack_lvl+0x16c/0x1f0 [ 1225.428594][T13526] should_fail_ex+0x497/0x5b0 [ 1225.433299][T13526] ? fs_reclaim_acquire+0xae/0x160 [ 1225.438442][T13526] should_failslab+0xc2/0x120 [ 1225.443140][T13526] __kmalloc_node_noprof+0xd1/0x430 [ 1225.448358][T13526] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 1225.453839][T13526] __kvmalloc_node_noprof+0x9d/0x1a0 [ 1225.459144][T13526] xt_alloc_entry_offsets+0x3a/0x60 [ 1225.464363][T13526] translate_table+0x22e/0x1710 [ 1225.469238][T13526] ? __pfx_lock_release+0x10/0x10 [ 1225.474295][T13526] ? __pfx___might_resched+0x10/0x10 [ 1225.479604][T13526] ? __pfx_translate_table+0x10/0x10 [ 1225.484919][T13526] do_ipt_set_ctl+0x605/0xc30 [ 1225.489615][T13526] ? rcu_is_watching+0x12/0xc0 [ 1225.494409][T13526] ? trace_contention_end+0xea/0x140 [ 1225.499728][T13526] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1225.504952][T13526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1225.510974][T13526] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1225.516987][T13526] nf_setsockopt+0x8a/0xf0 [ 1225.521431][T13526] ip_setsockopt+0xcb/0xf0 [ 1225.525875][T13526] raw_setsockopt+0xb8/0x290 [ 1225.530490][T13526] ? __pfx_raw_setsockopt+0x10/0x10 [ 1225.535717][T13526] ? selinux_socket_setsockopt+0x6a/0x80 [ 1225.541375][T13526] ? sock_common_setsockopt+0x2e/0xf0 [ 1225.546769][T13526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1225.552681][T13526] do_sock_setsockopt+0x222/0x480 [ 1225.557724][T13526] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1225.563292][T13526] ? __fget_files+0x244/0x3f0 [ 1225.567997][T13526] ? __fget_light+0x173/0x210 [ 1225.572705][T13526] __sys_setsockopt+0x1a4/0x270 [ 1225.577586][T13526] ? __pfx___sys_setsockopt+0x10/0x10 [ 1225.582982][T13526] ? fput+0x30/0x390 [ 1225.586909][T13526] ? ksys_write+0x1ab/0x260 [ 1225.591429][T13526] ? __pfx_ksys_write+0x10/0x10 [ 1225.596306][T13526] __x64_sys_setsockopt+0xbd/0x160 [ 1225.601441][T13526] ? do_syscall_64+0x91/0x250 [ 1225.606134][T13526] ? lockdep_hardirqs_on+0x7c/0x110 [ 1225.611361][T13526] do_syscall_64+0xcd/0x250 [ 1225.615883][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.621806][T13526] RIP: 0033:0x7f21a497def9 [ 1225.626234][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.645870][T13526] RSP: 002b:00007f21a578a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1225.654307][T13526] RAX: ffffffffffffffda RBX: 00007f21a4b35f80 RCX: 00007f21a497def9 [ 1225.662298][T13526] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003 [ 1225.670285][T13526] RBP: 00007f21a578a090 R08: 0000000000000340 R09: 0000000000000000 [ 1225.678272][T13526] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.686258][T13526] R13: 0000000000000000 R14: 00007f21a4b35f80 R15: 00007fff71e80978 [ 1225.694263][T13526] [ 1225.769878][T13525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.779649][T13525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.788389][T13525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.797111][T13525] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.275777][ T29] audit: type=1400 audit(1726607294.278:1057): avc: denied { map } for pid=13531 comm="syz.0.1955" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1226.306218][ T29] audit: type=1400 audit(1726607294.278:1058): avc: denied { execute } for pid=13531 comm="syz.0.1955" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1226.507089][T11612] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1226.587032][ T944] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1226.707022][T11612] usb 4-1: Using ep0 maxpacket: 16 [ 1226.740226][T11612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.755478][T11612] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.771311][T11612] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.788330][ T944] usb 5-1: Using ep0 maxpacket: 16 [ 1226.789087][T11612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.798295][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.816232][ T944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.816298][ T944] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.816330][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.831484][T11612] usb 4-1: config 0 descriptor?? [ 1226.842482][ T944] usb 5-1: config 0 descriptor?? [ 1226.978231][ T29] audit: type=1400 audit(1726607294.928:1059): avc: denied { nlmsg_read } for pid=13539 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1227.096623][T13545] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1960'. [ 1227.299154][T13549] FAULT_INJECTION: forcing a failure. [ 1227.299154][T13549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.316976][T13549] CPU: 0 UID: 0 PID: 13549 Comm: syz.0.1961 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1227.327439][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1227.337519][T13549] Call Trace: [ 1227.340814][T13549] [ 1227.343757][T13549] dump_stack_lvl+0x16c/0x1f0 [ 1227.348461][T13549] should_fail_ex+0x497/0x5b0 [ 1227.353171][T13549] _copy_from_iter+0x2a1/0x1550 [ 1227.358059][T13549] ? __alloc_skb+0x1fe/0x380 [ 1227.362688][T13549] ? __pfx__copy_from_iter+0x10/0x10 [ 1227.368011][T13549] ? __virt_addr_valid+0x5e/0x590 [ 1227.373062][T13549] ? __phys_addr_symbol+0x30/0x80 [ 1227.378124][T13549] ? __check_object_size+0x497/0x720 [ 1227.383449][T13549] netlink_sendmsg+0x813/0xd70 [ 1227.388246][T13549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.393572][T13549] ____sys_sendmsg+0xaaf/0xc90 [ 1227.398350][T13549] ? copy_msghdr_from_user+0x10b/0x160 [ 1227.403837][T13549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.409124][T13549] ? __pfx___lock_acquire+0x10/0x10 [ 1227.414354][T13549] ___sys_sendmsg+0x135/0x1e0 [ 1227.419047][T13549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.424278][T13549] ? find_held_lock+0x2d/0x110 [ 1227.429082][T13549] ? ksys_write+0x21c/0x260 [ 1227.433636][T13549] ? __fget_light+0x173/0x210 [ 1227.438356][T13549] __sys_sendmsg+0x117/0x1f0 [ 1227.443026][T13549] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.448196][T13549] do_syscall_64+0xcd/0x250 [ 1227.450654][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.452714][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.452761][T13549] RIP: 0033:0x7f21a497def9 [ 1227.452782][T13549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.452805][T13549] RSP: 002b:00007f21a578a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.499444][T13549] RAX: ffffffffffffffda RBX: 00007f21a4b35f80 RCX: 00007f21a497def9 [ 1227.507448][T13549] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1227.515455][T13549] RBP: 00007f21a578a090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.523453][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.531423][T13549] R13: 0000000000000000 R14: 00007f21a4b35f80 R15: 00007fff71e80978 [ 1227.539431][T13549] [ 1227.542537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.577577][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.717527][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.737399][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.820061][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.838306][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.215249][ T29] audit: type=1400 audit(1726607296.208:1060): avc: denied { name_bind } for pid=13537 comm="syz.4.1957" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1228.409215][T13562] FAULT_INJECTION: forcing a failure. [ 1228.409215][T13562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.437038][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.2.1965 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1228.447514][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1228.457599][T13562] Call Trace: [ 1228.460885][T13562] [ 1228.463821][T13562] dump_stack_lvl+0x16c/0x1f0 [ 1228.468523][T13562] should_fail_ex+0x497/0x5b0 [ 1228.473231][T13562] _copy_from_iter+0x2a1/0x1550 [ 1228.478100][T13562] ? __alloc_skb+0x1fe/0x380 [ 1228.482720][T13562] ? __pfx__copy_from_iter+0x10/0x10 [ 1228.488031][T13562] ? __virt_addr_valid+0x5e/0x590 [ 1228.493081][T13562] ? __phys_addr_symbol+0x30/0x80 [ 1228.498105][T13562] ? __check_object_size+0x497/0x720 [ 1228.503411][T13562] netlink_sendmsg+0x813/0xd70 [ 1228.508202][T13562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.513505][T13562] ? __import_iovec+0x1fd/0x6e0 [ 1228.518370][T13562] ____sys_sendmsg+0xaaf/0xc90 [ 1228.523142][T13562] ? copy_msghdr_from_user+0x10b/0x160 [ 1228.528599][T13562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.533903][T13562] ? __pfx___lock_acquire+0x10/0x10 [ 1228.539130][T13562] ___sys_sendmsg+0x135/0x1e0 [ 1228.543841][T13562] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.549049][T13562] ? find_held_lock+0x2d/0x110 [ 1228.553835][T13562] ? ksys_write+0x21c/0x260 [ 1228.558368][T13562] ? __fget_light+0x173/0x210 [ 1228.563071][T13562] __sys_sendmsg+0x117/0x1f0 [ 1228.567684][T13562] ? __pfx___sys_sendmsg+0x10/0x10 [ 1228.572828][T13562] do_syscall_64+0xcd/0x250 [ 1228.577331][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.583254][T13562] RIP: 0033:0x7f073797def9 [ 1228.587688][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.607291][T13562] RSP: 002b:00007f0738834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.615711][T13562] RAX: ffffffffffffffda RBX: 00007f0737b35f80 RCX: 00007f073797def9 [ 1228.623712][T13562] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1228.631689][T13562] RBP: 00007f0738834090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.639650][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.647635][T13562] R13: 0000000000000000 R14: 00007f0737b35f80 R15: 00007ffde98d7b78 [ 1228.655630][T13562] [ 1228.658796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.484997][T11612] usbhid 4-1:0.0: can't add hid device: -71 [ 1229.506762][T11612] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1229.522236][T11612] usb 4-1: USB disconnect, device number 49 [ 1229.582846][T13571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1968'. [ 1230.637133][ T944] usbhid 5-1:0.0: can't add hid device: -71 [ 1230.643291][ T944] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1230.723505][ T944] usb 5-1: USB disconnect, device number 54 [ 1230.807677][T13588] FAULT_INJECTION: forcing a failure. [ 1230.807677][T13588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.877028][T13588] CPU: 0 UID: 0 PID: 13588 Comm: syz.0.1971 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1230.887509][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1230.897587][T13588] Call Trace: [ 1230.900871][T13588] [ 1230.903812][T13588] dump_stack_lvl+0x16c/0x1f0 [ 1230.908504][T13588] should_fail_ex+0x497/0x5b0 [ 1230.913202][T13588] _copy_from_user+0x30/0xf0 [ 1230.917823][T13588] copy_msghdr_from_user+0x99/0x160 [ 1230.923039][T13588] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1230.928897][T13588] ? __pfx___lock_acquire+0x10/0x10 [ 1230.934114][T13588] ___sys_sendmsg+0xff/0x1e0 [ 1230.938739][T13588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.943952][T13588] ? find_held_lock+0x2d/0x110 [ 1230.948739][T13588] ? __pfx_lock_release+0x10/0x10 [ 1230.953778][T13588] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1230.959526][T13588] ? __fget_light+0x173/0x210 [ 1230.964222][T13588] __sys_sendmmsg+0x1a1/0x450 [ 1230.968919][T13588] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1230.974127][T13588] ? vfs_write+0x14d/0x1140 [ 1230.978653][T13588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1230.984650][T13588] ? fput+0x30/0x390 [ 1230.988557][T13588] ? ksys_write+0x1ab/0x260 [ 1230.993064][T13588] ? __pfx_ksys_write+0x10/0x10 [ 1230.997924][T13588] __x64_sys_sendmmsg+0x9c/0x100 [ 1231.002872][T13588] ? lockdep_hardirqs_on+0x7c/0x110 [ 1231.008081][T13588] do_syscall_64+0xcd/0x250 [ 1231.012589][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.018498][T13588] RIP: 0033:0x7f21a497def9 [ 1231.022914][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1231.042541][T13588] RSP: 002b:00007f21a5769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1231.050969][T13588] RAX: ffffffffffffffda RBX: 00007f21a4b36058 RCX: 00007f21a497def9 [ 1231.058945][T13588] RDX: 0000000000000002 RSI: 0000000020000f00 RDI: 0000000000000004 [ 1231.066922][T13588] RBP: 00007f21a5769090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.074902][T13588] R10: 0000000024000004 R11: 0000000000000246 R12: 0000000000000001 [ 1231.082880][T13588] R13: 0000000000000000 R14: 00007f21a4b36058 R15: 00007fff71e80978 [ 1231.090871][T13588] [ 1231.093971][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.167202][ T5306] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1231.356994][ T5306] usb 2-1: Using ep0 maxpacket: 32 [ 1231.377555][ T5306] usb 2-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 1231.405710][T13598] syz.3.1975 (13598): /proc/13593/oom_adj is deprecated, please use /proc/13593/oom_score_adj instead. [ 1231.417099][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.425519][ T5306] usb 2-1: Product: syz [ 1231.455610][ T5306] usb 2-1: Manufacturer: syz [ 1231.464739][ T5306] usb 2-1: SerialNumber: syz [ 1231.490212][ T5306] usb 2-1: config 0 descriptor?? [ 1231.510283][ T5306] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1231.530248][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.583856][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.698623][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.700921][ T5306] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1231.802256][ T5306] usb 2-1: USB disconnect, device number 33 [ 1231.812872][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.118232][T13613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13613 comm=syz.4.1980 [ 1233.383048][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 1233.395392][T13626] FAULT_INJECTION: forcing a failure. [ 1233.395392][T13626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.411310][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.3.1985 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1233.421786][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1233.431863][T13626] Call Trace: [ 1233.435157][T13626] [ 1233.438101][T13626] dump_stack_lvl+0x16c/0x1f0 [ 1233.438351][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1233.442795][T13626] should_fail_ex+0x497/0x5b0 [ 1233.456331][T13626] _copy_from_iter+0x2a1/0x1550 [ 1233.461230][T13626] ? __alloc_skb+0x1fe/0x380 [ 1233.465855][T13626] ? __pfx__copy_from_iter+0x10/0x10 [ 1233.471177][T13626] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 1233.477538][T13626] ? __virt_addr_valid+0x5e/0x590 [ 1233.482575][T13626] ? __phys_addr_symbol+0x30/0x80 [ 1233.487607][T13626] ? __check_object_size+0x497/0x720 [ 1233.492913][T13626] netlink_sendmsg+0x813/0xd70 [ 1233.497692][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.502983][T13626] ? __import_iovec+0x1fd/0x6e0 [ 1233.507856][T13626] ____sys_sendmsg+0xaaf/0xc90 [ 1233.512626][T13626] ? copy_msghdr_from_user+0x10b/0x160 [ 1233.518102][T13626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.523400][T13626] ? __pfx___lock_acquire+0x10/0x10 [ 1233.528615][T13626] ___sys_sendmsg+0x135/0x1e0 [ 1233.533305][T13626] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.538512][T13626] ? find_held_lock+0x2d/0x110 [ 1233.543293][T13626] ? ksys_write+0x21c/0x260 [ 1233.547815][T13626] ? __fget_light+0x173/0x210 [ 1233.552502][T13626] __sys_sendmsg+0x117/0x1f0 [ 1233.557101][T13626] ? __pfx___sys_sendmsg+0x10/0x10 [ 1233.562243][T13626] do_syscall_64+0xcd/0x250 [ 1233.566752][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.572659][T13626] RIP: 0033:0x7fcc1017def9 [ 1233.577075][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.596683][T13626] RSP: 002b:00007fcc11007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.605187][T13626] RAX: ffffffffffffffda RBX: 00007fcc10335f80 RCX: 00007fcc1017def9 [ 1233.613158][T13626] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1233.621140][T13626] RBP: 00007fcc11007090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.629122][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.637095][T13626] R13: 0000000000000000 R14: 00007fcc10335f80 R15: 00007fff66a417a8 [ 1233.645084][T13626] [ 1233.663704][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1233.689464][ T29] audit: type=1400 audit(1726607301.698:1061): avc: denied { mounton } for pid=13624 comm="syz.4.1984" path="/proc/34/cgroup" dev="proc" ino=52853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1233.737484][T13633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.753999][ T29] audit: type=1400 audit(1726607301.758:1062): avc: denied { write } for pid=13630 comm="syz.1.1987" path="socket:[52850]" dev="sockfs" ino=52850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1233.780083][T13633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.815427][ T29] audit: type=1400 audit(1726607301.758:1063): avc: denied { nlmsg_write } for pid=13630 comm="syz.1.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1233.829709][T13633] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1986'. [ 1234.011808][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 1236.549210][T13637] hfs: can't find a HFS filesystem on dev nullb0 [ 1236.734128][ T29] audit: type=1400 audit(1726607304.738:1064): avc: denied { write } for pid=13651 comm="syz.2.1993" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1236.824762][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1992'. [ 1236.942440][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.087243][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.115564][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.125814][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.287134][T13664] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1237.294499][T13664] vhci_hcd: invalid port number 10 [ 1237.299743][T13664] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1239.027760][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 1239.556799][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.166522][T13686] netlink: zone id is out of range [ 1245.186374][T13686] netlink: set zone limit has 4 unknown bytes [ 1245.493483][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'. [ 1245.937030][T13705] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1245.944662][T13705] vhci_hcd: invalid port number 10 [ 1245.950134][T13705] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1247.718002][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.800738][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.869888][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.891910][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.301189][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 1250.416961][ T29] audit: type=1400 audit(1726607318.408:1065): avc: denied { shutdown } for pid=13729 comm="syz.1.2016" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1250.439835][T13731] input: syz0 as /devices/virtual/input/input31 [ 1250.611675][T13742] trusted_key: encrypted_key: insufficient parameters specified [ 1250.630755][T13743] FAULT_INJECTION: forcing a failure. [ 1250.630755][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.682836][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.3.2020 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1250.693318][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1250.703394][T13743] Call Trace: [ 1250.706694][T13743] [ 1250.708565][ T5306] usb 1-1: USB disconnect, device number 55 [ 1250.709623][T13743] dump_stack_lvl+0x16c/0x1f0 [ 1250.720192][T13743] should_fail_ex+0x497/0x5b0 [ 1250.724908][T13743] _copy_from_user+0x30/0xf0 [ 1250.729538][T13743] br_dev_read_uargs+0x149/0x3b0 [ 1250.734513][T13743] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 1250.740013][T13743] br_dev_siocdevprivate+0xe8/0x1630 [ 1250.745331][T13743] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1250.751179][T13743] ? lock_acquire+0x1b1/0x560 [ 1250.755901][T13743] ? __mutex_trylock_common+0xea/0x250 [ 1250.761404][T13743] ? netdev_name_node_lookup+0x127/0x180 [ 1250.767071][T13743] dev_ifsioc+0x529/0x10b0 [ 1250.771514][T13743] ? __pfx_dev_ifsioc+0x10/0x10 [ 1250.776389][T13743] ? dev_ioctl+0x1a1/0x10c0 [ 1250.780917][T13743] ? __pfx___mutex_lock+0x10/0x10 [ 1250.785964][T13743] ? __pfx_lock_release+0x10/0x10 [ 1250.791054][T13743] ? full_name_hash+0xbc/0x110 [ 1250.795872][T13743] dev_ioctl+0x1b2/0x10c0 [ 1250.800236][T13743] sock_ioctl+0x5b9/0x6c0 [ 1250.802336][T13746] netlink: zone id is out of range [ 1250.804606][T13743] ? __pfx_sock_ioctl+0x10/0x10 [ 1250.814585][T13743] ? selinux_file_ioctl+0x180/0x270 [ 1250.819147][T13746] netlink: set zone limit has 4 unknown bytes [ 1250.819801][T13743] ? selinux_file_ioctl+0xb4/0x270 [ 1250.830986][T13743] ? __pfx_sock_ioctl+0x10/0x10 [ 1250.835865][T13743] __x64_sys_ioctl+0x18d/0x210 [ 1250.840655][T13743] do_syscall_64+0xcd/0x250 [ 1250.845191][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.851120][T13743] RIP: 0033:0x7fcc1017def9 [ 1250.855567][T13743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.875208][T13743] RSP: 002b:00007fcc11007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.883661][T13743] RAX: ffffffffffffffda RBX: 00007fcc10335f80 RCX: 00007fcc1017def9 [ 1250.891662][T13743] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 000000000000000a [ 1250.899666][T13743] RBP: 00007fcc11007090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.907656][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.915649][T13743] R13: 0000000000000000 R14: 00007fcc10335f80 R15: 00007fff66a417a8 [ 1250.923661][T13743] [ 1251.677281][T13752] fuse: Bad value for 'fd' [ 1252.922845][T13767] FAULT_INJECTION: forcing a failure. [ 1252.922845][T13767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.270224][T13769] erofs: Unknown parameter '/dev/vga_arbiter' [ 1253.558770][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1253.568382][T13767] CPU: 0 UID: 0 PID: 13767 Comm: syz.4.2027 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1253.578842][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1253.588987][T13767] Call Trace: [ 1253.592268][T13767] [ 1253.595199][T13767] dump_stack_lvl+0x16c/0x1f0 [ 1253.599890][T13767] should_fail_ex+0x497/0x5b0 [ 1253.604583][T13767] _copy_from_iter+0x2a1/0x1550 [ 1253.609449][T13767] ? __alloc_skb+0x1fe/0x380 [ 1253.614047][T13767] ? __pfx__copy_from_iter+0x10/0x10 [ 1253.619349][T13767] ? __virt_addr_valid+0x5e/0x590 [ 1253.624381][T13767] ? __phys_addr_symbol+0x30/0x80 [ 1253.629410][T13767] ? __check_object_size+0x497/0x720 [ 1253.634711][T13767] netlink_sendmsg+0x813/0xd70 [ 1253.639487][T13767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.644777][T13767] ? __import_iovec+0x1fd/0x6e0 [ 1253.649650][T13767] ____sys_sendmsg+0xaaf/0xc90 [ 1253.654418][T13767] ? copy_msghdr_from_user+0x10b/0x160 [ 1253.659887][T13767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.665177][T13767] ? find_held_lock+0x2d/0x110 [ 1253.669955][T13767] ___sys_sendmsg+0x135/0x1e0 [ 1253.674646][T13767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.679884][T13767] ? __fget_light+0x173/0x210 [ 1253.684572][T13767] __sys_sendmsg+0x117/0x1f0 [ 1253.689172][T13767] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.694324][T13767] do_syscall_64+0xcd/0x250 [ 1253.698836][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.704742][T13767] RIP: 0033:0x7f3f42d7def9 [ 1253.709160][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.728769][T13767] RSP: 002b:00007f3f43b01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.737184][T13767] RAX: ffffffffffffffda RBX: 00007f3f42f35f80 RCX: 00007f3f42d7def9 [ 1253.745155][T13767] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 1253.753126][T13767] RBP: 00007f3f43b01090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.761095][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.769066][T13767] R13: 0000000000000000 R14: 00007f3f42f35f80 R15: 00007ffca73327d8 [ 1253.777059][T13767] [ 1253.850212][ T5226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1253.957353][ T5226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1253.966567][ T5226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1253.974219][ T5226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1253.981598][ T5226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1254.675749][ T5226] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1254.685642][ T5226] Bluetooth: hci2: Injecting HCI hardware error event [ 1254.696193][ T5226] Bluetooth: hci2: hardware error 0x00 [ 1254.867409][ T5317] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1254.887908][T13777] erofs: Unknown parameter '/dev/vga_arbiter' [ 1255.046961][T13770] vcan0 speed is unknown, defaulting to 1000 [ 1255.109892][ T5317] usb 2-1: Using ep0 maxpacket: 16 [ 1255.133729][ T5317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.149066][ T5317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.184212][ T2962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.353831][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1255.365354][ T5317] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1255.374618][ T5317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.385581][ T5317] usb 2-1: config 0 descriptor?? [ 1255.809441][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1255.853842][ T2962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.886044][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.927785][ T25] usb 4-1: config 0 descriptor?? [ 1256.077178][ T9714] Bluetooth: hci4: command tx timeout [ 1256.110952][ T5317] savu 0003:1E7D:2D5A.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1256.191932][ T29] audit: type=1400 audit(1726607324.198:1066): avc: denied { getopt } for pid=13779 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1256.195261][ T25] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 1256.370204][ T2962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.407138][ T25] hackrf 4-1:0.0: Could not detect board [ 1256.413505][ T25] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 1256.426565][ T25] usb 4-1: USB disconnect, device number 50 [ 1256.468621][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.618552][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.884629][ T5226] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1257.104838][ T5280] usb 2-1: USB disconnect, device number 34 [ 1257.222081][ T2962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.310444][ T29] audit: type=1400 audit(1726607325.308:1067): avc: denied { bind } for pid=13791 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1258.157126][ T5226] Bluetooth: hci4: command tx timeout [ 1262.273207][ T5226] Bluetooth: hci4: command tx timeout [ 1262.704894][T13802] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1262.712588][T13802] vhci_hcd: invalid port number 10 [ 1262.717860][T13802] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1264.225656][T13813] input: syz0 as /devices/virtual/input/input32 [ 1264.317114][ T5226] Bluetooth: hci4: command tx timeout [ 1264.357666][ T2962] bridge_slave_1: left allmulticast mode [ 1264.374100][ T2962] bridge_slave_1: left promiscuous mode [ 1264.396367][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.540912][T13820] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2043'. [ 1264.551668][T13820] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1264.596889][ T2962] bridge_slave_0: left allmulticast mode [ 1264.618505][ T2962] bridge_slave_0: left promiscuous mode [ 1264.626039][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.709635][T13823] fuse: Bad value for 'fd' [ 1266.412392][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.439651][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.464086][ T2962] bond0 (unregistering): Released all slaves [ 1266.909615][T13770] chnl_net:caif_netlink_parms(): no params data found [ 1272.604498][T13869] fuse: Bad value for 'fd' [ 1273.280604][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.317125][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.331879][T13770] bridge_slave_0: entered allmulticast mode [ 1273.350079][T13770] bridge_slave_0: entered promiscuous mode [ 1273.431528][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.447147][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.466404][T13770] bridge_slave_1: entered allmulticast mode [ 1273.482990][T13770] bridge_slave_1: entered promiscuous mode [ 1274.355900][T13882] mmap: syz.4.2059 (13882): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1281.964398][T13770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.155145][T13770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.828164][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.113927][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.538053][ T2962] hsr_slave_0: left promiscuous mode [ 1286.470531][ T2962] hsr_slave_1: left promiscuous mode [ 1287.075063][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.094471][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.131248][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.154520][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.378510][T13918] fuse: Bad value for 'fd' [ 1287.401108][ T2962] veth1_macvtap: left promiscuous mode [ 1287.406642][ T2962] veth0_macvtap: left promiscuous mode [ 1287.412559][ T2962] veth1_vlan: left promiscuous mode [ 1287.418805][ T2962] veth0_vlan: left promiscuous mode [ 1289.807186][T13939] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1289.819089][T13939] Cannot find add_set index 0 as target [ 1290.615820][ T29] audit: type=1400 audit(1726607357.796:1068): avc: denied { ioctl } for pid=13935 comm="syz.3.2074" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1291.090833][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 1291.155766][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 1291.863674][T13770] team0: Port device team_slave_0 added [ 1292.053370][T13770] team0: Port device team_slave_1 added [ 1292.289684][T13770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.776432][T13946] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1292.783847][T13946] vhci_hcd: invalid port number 10 [ 1292.789069][T13946] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1292.853768][T13770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.922094][T13770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.961429][T13770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.992009][T13770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.195507][T13770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.481530][T13959] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 1293.489361][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 1294.834735][T13770] hsr_slave_0: entered promiscuous mode [ 1294.906150][T13770] hsr_slave_1: entered promiscuous mode [ 1295.021776][T13969] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1295.029160][T13969] vhci_hcd: invalid port number 10 [ 1295.034259][T13969] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1295.106716][ T9714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1295.217197][ T9714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1295.226672][ T9714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1295.240994][ T9714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1295.254328][ T9714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1295.262390][ T9714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1296.188674][T13970] vcan0 speed is unknown, defaulting to 1000 [ 1296.199036][ T5278] usb 3-1: USB disconnect, device number 40 [ 1296.271466][T13977] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1296.565690][ T2962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.616958][ T2962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.806135][ T2962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.817673][ T2962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.020208][ T2962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.036657][ T2962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.263984][ T2962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.282975][ T2962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.359689][ T5226] Bluetooth: hci1: command tx timeout [ 1297.952566][ T2962] bridge_slave_1: left allmulticast mode [ 1297.974494][ T2962] bridge_slave_1: left promiscuous mode [ 1298.056237][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.141338][ T2962] bridge_slave_0: left allmulticast mode [ 1298.157167][ T2962] bridge_slave_0: left promiscuous mode [ 1298.165378][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.176981][ T5224] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1298.383450][ T5224] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1298.415243][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.457668][ T5224] usb 2-1: config 0 descriptor?? [ 1299.283029][T13994] overlayfs: failed to resolve './file0': -2 [ 1299.527642][ T5226] Bluetooth: hci1: command tx timeout [ 1300.087058][ T5280] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1300.462798][ T5280] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.473172][ T5280] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1300.491292][ T5280] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 1300.502934][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.511090][ T5280] usb 4-1: Product: syz [ 1300.515335][ T5280] usb 4-1: Manufacturer: syz [ 1300.520599][ T5280] usb 4-1: SerialNumber: syz [ 1300.726701][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.763797][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.789829][ T2962] bond0 (unregistering): Released all slaves [ 1300.805930][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.279495][ T5280] usb 4-1: USB disconnect, device number 51 [ 1301.442474][ T5224] usb 2-1: Cannot set MAC address [ 1301.463330][T13970] chnl_net:caif_netlink_parms(): no params data found [ 1301.463519][ T5224] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1301.525756][ T5224] usb 2-1: USB disconnect, device number 35 [ 1301.597009][ T5226] Bluetooth: hci1: command tx timeout [ 1302.577372][T13770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1302.697667][T13770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1302.777098][ T2962] hsr_slave_0: left promiscuous mode [ 1302.791462][ T2962] hsr_slave_1: left promiscuous mode [ 1302.815891][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.926995][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.938031][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.945987][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.069533][ T29] audit: type=1400 audit(1726607371.056:1069): avc: denied { read } for pid=14012 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1303.087589][ T2962] veth1_macvtap: left promiscuous mode [ 1303.097057][ T2962] veth0_macvtap: left promiscuous mode [ 1303.107244][T14020] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2093'. [ 1303.119981][ T29] audit: type=1400 audit(1726607371.106:1070): avc: denied { setopt } for pid=14012 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1303.144142][ T2962] veth1_vlan: left promiscuous mode [ 1303.172521][ T2962] veth0_vlan: left promiscuous mode [ 1303.684436][ T5226] Bluetooth: hci1: command tx timeout [ 1304.199011][ T2962] infiniband syz1: set down [ 1304.252899][T14030] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2096'. [ 1304.277120][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1304.520384][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1304.551166][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1304.575926][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1304.591839][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1304.602054][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.620132][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1304.637122][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.927242][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 1304.932744][ T25] usbtmc 2-1:16.0: can't read capabilities [ 1306.272038][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 1306.414933][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 1307.437109][ T5224] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1308.118094][ T9714] Bluetooth: hci5: command 0x0406 tx timeout [ 1308.125727][ T5224] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1308.134919][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.146393][ T5224] usb 4-1: config 0 descriptor?? [ 1308.513833][ T35] smc: removing ib device syz1 [ 1308.606420][T13770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1308.652340][T13770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1308.723836][T11612] vcan0 speed is unknown, defaulting to 1000 [ 1308.733963][ T5278] usb 2-1: USB disconnect, device number 36 [ 1308.755302][T14018] delete_channel: no stack [ 1309.431832][ T29] audit: type=1400 audit(1726607377.436:1071): avc: denied { mount } for pid=14051 comm="syz.4.2101" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1309.532284][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.561329][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.605474][T13970] bridge_slave_0: entered allmulticast mode [ 1309.668697][T13970] bridge_slave_0: entered promiscuous mode [ 1309.712606][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.771005][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.789321][T13970] bridge_slave_1: entered allmulticast mode [ 1309.845214][T13970] bridge_slave_1: entered promiscuous mode [ 1309.887738][ T5224] usb 4-1: Cannot set MAC address [ 1309.901920][ T5224] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1310.052086][ T5224] usb 4-1: USB disconnect, device number 52 [ 1310.161304][T14061] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2103'. [ 1310.241573][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.332423][ T29] audit: type=1400 audit(1726607378.326:1072): avc: denied { unmount } for pid=13204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1310.381701][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.594309][T14066] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1310.602009][T14066] vhci_hcd: invalid port number 10 [ 1310.607936][T14066] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1310.631516][T14066] overlayfs: failed to resolve './file0': -2 [ 1311.807289][T13970] team0: Port device team_slave_0 added [ 1311.849147][T13970] team0: Port device team_slave_1 added [ 1313.354200][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.379877][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.475933][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.657356][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.664309][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.721604][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.202255][T13970] hsr_slave_0: entered promiscuous mode [ 1314.228897][ T9714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.243601][ T9714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.255597][ T9714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.265088][ T9714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.276179][ T9714] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1314.283971][ T9714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1314.305864][T14086] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2108'. [ 1314.320339][T13970] hsr_slave_1: entered promiscuous mode [ 1314.338194][T13970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.360549][T13970] Cannot create hsr debugfs directory [ 1315.687385][ T5224] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1315.890025][ T5224] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1315.898906][T14087] chnl_net:caif_netlink_parms(): no params data found [ 1315.910483][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1315.939114][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1315.966151][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1315.979523][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1315.989398][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.030141][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.041738][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.070549][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.082641][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.110210][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.119514][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.138128][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.146586][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.158399][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.159507][ T5274] kworker/1:3 (5274) used greatest stack depth: 20624 bytes left [ 1316.169567][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.185617][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.195883][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.207148][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.215449][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.226228][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.240368][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.250250][ T5224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1316.271044][ T5224] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1316.284421][ T5224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1316.298976][ T5224] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1316.317178][ T5224] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1316.320439][ T5226] Bluetooth: hci3: command tx timeout [ 1316.325616][ T5224] usb 4-1: Product: syz [ 1316.336602][ T5224] usb 4-1: Manufacturer: syz [ 1316.341733][ T5224] usb 4-1: SerialNumber: syz [ 1316.349277][ T5224] usb 4-1: config 0 descriptor?? [ 1316.363507][ T5224] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1316.464589][ T2962] bridge_slave_1: left allmulticast mode [ 1316.472669][ T2962] bridge_slave_1: left promiscuous mode [ 1316.492516][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.679818][ T2962] bridge_slave_0: left allmulticast mode [ 1316.685572][ T2962] bridge_slave_0: left promiscuous mode [ 1316.693502][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.028078][ T5226] Bluetooth: hci3: command tx timeout [ 1319.198699][ T5317] usb 4-1: USB disconnect, device number 53 [ 1319.384930][ T5317] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1319.447203][ T5278] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1320.410795][ T5278] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1320.462808][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.498187][ T5278] usb 5-1: config 0 descriptor?? [ 1320.632341][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.669031][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.722030][ T2962] bond0 (unregistering): Released all slaves [ 1320.757193][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.787816][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.795097][T14087] bridge_slave_0: entered allmulticast mode [ 1320.856757][T14087] bridge_slave_0: entered promiscuous mode [ 1321.066238][ T9714] Bluetooth: hci3: command tx timeout [ 1321.074231][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.543399][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.573835][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1321.604115][T14087] bridge_slave_1: entered allmulticast mode [ 1321.627654][ T5278] usb 5-1: can't set config #0, error -71 [ 1321.649860][T14087] bridge_slave_1: entered promiscuous mode [ 1321.688778][ T5278] usb 5-1: USB disconnect, device number 55 [ 1321.818266][ T2962] hsr_slave_0: left promiscuous mode [ 1321.858342][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1322.067638][ T2962] hsr_slave_1: left promiscuous mode [ 1322.089921][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.450829][ T29] audit: type=1107 audit(1726607390.176:1073): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='H=+,kce*MM;_)J~$C߾ fXHuAg,8XٯmHz|/?՟SZkQK(~IA(ݕZRb^ʤ<=VLP{YX}\Zd;闑"(_3U!@#Z&wj' [ 1322.483324][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.760148][ T8] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1322.777727][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.829441][ T8] usb 2-1: config 0 descriptor?? [ 1322.879446][ T8] rndis_host 2-1:0.0: skipping garbage [ 1322.907290][ T8] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 1322.969597][ T8] cdc_acm 2-1:0.0: skipping garbage [ 1322.986701][ T8] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 1323.000834][ T8] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 1323.008360][ T8] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1323.127006][ T9714] Bluetooth: hci3: command tx timeout [ 1323.362813][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.386479][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.427848][T14142] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2122'. [ 1324.461007][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 1324.565954][ T5317] usb 2-1: USB disconnect, device number 37 [ 1324.618035][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 1324.618713][T11612] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1325.737024][T11612] usb 4-1: Using ep0 maxpacket: 8 [ 1325.750701][T11612] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.766880][T11612] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.776672][T11612] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.832366][T11612] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.856170][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.866039][ T29] audit: type=1400 audit(1726607393.856:1074): avc: denied { connect } for pid=14154 comm="syz.1.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1325.900815][T11612] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1325.929728][T11612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.938648][ T29] audit: type=1400 audit(1726607393.856:1075): avc: denied { write } for pid=14154 comm="syz.1.2126" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1325.966099][ T29] audit: type=1326 audit(1726607393.922:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14154 comm="syz.1.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3ded7def9 code=0x0 [ 1325.999447][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.334002][T13970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1326.357873][T13970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1326.454668][T14087] team0: Port device team_slave_0 added [ 1326.495548][T14087] team0: Port device team_slave_1 added [ 1326.525658][T13970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1326.550976][T13970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1326.787514][T14158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.796261][T14158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.806091][T14158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.814893][T14158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1326.854800][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.862288][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.925267][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.008266][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.027733][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.053962][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.077187][T11612] usb 4-1: usb_control_msg returned -71 [ 1327.094074][T11612] usbtmc 4-1:16.0: can't read capabilities [ 1327.113406][T11612] usb 4-1: USB disconnect, device number 54 [ 1328.869917][T14087] hsr_slave_0: entered promiscuous mode [ 1328.877611][T14087] hsr_slave_1: entered promiscuous mode [ 1328.938280][ T9288] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1329.155714][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.166133][ T9288] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1329.186322][ T9288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.223547][ T9288] usb 2-1: config 0 descriptor?? [ 1329.326730][T13970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.399493][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.406742][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.086683][T14174] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1330.272512][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.288929][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.393833][ T29] audit: type=1400 audit(1726607398.442:1077): avc: denied { setopt } for pid=14178 comm="syz.3.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1331.271475][ T9288] usb 2-1: Cannot set MAC address [ 1331.290928][ T9288] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1331.309960][ T9288] usb 2-1: USB disconnect, device number 38 [ 1332.057820][T14191] ./file0: Can't lookup blockdev [ 1332.068423][T14191] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1332.076233][T14191] #PF: supervisor instruction fetch in kernel mode [ 1332.082711][T14191] #PF: error_code(0x0010) - not-present page [ 1332.088668][T14191] PGD 800000002a2cb067 P4D 800000002a2cb067 PUD 7d639067 PMD 0 [ 1332.096300][T14191] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN PTI [ 1332.102348][T14191] CPU: 1 UID: 0 PID: 14191 Comm: syz.1.2134 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1332.112753][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1332.122812][T14191] RIP: 0010:0x0 [ 1332.126277][T14191] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1332.133635][T14191] RSP: 0018:ffffc90003777a48 EFLAGS: 00010246 [ 1332.139710][T14191] RAX: 0000000000040000 RBX: ffffea0002fff440 RCX: ffffc90011bcb000 [ 1332.147686][T14191] RDX: 0000000000040000 RSI: ffffea0002fff440 RDI: 0000000000000000 [ 1332.155661][T14191] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1332.163630][T14191] R10: 0000000000000000 R11: ffffffff95d83ed0 R12: 1ffff920006eef4a [ 1332.171600][T14191] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0002fff440 [ 1332.179568][T14191] FS: 00007fb3dfc5c6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1332.188498][T14191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1332.195078][T14191] CR2: ffffffffffffffd6 CR3: 000000007d894000 CR4: 00000000003506f0 [ 1332.203064][T14191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1332.211037][T14191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1332.219008][T14191] Call Trace: [ 1332.222313][T14191] [ 1332.225240][T14191] ? show_regs+0x8c/0xa0 [ 1332.229499][T14191] ? __die+0x2c/0x80 [ 1332.233404][T14191] ? page_fault_oops+0x3b6/0xb80 [ 1332.238353][T14191] ? __pfx_page_fault_oops+0x10/0x10 [ 1332.243658][T14191] ? mark_held_locks+0x9f/0xe0 [ 1332.248431][T14191] ? do_user_addr_fault+0xa90/0x13f0 [ 1332.253729][T14191] ? rcu_is_watching+0x12/0xc0 [ 1332.258503][T14191] ? exc_page_fault+0x5c/0xc0 [ 1332.263185][T14191] ? asm_exc_page_fault+0x26/0x30 [ 1332.268221][T14191] filemap_read_folio+0xe5/0x2c0 [ 1332.273165][T14191] ? __pfx_filemap_read_folio+0x10/0x10 [ 1332.278707][T14191] ? __filemap_get_folio+0x2a1/0xae0 [ 1332.283993][T14191] do_read_cache_folio+0x203/0x540 [ 1332.289105][T14191] erofs_bread+0x34d/0x7e0 [ 1332.293527][T14191] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1332.299159][T14191] erofs_fc_fill_super+0x2b9/0x2500 [ 1332.304362][T14191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1332.310348][T14191] ? lockdep_init_map_type+0x16d/0x7d0 [ 1332.315900][T14191] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1332.321534][T14191] ? lockdep_init_map_type+0x16d/0x7d0 [ 1332.327004][T14191] ? shrinker_register+0x1a8/0x260 [ 1332.332111][T14191] ? sget_fc+0x808/0xc20 [ 1332.336354][T14191] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1332.341814][T14191] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1332.347449][T14191] get_tree_nodev+0xda/0x190 [ 1332.352038][T14191] erofs_fc_get_tree+0x110/0x1a0 [ 1332.356975][T14191] vfs_get_tree+0x8f/0x380 [ 1332.361397][T14191] path_mount+0x14e6/0x1f20 [ 1332.365901][T14191] ? __pfx_path_mount+0x10/0x10 [ 1332.370753][T14191] ? putname+0x12e/0x170 [ 1332.374999][T14191] ? putname+0x12e/0x170 [ 1332.379246][T14191] __x64_sys_mount+0x294/0x320 [ 1332.384007][T14191] ? __pfx___x64_sys_mount+0x10/0x10 [ 1332.389298][T14191] do_syscall_64+0xcd/0x250 [ 1332.393801][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.399704][T14191] RIP: 0033:0x7fb3ded7def9 [ 1332.404114][T14191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.423717][T14191] RSP: 002b:00007fb3dfc5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1332.432125][T14191] RAX: ffffffffffffffda RBX: 00007fb3def35f80 RCX: 00007fb3ded7def9 [ 1332.440094][T14191] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000180 [ 1332.448062][T14191] RBP: 00007fb3dedf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1332.456026][T14191] R10: 0000000000004806 R11: 0000000000000246 R12: 0000000000000000 [ 1332.463988][T14191] R13: 0000000000000000 R14: 00007fb3def35f80 R15: 00007ffcc56ef068 [ 1332.471962][T14191] [ 1332.474975][T14191] Modules linked in: [ 1332.478873][T14191] CR2: 0000000000000000 [ 1332.483019][T14191] ---[ end trace 0000000000000000 ]--- [ 1332.488462][T14191] RIP: 0010:0x0 [ 1332.491922][T14191] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1332.499275][T14191] RSP: 0018:ffffc90003777a48 EFLAGS: 00010246 [ 1332.505344][T14191] RAX: 0000000000040000 RBX: ffffea0002fff440 RCX: ffffc90011bcb000 [ 1332.513319][T14191] RDX: 0000000000040000 RSI: ffffea0002fff440 RDI: 0000000000000000 [ 1332.521285][T14191] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1332.529254][T14191] R10: 0000000000000000 R11: ffffffff95d83ed0 R12: 1ffff920006eef4a [ 1332.537221][T14191] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0002fff440 [ 1332.545185][T14191] FS: 00007fb3dfc5c6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1332.554115][T14191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1332.560696][T14191] CR2: ffffffffffffffd6 CR3: 000000007d894000 CR4: 00000000003506f0 [ 1332.568673][T14191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1332.576652][T14191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1332.585052][T14191] Kernel panic - not syncing: Fatal exception [ 1332.591468][T14191] Kernel Offset: disabled [ 1332.595780][T14191] Rebooting in 86400 seconds..