last executing test programs: 6m19.247364886s ago: executing program 2 (id=830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000064c0)={0x1e8, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xde}, @nested={0x1d0, 0x1, 0x0, 0x1, [@nested={0x1cc, 0xd6, 0x0, 0x1, [@nested={0x104, 0xa1, 0x0, 0x1, [@nested={0xf5, 0xbd, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x8c}, @generic="490b1ef2fdf447069ebadd7552c021747f1763d151fa1dd93114a452e2b71ae2e4f4505ff9c6b0d48ae0e69c60c07ca28345542dd17d3ff5f15ca80a4747a77f36510dd243cf59161bb8ad7225f6c34053d251bac6762724de29fc6aacf2ac4ead35f95037657e2e75ed8893fa0c6f3c94e69c10a963769efb3c86fd50932aa089ff5ef0ad04ffc60773af4dbc8b3f3b8489252ff2f8315d", @nested={0x4, 0x141}, @nested={0x4, 0x4e}, @typed={0x8, 0xa4, 0x0, 0x0, @fd}, @generic="87baed52ba4268803ccb4b44d488e76653e0af2e396c84225b79e4171c7ee60f8066db1ee88fed57f4c5f916d1e09fb12d6d75072b8e43a9b107f09e78b50c1f6c"]}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0xfff}]}, @nested={0xc3, 0x59, 0x0, 0x1, [@generic="1abe96998ca861a3f8b4138d4289b26a29762e76e23e98a1cde1bb346c88eb8f", @generic="cd2dddc7d3c797fb27fb64a89e6174f96c13b9194fc3b7fd3fc7bda2540f8fb60f704d9ddd549d935b5ca8532d2b84406c80fd20d8ddc2a6c11c49e4285c5430972d13ee2faa75cd0628af9a25310e6fae7b805600543420406acf853c5557eafe3c2a584c4ecba4597f10e9ee30a8c1b89efa9f678bd89c807ff319ae9c6f6035b8e549e07813601daa7caae9d476a20c173aaea615358ab1358f", @nested={0x4, 0xdf}]}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 6m16.316360256s ago: executing program 2 (id=840): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x8181) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) recvmmsg$unix(r2, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000043, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) iopl(0x3) semget$private(0x0, 0x7, 0x195) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f0000000080)=""/91, 0x5b}], 0x2}, 0x40002000) sync_file_range(r4, 0x5, 0x6, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) 6m15.003778937s ago: executing program 2 (id=850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b00", @ANYRES32=r3, @ANYBLOB="351c4e755fcb098256d82618cc4706a490b563d1a837b2c075631961393a31eb1d3d0c28f2bf55aabddd97ef791f69da8e98f7e7f0663838f02f1a8eac80b3965304269e3af354244559"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 6m13.758506831s ago: executing program 2 (id=857): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000080)='\x00', &(0x7f0000000140)='@\').[\x0e%(\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000540)={[&(0x7f0000000340)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='.\'&&\x00', &(0x7f0000000500)='\x00']}, 0x800) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r4, &(0x7f0000000680)='net/sockstat\x00') r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}}) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x2000004, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000600)="11f7dfeaf316426b63e6534b0479b0ebe7a866aaa46a8dcb3c1b7bc099f0756dfc1b55807f1d08ca096343e794da90a12c75f19f10cefd9251022c3cb2065dae5617e086bb06357d", 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) io_uring_enter(r5, 0x47bc, 0xf5, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x9, 0x800, 0x74, 0xf, [0x3, 0x8000000000000001, 0x3, 0x4, 0x2, 0x2]}) 6m12.148841425s ago: executing program 2 (id=867): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0xef0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xfb5) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xba99b000) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) r5 = fsopen(&(0x7f00000000c0)='logfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xf) unlinkat(r6, &(0x7f0000000080)='./file0\x00', 0x200) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) 6m11.73741589s ago: executing program 2 (id=869): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc0354788", 0x6b, 0x4c041, 0x0, 0x0) 6m11.529460155s ago: executing program 32 (id=869): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc0354788", 0x6b, 0x4c041, 0x0, 0x0) 3m5.710416693s ago: executing program 0 (id=1483): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8) close(0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = syz_open_dev$media(&(0x7f0000000240), 0x4, 0x50280) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x6000, @fd=r5, 0x4d91, 0x0, 0x0, 0x10, 0x0, {0x1}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x7fffffffffffffff, 0x400000) ioctl$sock_netrom_SIOCDELRT(r10, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 3m4.666739921s ago: executing program 0 (id=1487): socket$netlink(0x10, 0x3, 0x5) io_setup(0x1, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x27b6, 0x0, 0x52, 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x217) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) io_setup(0x81, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000340)='p', 0x300}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0xfffffffffffffedf) socket(0x23, 0x5, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002240)="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", 0x2000, &(0x7f0000001800)={&(0x7f00000002c0)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x4, 0x480000, 0x7c72, 0x1e1f, 0x3, 0x0, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7fff}}, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x21}}, &(0x7f00000003c0)={0x18, 0x0, 0xfffffffffffffffc, {0x7}}, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x8, {0x8}}, &(0x7f0000000480)={0x28, 0x0, 0x60c, {{0x8, 0x5, 0x2}}}, &(0x7f00000004c0)={0x60, 0x0, 0xa06d, {{0x6, 0x8, 0x35, 0x6c745c7c, 0x800, 0x80000001, 0x7, 0x2b7}}}, &(0x7f0000000540)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000000580)={0x11, 0x0, 0x6, {'\x00'}}, &(0x7f00000005c0)={0x20, 0x0, 0x6, {0x0, 0x9}}, &(0x7f0000000880)={0x78, 0xfffffffffffffff5, 0x1, {0x10, 0xf0000000, 0x0, {0x2, 0x6, 0x68a6, 0x5, 0x8, 0x6, 0x8, 0xc8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8, 0xc}}}, &(0x7f0000000a00)={0x90, 0x0, 0x5, {0x2, 0x0, 0x0, 0x7, 0x68f0, 0xe40, {0x6, 0x0, 0x4, 0x0, 0x8000, 0xe, 0x7, 0x80000001, 0x7, 0x6000, 0xfffffffb, 0x0, 0x0, 0x2, 0x3}}}, &(0x7f0000000ac0)={0x128, 0x0, 0x4, [{0x6, 0x800, 0x8, 0x3, 'nl80211\x00'}, {0x6, 0x498, 0x8, 0x3, 'nl80211\x00'}, {0x3, 0x0, 0xf, 0x1, '/dev/sequencer\x00'}, {0x6, 0xcb52, 0x8, 0x5, 'nl80211\x00'}, {0x0, 0xfffffffffffffffa, 0x8, 0x9, 'nl80211\x00'}, {0x1, 0xff, 0xf, 0x6, '/dev/cpu/#/msr\x00'}, {0x6, 0x4, 0x1, 0x2, '\x00'}, {0x5, 0x3, 0xf, 0x7, '/dev/cpu/#/msr\x00'}]}, &(0x7f0000001140)={0x3d0, 0x0, 0xfffffffffffff37f, [{{0x0, 0x3, 0x6, 0x400000000000000, 0x80000000, 0x101, {0x3, 0x5, 0x1, 0x4, 0x5, 0x78, 0x3, 0x7, 0x618, 0xc000, 0x101, 0xffffffffffffffff, 0x0, 0x81, 0x4}}, {0x6, 0x100, 0xf, 0x5, '/dev/sequencer\x00'}}, {{0x1, 0x3, 0x8, 0x34a, 0x3, 0x0, {0x0, 0x5, 0x4e2b, 0x6, 0x5, 0x80000000, 0x4, 0x7, 0x7ff, 0x1000, 0x9, 0x0, 0xee01, 0x1800000, 0x3}}, {0x5, 0x8, 0x2, 0x2, '@+'}}, {{0x4, 0x1, 0x8, 0x1, 0xffffffff, 0x7ff, {0x5, 0x0, 0x2, 0x1, 0x2, 0x3, 0x0, 0xa607, 0x7, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x5}}, {0x4, 0x2db, 0x8, 0x3, 'nl80211\x00'}}, {{0x0, 0x1, 0x7f, 0x6, 0x7fffffff, 0x4, {0x4, 0x8bb, 0x2, 0x7ff, 0x3, 0x8, 0x7, 0x6c, 0x3, 0x6000, 0x33ef5352, 0x0, 0x0, 0xfffffff7, 0x7bb4}}, {0x6, 0x4, 0x0, 0x9}}, {{0x2, 0x0, 0xc5, 0x7, 0x4, 0x0, {0x6, 0x7fffffffffffffff, 0x2, 0x4, 0x3, 0x1, 0x4, 0x10000, 0x0, 0x8000, 0x9, 0x0, 0x0, 0xed}}, {0x2, 0x0, 0x0, 0x5000}}, {{0x0, 0x3, 0xad3ea51, 0xe, 0x4, 0x5, {0x4, 0x1, 0xfffffffffffff800, 0x80, 0x9, 0xbce9, 0x3, 0x5, 0x2, 0xc000, 0x1, 0x0, 0x0, 0x13011fc7, 0x7ff}}, {0x5, 0xc, 0xf, 0x9, '/dev/cpu/#/msr\x00'}}]}, &(0x7f00000015c0)={0xa0, 0xffffffffffffffda, 0x573d, {{0x6, 0x2, 0xe, 0x100000001, 0x9, 0x1, {0x1, 0xc, 0x241, 0x15, 0xb, 0x8001, 0xfffffffc, 0xec09, 0x3, 0x4000, 0x200, 0x0, 0x0, 0x5, 0x4}}}}, &(0x7f0000001680)={0x20, 0x0, 0x100, {0xfff, 0x4, 0x7, 0x2}}, &(0x7f00000016c0)={0x130, 0x0, 0x1c0000000000000, {0xffffffff, 0x9, 0x0, '\x00', {0x400, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1000, '\x00', 0xffffffffffffff7f, 0xf, 0x0, 0x0, {0x0, 0x44cda4ca}, {0x7fff, 0x1000}, {0x40}, {0x80000000, 0x9}, 0x3ff, 0x80000001, 0x530, 0x3}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3m4.044622323s ago: executing program 0 (id=1490): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0xa) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0], 0x20000600}}, 0x0) 3m3.933942079s ago: executing program 0 (id=1491): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f00000004c0)="0bf5c5748a60", 0x6}], 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xfff3, 0xe}, {0xa, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2081}, 0x4010) creat(&(0x7f0000000040)='./file0\x00', 0x111) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 3m3.792956273s ago: executing program 0 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 3m3.288687652s ago: executing program 0 (id=1496): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408db, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408db, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}, 0x207d) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x10, 0x460e, 0x3) 8.554943061s ago: executing program 6 (id=2133): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) acct(&(0x7f00000005c0)='./cgroup\x00') socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/31, 0x1f) 8.388568002s ago: executing program 4 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000007c0)="1c", 0x1, 0x48015, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 6.833373321s ago: executing program 4 (id=2136): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07040514f9c9000171a925b3f418c44175a573142542288a442134281e7768e0b4fa9efd7fa674c2f4615440a3199a"], 0x8) 6.805570309s ago: executing program 4 (id=2137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000180)=0x10) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x40045b17, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = socket$kcm(0x10, 0x2, 0x10) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.85658176s ago: executing program 3 (id=2141): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 5.712989359s ago: executing program 3 (id=2142): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1002, 0x1, 0x11, r0, 0x82000000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) 5.585223465s ago: executing program 3 (id=2143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 4.968004746s ago: executing program 6 (id=2146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x5a12c0, 0xec) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 4.562489638s ago: executing program 5 (id=2147): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') lseek(0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10004c62, 0x203, 0x7ff, 0x80, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 4.498757064s ago: executing program 1 (id=2148): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}}}, 0x84) 4.152778646s ago: executing program 3 (id=2149): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f0000001880)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}}, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)={0x0, r2}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)={0x10000000}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) 3.440250074s ago: executing program 5 (id=2150): syz_open_dev$loop(0x0, 0x100000001, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) migrate_pages(r0, 0x4, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000880), 0x1) 2.958698963s ago: executing program 1 (id=2151): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e34893"], 0xfdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.930004187s ago: executing program 6 (id=2152): r0 = userfaultfd(0x80001) read(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r2, 0x0, 0x0, 0xf) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000140)=0x2) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r4, 0x9}) 2.804797417s ago: executing program 1 (id=2153): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 2.674057289s ago: executing program 6 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) write$tun(r1, 0x0, 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0xa, 0x20}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 2.631025179s ago: executing program 6 (id=2155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x34, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4e, {0x4c, "28f364941c1d80a4fba84f4e8f62ca9379207bc7305248606bcdc2c3f6491fc4e7f1525f624dca5220c42d69e0531a46eb6e83c433bf7324e75d681a3c1d0892ebaa4a632bfe5628aef840dd"}}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.240933692s ago: executing program 4 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.192500135s ago: executing program 3 (id=2157): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x207d) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x10, 0x460e, 0x3) 2.182160929s ago: executing program 4 (id=2158): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/85, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 1.932675609s ago: executing program 5 (id=2159): socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 915.034104ms ago: executing program 3 (id=2160): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 876.524423ms ago: executing program 5 (id=2161): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 156.498066ms ago: executing program 1 (id=2162): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 28.673069ms ago: executing program 1 (id=2163): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e34893"], 0xfdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 28.050829ms ago: executing program 4 (id=2164): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) 0s ago: executing program 1 (id=2165): fanotify_init(0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') kernel console output (not intermixed with test programs): syz.1.1631" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 566.414954][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 566.432518][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 566.462796][T12244] netlink: 'syz.5.1633': attribute type 3 has an invalid length. [ 566.485191][T12244] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1633'. [ 566.784170][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 566.803220][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 566.855621][T12258] netlink: 810 bytes leftover after parsing attributes in process `syz.6.1634'. [ 566.881046][ T30] audit: type=1326 audit(1771235239.511:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.6.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 567.041949][T12246] ceph: No mds server is up or the cluster is laggy [ 567.176879][ T30] audit: type=1326 audit(1771235239.511:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.6.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 567.203689][ T30] audit: type=1326 audit(1771235239.511:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.6.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 567.228970][ T30] audit: type=1400 audit(1771235239.605:7720): avc: denied { remount } for pid=12252 comm="syz.6.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 567.283831][ T30] audit: type=1326 audit(1771235239.810:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.6.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 567.308211][ T30] audit: type=1326 audit(1771235239.810:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.6.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 568.191784][T12266] JFS: charset not found [ 569.174742][T12285] overlayfs: overlapping lowerdir path [ 571.248768][T12305] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 572.489155][ T30] audit: type=1400 audit(1771235244.310:7723): avc: denied { watch_mount } for pid=12296 comm="syz.1.1646" path="/proc/1206/task" dev="proc" ino=37896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 572.523650][T12304] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 572.639424][T12316] Invalid logical block size (64251) [ 573.222092][T12321] FAULT_INJECTION: forcing a failure. [ 573.222092][T12321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.235286][T12321] CPU: 0 UID: 0 PID: 12321 Comm: syz.6.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.235328][T12321] Tainted: [L]=SOFTLOCKUP [ 573.235334][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.235344][T12321] Call Trace: [ 573.235350][T12321] [ 573.235357][T12321] dump_stack_lvl+0x100/0x190 [ 573.235387][T12321] should_fail_ex.cold+0x5/0xa [ 573.235409][T12321] _copy_from_user+0x2e/0xd0 [ 573.235429][T12321] timerfd_ioctl+0x101/0x2b0 [ 573.235457][T12321] ? __pfx_timerfd_ioctl+0x10/0x10 [ 573.235478][T12321] ? selinux_file_ioctl+0xb4/0x290 [ 573.235505][T12321] ? __pfx_timerfd_ioctl+0x10/0x10 [ 573.235528][T12321] __x64_sys_ioctl+0x18e/0x210 [ 573.235553][T12321] do_syscall_64+0x106/0xf80 [ 573.235575][T12321] ? clear_bhb_loop+0x40/0x90 [ 573.235597][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.235615][T12321] RIP: 0033:0x7fb55419bf79 [ 573.235630][T12321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.235647][T12321] RSP: 002b:00007fb5523d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.235664][T12321] RAX: ffffffffffffffda RBX: 00007fb554416090 RCX: 00007fb55419bf79 [ 573.235675][T12321] RDX: 0000200000000040 RSI: 0000000040085400 RDI: 0000000000000004 [ 573.235686][T12321] RBP: 00007fb5523d5090 R08: 0000000000000000 R09: 0000000000000000 [ 573.235695][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.235705][T12321] R13: 00007fb554416128 R14: 00007fb554416090 R15: 00007fffb68e33e8 [ 573.235729][T12321] [ 574.070402][T12328] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 574.169641][ T5887] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 574.375276][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 574.393911][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 574.416387][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 574.462054][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 574.494252][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 574.515692][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 574.533239][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 574.543054][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 574.561050][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 574.598846][ T5887] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 574.624042][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.649486][ T5887] usb 4-1: Product: syz [ 574.654772][ T5887] usb 4-1: Manufacturer: syz [ 574.660286][ T5887] usb 4-1: SerialNumber: syz [ 574.696250][ T5887] usb 4-1: config 0 descriptor?? [ 574.711725][T12326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.731996][T12326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.858061][ T5887] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.070664][T12333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.221507][T12336] kvm: pic: level sensitive irq not supported [ 575.221832][T12336] kvm: pic: non byte read [ 575.244353][T12336] kvm: pic: level sensitive irq not supported [ 575.244420][T12336] kvm: pic: non byte read [ 575.490395][ T10] usb 4-1: USB disconnect, device number 62 [ 575.929663][ T30] audit: type=1400 audit(1771235248.070:7724): avc: denied { watch watch_reads } for pid=12344 comm="syz.1.1656" path="/proc/1216/map_files" dev="proc" ino=38991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 576.082700][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 576.084487][ T793] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 576.262303][T12361] netlink: 'syz.5.1661': attribute type 11 has an invalid length. [ 576.270636][T12361] netlink: 'syz.5.1661': attribute type 4 has an invalid length. [ 576.279065][T12361] netlink: 199780 bytes leftover after parsing attributes in process `syz.5.1661'. [ 576.296939][ T793] usb 7-1: Using ep0 maxpacket: 8 [ 576.306173][ T793] usb 7-1: config 129 has an invalid interface number: 234 but max is 0 [ 576.315131][ T793] usb 7-1: config 129 has no interface number 0 [ 576.323704][ T793] usb 7-1: New USB device found, idVendor=10d2, idProduct=62a3, bcdDevice= 3.cd [ 576.333286][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.345918][ T793] usb 7-1: Product: syz [ 576.350154][ T793] usb 7-1: Manufacturer: syz [ 576.355331][ T793] usb 7-1: SerialNumber: syz [ 576.876034][ T793] usblcd 7-1:129.234: USBLCD model not supported. [ 576.911645][ T793] usb 7-1: USB disconnect, device number 4 [ 577.185563][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 577.359407][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.370398][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.379673][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 577.390067][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.404362][ T10] usb 4-1: config 0 descriptor?? [ 577.799084][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.905593][ T5941] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 578.925788][T12396] netlink: 'syz.5.1672': attribute type 5 has an invalid length. [ 579.206493][ T5941] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 579.214693][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12288, setting to 64 [ 579.461372][ T5923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 579.636734][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 579.709697][ T2686] block nbd0: Possible stuck request ffff888027a88000: control (read@0,1024B). Runtime 180 seconds [ 579.720510][ T2686] block nbd0: Possible stuck request ffff888027a88200: control (read@1024,1024B). Runtime 180 seconds [ 579.731488][ T2686] block nbd0: Possible stuck request ffff888027a88400: control (read@2048,1024B). Runtime 180 seconds [ 579.742489][ T2686] block nbd0: Possible stuck request ffff888027a88600: control (read@3072,1024B). Runtime 180 seconds [ 579.758900][ T5923] usb 2-1: config 129 has an invalid interface number: 234 but max is 0 [ 579.773497][ T5923] usb 2-1: config 129 has no interface number 0 [ 579.791640][ T5941] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 579.813392][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.824520][ T5923] usb 2-1: New USB device found, idVendor=10d2, idProduct=62a3, bcdDevice= 3.cd [ 579.833804][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.845515][ T5941] usb 5-1: Product: syz [ 579.849759][ T5941] usb 5-1: Manufacturer: syz [ 579.854401][ T5923] usb 2-1: Product: syz [ 579.861823][ T5941] usb 5-1: SerialNumber: syz [ 579.867683][ T5923] usb 2-1: Manufacturer: syz [ 579.883910][ T5941] usb 5-1: config 0 descriptor?? [ 579.889405][ T5923] usb 2-1: SerialNumber: syz [ 579.895701][ T5941] hub 5-1:0.0: bad descriptor, ignoring hub [ 579.909293][ T5941] hub 5-1:0.0: probe with driver hub failed with error -5 [ 579.925500][ T5941] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 580.125012][ T5923] usblcd 2-1:129.234: USBLCD model not supported. [ 580.171886][ T5941] usb 4-1: USB disconnect, device number 63 [ 580.561154][T11300] usb 5-1: USB disconnect, device number 56 [ 580.567161][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 580.599811][ T5923] usb 2-1: USB disconnect, device number 42 [ 580.700469][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 581.732876][T12423] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 583.610306][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 583.780304][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 583.815441][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 584.112075][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 584.175892][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 584.384007][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 584.395201][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 584.407017][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 584.439211][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 584.751287][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 584.784632][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 584.809563][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.892328][ T10] usb 6-1: Product: syz [ 584.902202][ T10] usb 6-1: Manufacturer: syz [ 584.907526][ T10] usb 6-1: SerialNumber: syz [ 584.956725][ T10] usb 6-1: config 0 descriptor?? [ 584.989068][T12448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 585.004576][T12448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 585.025493][ T30] audit: type=1400 audit(1771235256.582:7725): avc: denied { write } for pid=12476 comm="syz.3.1697" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 585.054165][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.576347][T11300] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 585.963151][T11300] usb 7-1: Using ep0 maxpacket: 8 [ 585.976240][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.019568][ T5878] usb 6-1: USB disconnect, device number 38 [ 586.100472][T11300] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 586.115293][T11300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.398764][T11300] usb 7-1: config 0 descriptor?? [ 586.445636][T12494] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1702'. [ 586.955601][ T5878] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 587.371008][T11300] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 587.875473][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 587.878866][T11300] usb 7-1: USB disconnect, device number 5 [ 587.962563][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 587.984456][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 588.003115][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.033611][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 588.091394][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 588.554270][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 588.575624][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 588.596916][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 588.633675][ T5878] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 588.645179][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.845051][ T5878] usb 6-1: Product: syz [ 588.849409][ T5878] usb 6-1: Manufacturer: syz [ 588.854091][ T5878] usb 6-1: SerialNumber: syz [ 588.881222][ T5878] usb 6-1: config 0 descriptor?? [ 588.887881][T12497] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 588.898506][T12497] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 588.910946][ T5878] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.939562][ T30] audit: type=1400 audit(1771235260.249:7726): avc: denied { wake_alarm } for pid=12524 comm="syz.4.1711" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.122440][T12527] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1711'. [ 589.237877][ T793] usb 6-1: USB disconnect, device number 39 [ 589.360852][T11300] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 589.533956][T11300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.547184][T11300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.599621][T11300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.657711][T11300] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.698191][T11300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.738001][T11300] usb 4-1: config 0 descriptor?? [ 589.881900][T12543] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1716'. [ 590.239809][T11300] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 590.816438][ C1] plantronics 0003:047F:FFFF.0011: hid_field_extract() called with n (132) > 32! (syz.6.1717) [ 591.229864][T12561] sit0: entered allmulticast mode [ 591.311236][ T5878] usb 4-1: USB disconnect, device number 64 [ 591.451374][T12559] bond1: entered promiscuous mode [ 591.481602][T12559] bond1: entered allmulticast mode [ 591.487149][T12559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.204583][ T5878] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 592.750745][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 592.765429][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 593.011418][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 593.070443][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 593.109885][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 593.166675][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 593.241624][T11300] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 593.361321][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 593.404077][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 593.455444][T11300] usb 7-1: Using ep0 maxpacket: 8 [ 593.455446][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 593.457266][ T5878] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 593.553371][T11300] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.578200][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.641808][ T5878] usb 2-1: Product: syz [ 593.680847][ T5878] usb 2-1: Manufacturer: syz [ 593.755242][ T5878] usb 2-1: SerialNumber: syz [ 593.892746][ T5878] usb 2-1: config 0 descriptor?? [ 593.956081][T12574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.039484][T12574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.234760][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.482805][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 594.541629][T12600] FAULT_INJECTION: forcing a failure. [ 594.541629][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.554987][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.4.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.555017][T12600] Tainted: [L]=SOFTLOCKUP [ 594.555023][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.555035][T12600] Call Trace: [ 594.555041][T12600] [ 594.555049][T12600] dump_stack_lvl+0x100/0x190 [ 594.555093][T12600] should_fail_ex.cold+0x5/0xa [ 594.555118][T12600] _copy_to_user+0x32/0xd0 [ 594.555140][T12600] simple_read_from_buffer+0xcb/0x170 [ 594.555168][T12600] proc_fail_nth_read+0x1af/0x230 [ 594.555189][T12600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.555219][T12600] ? rw_verify_area+0xce/0x6d0 [ 594.555240][T12600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.555269][T12600] vfs_read+0x1e4/0xb30 [ 594.555296][T12600] ? __pfx_vfs_read+0x10/0x10 [ 594.555318][T12600] ? __fget_files+0x215/0x3d0 [ 594.555351][T12600] ? __fget_files+0x21f/0x3d0 [ 594.555385][T12600] ksys_read+0x12a/0x250 [ 594.555408][T12600] ? __pfx_ksys_read+0x10/0x10 [ 594.555439][T12600] do_syscall_64+0x106/0xf80 [ 594.555461][T12600] ? clear_bhb_loop+0x40/0x90 [ 594.555483][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.555501][T12600] RIP: 0033:0x7fac2355c84e [ 594.555517][T12600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.555534][T12600] RSP: 002b:00007fac217d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.555551][T12600] RAX: ffffffffffffffda RBX: 00007fac217d56c0 RCX: 00007fac2355c84e [ 594.555569][T12600] RDX: 000000000000000f RSI: 00007fac217d50a0 RDI: 000000000000000d [ 594.555580][T12600] RBP: 00007fac217d5090 R08: 0000000000000000 R09: 0000000000000000 [ 594.555591][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.555602][T12600] R13: 00007fac23816128 R14: 00007fac23816090 R15: 00007fff12a739d8 [ 594.555627][T12600] [ 594.766195][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.776046][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 594.787185][T11300] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 594.797248][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 594.807403][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 594.818810][T11300] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 594.887865][T11300] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 594.896990][T11300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.907406][T11300] usb 7-1: Product: syz [ 594.913194][T11300] usb 7-1: Manufacturer: syz [ 594.917856][T11300] usb 7-1: SerialNumber: syz [ 595.012722][T11300] usb 7-1: config 0 descriptor?? [ 595.096377][T12589] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 595.142107][T12589] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 595.325179][T11300] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.370305][ T5878] usb 2-1: USB disconnect, device number 43 [ 595.934001][T11300] usb 7-1: USB disconnect, device number 6 [ 596.053688][T12614] syzkaller0: entered promiscuous mode [ 596.059173][T12614] syzkaller0: entered allmulticast mode [ 596.470591][ T7041] udevd[7041]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 598.185036][T12633] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1739'. [ 598.526582][T12636] syzkaller0: entered promiscuous mode [ 598.532118][T12636] syzkaller0: entered allmulticast mode [ 598.629909][T12636] 0: reclassify loop, rule prio 0, protocol 700 [ 598.843679][T11300] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 599.142841][T11300] usb 5-1: Using ep0 maxpacket: 8 [ 599.146124][T12646] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 599.171069][T11300] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.272685][T11300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.346797][T11300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 599.551393][T11300] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 599.577416][T11300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.647835][T12656] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8933, magic 89 != 6b] [ 599.660353][ T30] audit: type=1400 audit(1771235269.267:7727): avc: denied { read } for pid=12651 comm="syz.3.1746" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 599.720611][T11300] usb 5-1: config 0 descriptor?? [ 599.731508][T12629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 599.958802][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.971065][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.990556][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.009109][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.083581][ T5887] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 600.105060][ T5941] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 600.254569][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 600.263414][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 600.271262][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 600.279750][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 600.292301][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 600.302296][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 600.360194][ T5941] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 600.369423][ T5941] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 600.379070][ T5941] usb 2-1: config 0 has no interface number 0 [ 600.385629][ T5887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 600.398299][ T5941] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.410070][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 600.419870][ T5941] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.431044][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 600.442220][ T5941] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 600.452214][ T5887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 600.463922][ T5941] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 600.477021][ T5887] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 600.487873][ T5941] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 600.496480][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.504589][ T5941] usb 2-1: Product: syz [ 600.508858][ T5887] usb 7-1: Product: syz [ 600.513173][ T5941] usb 2-1: Manufacturer: syz [ 601.644694][ T5887] usb 7-1: Manufacturer: syz [ 601.652470][ T5941] usb 2-1: config 0 descriptor?? [ 601.657645][ T5887] usb 7-1: SerialNumber: syz [ 601.666114][ T5887] usb 7-1: config 0 descriptor?? [ 601.674492][T12664] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 601.688701][T12664] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 601.703090][ T5887] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.837101][T11300] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 601.874260][T11300] usb 5-1: USB disconnect, device number 57 [ 602.046300][ T5858] usb 7-1: USB disconnect, device number 7 [ 602.076517][ T5878] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 602.323699][ T5878] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 602.372523][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.392401][ T5878] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.406762][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.418644][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.431202][ T5878] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 602.439978][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.451088][ T5878] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.478256][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.499910][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.532607][ T5878] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 602.550855][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.573095][ T5878] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.598346][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.620505][ T5878] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.654460][ T5878] usb 6-1: string descriptor 0 read error: -22 [ 602.671033][ T5878] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 602.674562][ T5941] usb 2-1: USB disconnect, device number 44 [ 602.680083][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.728632][ T5878] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.972646][ T5878] usb 6-1: USB disconnect, device number 40 [ 603.119687][ T5941] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 603.270009][ T5858] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 603.290966][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 603.298029][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.307393][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 603.319462][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.329246][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 603.340986][ T5941] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 603.352534][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 603.362625][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 603.374203][ T5941] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 603.757280][ T5941] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 603.766600][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.774747][ T5941] usb 4-1: Product: syz [ 603.779870][ T5941] usb 4-1: Manufacturer: syz [ 603.786771][ T5941] usb 4-1: SerialNumber: syz [ 603.792987][ T5941] usb 4-1: config 0 descriptor?? [ 603.798796][T12684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.806440][T12684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.815875][ T5941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.835887][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 603.843154][ T5858] usb 7-1: unable to get BOS descriptor or descriptor too short [ 603.855986][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 603.881599][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.918230][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 603.938642][ T5858] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 603.951203][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 603.961105][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 603.975640][ T5858] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 604.135550][T12700] overlay: Unknown parameter '/' [ 604.199697][ T30] audit: type=1400 audit(1771235273.458:7728): avc: denied { mount } for pid=12697 comm="syz.5.1759" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 604.207058][ T5858] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 604.391847][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.399903][ T5858] usb 7-1: Product: syz [ 604.419084][ T5858] usb 7-1: Manufacturer: syz [ 604.785195][ T5858] usb 7-1: SerialNumber: syz [ 604.824119][ T30] audit: type=1400 audit(1771235274.103:7729): avc: denied { unmount } for pid=9279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 605.103894][ T5858] usb 7-1: config 0 descriptor?? [ 605.140432][ T10] usb 4-1: USB disconnect, device number 65 [ 605.189864][T12686] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 605.222613][T12686] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 605.271186][ T5858] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.679371][ T30] audit: type=1400 audit(1771235274.908:7730): avc: denied { mount } for pid=12724 comm="syz.4.1765" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 605.712873][ T30] audit: type=1400 audit(1771235274.936:7731): avc: denied { search } for pid=12724 comm="syz.4.1765" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 605.944387][ T5858] usb 7-1: USB disconnect, device number 8 [ 606.131223][ T30] audit: type=1400 audit(1771235274.936:7732): avc: denied { search } for pid=12724 comm="syz.4.1765" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 606.220099][ T30] audit: type=1400 audit(1771235274.936:7733): avc: denied { search } for pid=12724 comm="syz.4.1765" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 606.242445][ T30] audit: type=1400 audit(1771235274.936:7734): avc: denied { search } for pid=12724 comm="syz.4.1765" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 606.265601][ T30] audit: type=1400 audit(1771235274.936:7735): avc: denied { add_name } for pid=12724 comm="syz.4.1765" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 606.265830][ T30] audit: type=1400 audit(1771235274.936:7736): avc: denied { create } for pid=12724 comm="syz.4.1765" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 606.838663][T11300] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 607.059961][T12743] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 607.070164][T12743] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 607.112787][T12711] syz.1.1761 (12711): drop_caches: 2 [ 607.246707][T11300] usb 4-1: Using ep0 maxpacket: 16 [ 607.253895][T11300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.400776][T11300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.412219][T11300] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 607.819291][T11300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.867510][T11300] usb 4-1: config 0 descriptor?? [ 608.248074][T12758] netlink: 'syz.6.1773': attribute type 2 has an invalid length. [ 608.256014][T12758] netlink: 'syz.6.1773': attribute type 1 has an invalid length. [ 608.659282][T11300] usbhid 4-1:0.0: can't add hid device: -71 [ 608.693514][T11300] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 608.749982][T11300] usb 4-1: USB disconnect, device number 66 [ 608.931884][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.938396][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 609.062118][T12768] delete_channel: no stack [ 609.124705][T12768] delete_channel: no stack [ 609.473819][T12768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12768 comm=syz.5.1778 [ 609.670202][T12783] loop7: detected capacity change from 0 to 7 [ 609.701633][ C1] blk_print_req_error: 10 callbacks suppressed [ 609.701653][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.717425][ C1] buffer_io_error: 10 callbacks suppressed [ 609.717436][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.735546][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.745257][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.755502][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.765133][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.775289][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.784938][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.796797][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.806448][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.815371][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.824977][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.833304][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.842865][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.850874][T12783] ldm_validate_partition_table(): Disk read failed. [ 609.858526][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.868158][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.876998][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.886734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.911914][T12783] Buffer I/O error on dev loop7, logical block 0, async page read [ 609.919982][T12783] Dev loop7: unable to read RDB block 0 [ 609.939672][T12783] loop7: unable to read partition table [ 609.959009][T12783] loop7: partition table beyond EOD, truncated [ 609.983147][T12783] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 612.336252][ T2686] block nbd0: Possible stuck request ffff888027a88000: control (read@0,1024B). Runtime 210 seconds [ 612.347131][ T2686] block nbd0: Possible stuck request ffff888027a88200: control (read@1024,1024B). Runtime 210 seconds [ 612.358140][ T2686] block nbd0: Possible stuck request ffff888027a88400: control (read@2048,1024B). Runtime 210 seconds [ 612.369147][ T2686] block nbd0: Possible stuck request ffff888027a88600: control (read@3072,1024B). Runtime 210 seconds [ 612.699890][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.707101][T12812] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.802430][T12815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.042987][ T5887] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 613.044723][ T5858] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 613.447018][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 613.453439][ T5887] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 613.484519][ T5887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.500381][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.510596][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.535669][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.545052][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 613.567403][ T5887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.622446][ T5887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.652119][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.662956][ T5858] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 614.306430][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.332628][ T5858] usb 5-1: Product: syz [ 614.347014][ T5858] usb 5-1: Manufacturer: syz [ 614.360510][ T5887] usb 4-1: GET_CAPABILITIES returned 0 [ 614.374383][ T5858] usb 5-1: SerialNumber: syz [ 614.375542][ T5887] usbtmc 4-1:16.0: can't read capabilities [ 614.431788][ T5858] usb 5-1: config 0 descriptor?? [ 614.438954][T12813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.754015][ T5878] usb 4-1: USB disconnect, device number 67 [ 614.773390][T12812] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 614.847337][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 614.867228][ T5858] powermate: unknown product id 0240 [ 614.892180][ T5858] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 614.920615][ T5858] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input52 [ 615.046360][ T10] usb 2-1: too many configurations: 88, using maximum allowed: 8 [ 615.066222][ C0] powermate: config urb returned -71 [ 615.072309][ C0] powermate: config urb returned -71 [ 615.078128][ C0] powermate: config urb returned -71 [ 615.083728][ C0] powermate: config urb returned -71 [ 615.094138][ T5858] usb 5-1: USB disconnect, device number 58 [ 615.100070][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 615.118495][ T10] usb 2-1: config index 0 descriptor too short (expected 72, got 29) [ 615.126809][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 615.143659][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 615.161832][ T10] usb 2-1: config index 1 descriptor too short (expected 72, got 29) [ 615.175844][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 615.190445][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 615.213567][ T10] usb 2-1: config index 2 descriptor too short (expected 72, got 29) [ 615.224344][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 615.244653][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 615.261779][ T10] usb 2-1: config index 3 descriptor too short (expected 72, got 29) [ 615.346389][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 615.384792][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 615.536580][ T10] usb 2-1: config index 4 descriptor too short (expected 72, got 29) [ 615.648282][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 615.780002][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 616.268826][ T10] usb 2-1: config index 5 descriptor too short (expected 72, got 29) [ 616.849924][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 616.982460][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 617.063283][ T10] usb 2-1: config index 6 descriptor too short (expected 72, got 29) [ 617.079983][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 617.116716][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 617.179252][ T10] usb 2-1: config index 7 descriptor too short (expected 72, got 29) [ 617.187349][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 617.220676][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 617.245105][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 617.263454][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.271547][ T10] usb 2-1: Product: syz [ 617.276363][T12859] FAULT_INJECTION: forcing a failure. [ 617.276363][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.290276][ T10] usb 2-1: Manufacturer: syz [ 617.294876][ T10] usb 2-1: SerialNumber: syz [ 617.332809][ T10] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 617.334343][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.4.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.334366][T12859] Tainted: [L]=SOFTLOCKUP [ 617.334372][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.334381][T12859] Call Trace: [ 617.334387][T12859] [ 617.334393][T12859] dump_stack_lvl+0x100/0x190 [ 617.334421][T12859] should_fail_ex.cold+0x5/0xa [ 617.334442][T12859] _copy_to_user+0x32/0xd0 [ 617.334461][T12859] bpf_test_finish.isra.0+0x452/0x660 [ 617.334482][T12859] ? __might_fault+0xc5/0x140 [ 617.334501][T12859] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 617.334523][T12859] ? _copy_from_user+0x59/0xd0 [ 617.334543][T12859] bpf_prog_test_run_xdp+0xa70/0x1670 [ 617.334571][T12859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 617.334597][T12859] ? fput+0x79/0x100 [ 617.334612][T12859] ? __bpf_prog_get+0x97/0x2a0 [ 617.334632][T12859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 617.334651][T12859] __sys_bpf+0x1725/0x4b90 [ 617.334669][T12859] ? __pfx___sys_bpf+0x10/0x10 [ 617.334683][T12859] ? proc_fail_nth_write+0x9f/0x220 [ 617.334700][T12859] ? find_held_lock+0x2b/0x80 [ 617.334723][T12859] ? find_held_lock+0x2b/0x80 [ 617.334741][T12859] ? ksys_write+0x190/0x250 [ 617.334766][T12859] ? __mutex_unlock_slowpath+0x15c/0x790 [ 617.334787][T12859] ? __fget_files+0x215/0x3d0 [ 617.334832][T12859] ? fput+0x79/0x100 [ 617.334847][T12859] ? ksys_write+0x1ac/0x250 [ 617.334867][T12859] ? __pfx_ksys_write+0x10/0x10 [ 617.334891][T12859] __x64_sys_bpf+0x7b/0xc0 [ 617.334906][T12859] ? lockdep_hardirqs_on+0x78/0x100 [ 617.334925][T12859] do_syscall_64+0x106/0xf80 [ 617.334942][T12859] ? clear_bhb_loop+0x40/0x90 [ 617.334960][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.334976][T12859] RIP: 0033:0x7fac2359bf79 [ 617.334990][T12859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.335005][T12859] RSP: 002b:00007fac217f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 617.335021][T12859] RAX: ffffffffffffffda RBX: 00007fac23815fa0 RCX: 00007fac2359bf79 [ 617.335032][T12859] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 617.335041][T12859] RBP: 00007fac217f6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.335051][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.335061][T12859] R13: 00007fac23816038 R14: 00007fac23815fa0 R15: 00007fff12a739d8 [ 617.335083][T12859] [ 617.722533][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1807'. [ 617.808119][ T793] usb 2-1: USB disconnect, device number 45 [ 617.969136][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 618.057006][T12873] loop2: detected capacity change from 0 to 7 [ 618.068660][T12873] Dev loop2: unable to read RDB block 7 [ 618.074217][T12873] loop2: unable to read partition table [ 618.080407][T12873] loop2: partition table beyond EOD, truncated [ 618.086562][T12873] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 618.197076][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1811'. [ 618.204178][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 618.230342][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 618.260258][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.282274][ T10] usb 5-1: config 0 descriptor?? [ 618.318817][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 618.493087][ T5865] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 618.632262][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 618.654524][T12883] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 618.670866][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 618.684397][ T5865] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 618.693750][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.703900][ T5865] usb 7-1: config 0 descriptor?? [ 618.711949][T12876] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 618.749721][ T5887] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 618.824247][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 618.832023][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 618.840711][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.850611][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.861497][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.872282][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.886015][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 618.895396][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.944967][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.959229][ T5887] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 618.969010][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.988142][ T5887] usb 6-1: config 0 descriptor?? [ 619.001889][ T5887] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 619.146743][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 619.172500][ T9] usbtmc 2-1:16.0: can't read capabilities [ 619.206634][ T5865] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 619.592528][ T10] gspca_sunplus: reg_r err -110 [ 619.607981][T12876] erspan1: entered allmulticast mode [ 619.622588][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 619.737449][T12878] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 619.744403][ T10] usb 2-1: USB disconnect, device number 46 [ 619.773987][ T793] usb 7-1: USB disconnect, device number 9 [ 620.464194][ T30] audit: type=1400 audit(1771235288.742:7737): avc: denied { read write } for pid=12898 comm="syz.6.1816" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 620.509082][ T30] audit: type=1400 audit(1771235288.742:7738): avc: denied { open } for pid=12898 comm="syz.6.1816" path="/46/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 621.441388][ T5865] usb 5-1: USB disconnect, device number 59 [ 621.597528][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.742021][ T5865] usb 6-1: USB disconnect, device number 41 [ 621.945793][ T793] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 621.956528][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 622.127551][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 622.134379][ T793] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 622.138984][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 622.143074][ T793] usb 5-1: config 0 has no interface number 0 [ 622.153893][ T5865] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 622.163454][ T793] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.179893][ T793] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 622.192782][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 622.192992][ T793] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.200866][ T10] usb 4-1: config 0 has no interface number 0 [ 622.200912][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.274426][ T793] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.291943][ T793] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 622.301274][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.310911][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 622.331622][ T793] usb 5-1: config 0 descriptor?? [ 622.340420][ T793] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 622.359175][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.396397][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 622.407188][ T5865] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 622.415335][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.434478][ T5865] usb 6-1: can't read configurations, error -71 [ 622.449552][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 622.470028][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.491924][ T10] usb 4-1: config 0 descriptor?? [ 622.518901][ T10] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 622.760854][T12937] kvm: pic: non byte write [ 623.404265][ T10] usb 5-1: USB disconnect, device number 60 [ 623.419970][T12941] kvm: pic: non byte write [ 623.433863][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 623.613639][ T5865] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 623.637250][ T793] usb 4-1: USB disconnect, device number 68 [ 623.660308][ T793] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 623.723600][T12945] Bluetooth: hci0: unsupported parameter 255 [ 623.729607][T12945] Bluetooth: hci0: unsupported parameter 255 [ 623.783426][T12949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1832'. [ 623.796947][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 623.802795][ T5820] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 623.813628][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 623.827659][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 623.839698][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 623.850953][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 623.866643][ T5865] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 623.876948][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 623.888878][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 623.900290][ T5865] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 623.912325][ T5865] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 623.921960][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.931576][ T5865] usb 6-1: Product: syz [ 623.935936][ T5865] usb 6-1: Manufacturer: syz [ 623.940509][ T5865] usb 6-1: SerialNumber: syz [ 623.946785][ T5865] usb 6-1: config 0 descriptor?? [ 623.952385][T12942] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 624.527808][T12942] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 624.540301][ T5865] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.731888][T12960] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 624.749626][ T30] audit: type=1400 audit(1771235292.746:7739): avc: denied { write } for pid=12959 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.025882][ T5865] usb 6-1: USB disconnect, device number 43 [ 625.343523][T12976] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1841'. [ 625.354984][T12975] Bluetooth: hci0: unsupported parameter 255 [ 625.361069][T12975] Bluetooth: hci0: unsupported parameter 255 [ 625.452386][ T793] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 625.741040][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 625.953934][ T793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.967377][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 625.978954][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 625.997659][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 626.010524][ T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 626.025636][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 626.036291][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 626.064654][ T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 626.142255][ T793] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 626.166022][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.198359][ T793] usb 4-1: Product: syz [ 626.210580][ T793] usb 4-1: Manufacturer: syz [ 626.218139][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 626.226109][ T793] usb 4-1: SerialNumber: syz [ 626.250590][ T793] usb 4-1: config 0 descriptor?? [ 626.293219][T12965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 626.312315][T12965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 626.341920][ T793] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.380029][T12997] syz.5.1848 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 626.614648][T13001] ªªªªªª: renamed from vlan0 [ 626.896379][ T5865] usb 4-1: USB disconnect, device number 69 [ 627.033356][ T5820] Bluetooth: hci3: Malformed LE Event: 0x0b [ 627.104936][T13004] netlink: 'syz.5.1849': attribute type 25 has an invalid length. [ 627.125212][T13004] netlink: 'syz.5.1849': attribute type 28 has an invalid length. [ 627.573716][T13018] netlink: 'syz.1.1854': attribute type 2 has an invalid length. [ 627.600963][T13018] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 627.631529][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 628.552594][ T5878] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 628.596931][ T30] audit: type=1400 audit(1771235296.338:7740): avc: denied { ioctl } for pid=13028 comm="syz.6.1859" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 628.723041][ T5878] usb 4-1: config 0 has no interfaces? [ 628.744337][ T5878] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 628.775159][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.890525][ T5878] usb 4-1: config 0 descriptor?? [ 629.122132][T13024] binder: 13023:13024 ioctl c00c6f3e 200000000180 returned -22 [ 629.133764][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 629.148785][ T5878] usb 4-1: USB disconnect, device number 70 [ 629.154933][T13049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1867'. [ 629.155037][T13049] FAULT_INJECTION: forcing a failure. [ 629.155037][T13049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.199634][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.4.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.199663][T13049] Tainted: [L]=SOFTLOCKUP [ 629.199670][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.199681][T13049] Call Trace: [ 629.199687][T13049] [ 629.199694][T13049] dump_stack_lvl+0x100/0x190 [ 629.199726][T13049] should_fail_ex.cold+0x5/0xa [ 629.199751][T13049] _copy_from_user+0x2e/0xd0 [ 629.199772][T13049] kstrtouint_from_user+0xd6/0x1d0 [ 629.199796][T13049] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 629.199832][T13049] ? __lock_acquire+0x4a5/0x2630 [ 629.199862][T13049] ? lock_acquire+0x1cf/0x380 [ 629.199894][T13049] proc_fail_nth_write+0x83/0x220 [ 629.199913][T13049] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 629.199938][T13049] vfs_write+0x2aa/0x1070 [ 629.199962][T13049] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 629.199982][T13049] ? __pfx_vfs_write+0x10/0x10 [ 629.200004][T13049] ? __fget_files+0x215/0x3d0 [ 629.200035][T13049] ? __fget_files+0x21f/0x3d0 [ 629.200066][T13049] ksys_write+0x12a/0x250 [ 629.200088][T13049] ? __pfx_ksys_write+0x10/0x10 [ 629.200119][T13049] do_syscall_64+0x106/0xf80 [ 629.200139][T13049] ? clear_bhb_loop+0x40/0x90 [ 629.200161][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.200178][T13049] RIP: 0033:0x7fac2355c84e [ 629.200194][T13049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 629.200210][T13049] RSP: 002b:00007fac217f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.200227][T13049] RAX: ffffffffffffffda RBX: 00007fac217f66c0 RCX: 00007fac2355c84e [ 629.200239][T13049] RDX: 0000000000000001 RSI: 00007fac217f60a0 RDI: 0000000000000004 [ 629.200249][T13049] RBP: 00007fac217f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.200260][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.200270][T13049] R13: 00007fac23816038 R14: 00007fac23815fa0 R15: 00007fff12a739d8 [ 629.200296][T13049] [ 629.273591][T13053] FAULT_INJECTION: forcing a failure. [ 629.273591][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 629.433599][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.1.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.433627][T13053] Tainted: [L]=SOFTLOCKUP [ 629.433633][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.433644][T13053] Call Trace: [ 629.433650][T13053] [ 629.433657][T13053] dump_stack_lvl+0x100/0x190 [ 629.433688][T13053] should_fail_ex.cold+0x5/0xa [ 629.433709][T13053] should_failslab+0xc2/0x120 [ 629.433734][T13053] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 629.433753][T13053] ? skb_clone+0x190/0x400 [ 629.433777][T13053] skb_clone+0x190/0x400 [ 629.433796][T13053] netlink_deliver_tap+0xaed/0xcc0 [ 629.433829][T13053] netlink_unicast+0x70c/0x870 [ 629.433854][T13053] ? __pfx_netlink_unicast+0x10/0x10 [ 629.433874][T13053] ? __alloc_skb+0x5b7/0x710 [ 629.433900][T13053] netlink_ack+0x655/0xb80 [ 629.433928][T13053] netlink_rcv_skb+0x333/0x420 [ 629.433949][T13053] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 629.433968][T13053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.434000][T13053] ? ns_capable+0xd2/0xf0 [ 629.434022][T13053] nfnetlink_rcv+0x1b3/0x440 [ 629.434038][T13053] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 629.434054][T13053] ? netlink_deliver_tap+0x1ae/0xcc0 [ 629.434079][T13053] netlink_unicast+0x5aa/0x870 [ 629.434104][T13053] ? __pfx_netlink_unicast+0x10/0x10 [ 629.434134][T13053] netlink_sendmsg+0x8b0/0xda0 [ 629.434160][T13053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.434180][T13053] ? __might_fault+0x20/0x140 [ 629.434208][T13053] ____sys_sendmsg+0xa54/0xc30 [ 629.434235][T13053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.434262][T13053] ? __pfx__kstrtoull+0x10/0x10 [ 629.434289][T13053] ___sys_sendmsg+0x190/0x1e0 [ 629.434315][T13053] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.434350][T13053] ? find_held_lock+0x2b/0x80 [ 629.434386][T13053] __sys_sendmmsg+0x205/0x430 [ 629.434407][T13053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 629.434435][T13053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.434466][T13053] ? fput+0x79/0x100 [ 629.434483][T13053] ? ksys_write+0x1ac/0x250 [ 629.434505][T13053] ? __pfx_ksys_write+0x10/0x10 [ 629.434530][T13053] __x64_sys_sendmmsg+0x9c/0x100 [ 629.434553][T13053] ? lockdep_hardirqs_on+0x78/0x100 [ 629.434573][T13053] do_syscall_64+0x106/0xf80 [ 629.434593][T13053] ? clear_bhb_loop+0x40/0x90 [ 629.434613][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.434630][T13053] RIP: 0033:0x7f9128f9bf79 [ 629.434645][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.434661][T13053] RSP: 002b:00007f9129e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 629.434687][T13053] RAX: ffffffffffffffda RBX: 00007f9129216090 RCX: 00007f9128f9bf79 [ 629.434699][T13053] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 629.434709][T13053] RBP: 00007f9129e93090 R08: 0000000000000000 R09: 0000000000000000 [ 629.434719][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.434729][T13053] R13: 00007f9129216128 R14: 00007f9129216090 R15: 00007fff50d45428 [ 629.434752][T13053] [ 630.029857][T13060] xt_CT: No such helper "pptp" [ 631.098807][T13072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.187260][T13069] ªªªªªª: renamed from vlan0 (while UP) [ 631.372643][ T5820] Bluetooth: hci5: Malformed LE Event: 0x0b [ 631.440027][T13069] netlink: 'syz.6.1873': attribute type 25 has an invalid length. [ 631.460448][T13069] netlink: 'syz.6.1873': attribute type 28 has an invalid length. [ 631.574881][ T30] audit: type=1400 audit(1771235299.125:7741): avc: denied { getopt } for pid=13081 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 632.830209][ T30] audit: type=1400 audit(1771235299.546:7742): avc: denied { bind } for pid=13096 comm="syz.5.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 632.882761][ T30] audit: type=1400 audit(1771235299.546:7743): avc: denied { getopt } for pid=13096 comm="syz.5.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 633.106881][ T30] audit: type=1400 audit(1771235300.557:7744): avc: denied { ioctl } for pid=13096 comm="syz.5.1883" path="pid:[4026532801]" dev="nsfs" ino=4026532801 ioctlcmd=0x61e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 633.897940][ T5878] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 634.069091][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 634.079654][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 634.091022][ T5878] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 634.111206][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.135322][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.159628][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.162264][T13112] tmpfs: Bad value for 'mpol' [ 634.180845][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.220648][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 634.248642][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.261555][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 634.273412][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 634.300437][ T10] usb 7-1: config 0 has no interface number 0 [ 634.322175][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.346369][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 634.371415][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.395636][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.424357][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 634.438879][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.449695][ T10] usb 7-1: config 0 descriptor?? [ 634.459494][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 634.508163][ T5878] usb 4-1: GET_CAPABILITIES returned 0 [ 634.519295][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 634.550047][ T5887] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 634.926008][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.936839][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.949831][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.961054][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 634.987926][ T793] usb 4-1: USB disconnect, device number 71 [ 635.002046][ T5887] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 635.030891][ T5887] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 635.142707][ T5887] usb 5-1: Product: syz [ 635.169572][ T5887] usb 5-1: Manufacturer: syz [ 635.252866][ T5887] usb 5-1: SerialNumber: syz [ 635.365085][ T5887] usb 5-1: config 0 descriptor?? [ 635.405849][ T5887] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 635.442168][ T5887] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 635.454719][ T5887] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 636.969965][ T5887] usb 5-1: USB disconnect, device number 61 [ 637.005149][ T793] usb 7-1: USB disconnect, device number 10 [ 637.026483][ T793] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 637.048308][T13140] ªªªªªª: renamed from vlan0 (while UP) [ 637.138424][ T5820] Bluetooth: hci1: Malformed LE Event: 0x0b [ 637.254755][T11300] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 637.440462][T11300] usb 2-1: Using ep0 maxpacket: 8 [ 637.452668][T11300] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 637.462117][T11300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.470256][T11300] usb 2-1: Product: syz [ 637.498250][T11300] usb 2-1: Manufacturer: syz [ 637.510414][T11300] usb 2-1: SerialNumber: syz [ 637.807909][T11300] usb 2-1: config 0 descriptor?? [ 637.819771][T11300] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 638.623292][T11300] gspca_sonixj: reg_r err -110 [ 638.629370][T11300] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 638.647464][T11300] usb 2-1: USB disconnect, device number 47 [ 638.673602][T13140] netlink: 'syz.3.1896': attribute type 25 has an invalid length. [ 638.687150][T13140] netlink: 'syz.3.1896': attribute type 28 has an invalid length. [ 640.420089][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 640.656237][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 640.693122][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 640.711823][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 640.740606][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 640.778300][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 640.835632][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 640.847914][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 640.859540][T13191] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 640.868946][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 640.880069][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 640.899794][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 640.909239][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.918155][ T10] usb 5-1: Product: syz [ 640.922609][ T10] usb 5-1: Manufacturer: syz [ 640.927249][ T10] usb 5-1: SerialNumber: syz [ 640.944690][ T10] usb 5-1: config 0 descriptor?? [ 640.957486][T13183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 640.969975][T13183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 640.986402][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.175619][T13195] tmpfs: Bad value for 'mpol' [ 641.208070][T13197] syzkaller0: entered promiscuous mode [ 641.222416][T13197] syzkaller0: entered allmulticast mode [ 641.395270][ T5878] usb 5-1: USB disconnect, device number 62 [ 641.601104][ T793] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 641.971902][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.011711][ T793] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 642.028570][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.038541][ T793] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 642.050114][ T793] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 642.059247][ T793] usb 7-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 642.067373][ T793] usb 7-1: Product: syz [ 642.071537][ T793] usb 7-1: Manufacturer: syz [ 642.077618][ T793] usb 7-1: SerialNumber: syz [ 642.083819][ T793] usb 7-1: config 0 descriptor?? [ 642.091230][ T793] kvaser_usb 7-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 642.100317][ T793] kvaser_usb 7-1:0.0: error -EMSGSIZE: Failed to initialize card [ 642.108147][ T793] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90 [ 642.311009][ T793] usb 7-1: USB disconnect, device number 11 [ 644.103050][ T30] audit: type=1400 audit(1771235310.846:7745): avc: denied { read } for pid=13219 comm="syz.6.1916" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.323555][ T30] audit: type=1400 audit(1771235310.846:7746): avc: denied { open } for pid=13219 comm="syz.6.1916" path="/73/file0" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.385439][ T793] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 644.492853][ T2686] block nbd0: Possible stuck request ffff888027a88000: control (read@0,1024B). Runtime 240 seconds [ 644.505103][ T2686] block nbd0: Possible stuck request ffff888027a88200: control (read@1024,1024B). Runtime 240 seconds [ 644.524394][ T2686] block nbd0: Possible stuck request ffff888027a88400: control (read@2048,1024B). Runtime 240 seconds [ 644.535723][ T2686] block nbd0: Possible stuck request ffff888027a88600: control (read@3072,1024B). Runtime 240 seconds [ 644.599517][ T793] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 644.821710][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.914736][T13236] FAULT_INJECTION: forcing a failure. [ 644.914736][T13236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.955505][ T793] usb 7-1: Product: syz [ 644.965602][T13236] CPU: 0 UID: 0 PID: 13236 Comm: syz.3.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.965631][T13236] Tainted: [L]=SOFTLOCKUP [ 644.965637][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.965647][T13236] Call Trace: [ 644.965654][T13236] [ 644.965661][T13236] dump_stack_lvl+0x100/0x190 [ 644.965694][T13236] should_fail_ex.cold+0x5/0xa [ 644.965718][T13236] _copy_to_user+0x32/0xd0 [ 644.965741][T13236] simple_read_from_buffer+0xcb/0x170 [ 644.965768][T13236] proc_fail_nth_read+0x1af/0x230 [ 644.965789][T13236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.965820][T13236] ? rw_verify_area+0xce/0x6d0 [ 644.965841][T13236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.965870][T13236] vfs_read+0x1e4/0xb30 [ 644.965903][T13236] ? __pfx_vfs_read+0x10/0x10 [ 644.965926][T13236] ? __fget_files+0x215/0x3d0 [ 644.965958][T13236] ? __fget_files+0x21f/0x3d0 [ 644.965989][T13236] ksys_read+0x12a/0x250 [ 644.966010][T13236] ? __pfx_ksys_read+0x10/0x10 [ 644.966041][T13236] do_syscall_64+0x106/0xf80 [ 644.966062][T13236] ? clear_bhb_loop+0x40/0x90 [ 644.966084][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.966101][T13236] RIP: 0033:0x7fe6e075c84e [ 644.966116][T13236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.966132][T13236] RSP: 002b:00007fe6e1714fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.966149][T13236] RAX: ffffffffffffffda RBX: 00007fe6e17156c0 RCX: 00007fe6e075c84e [ 644.966161][T13236] RDX: 000000000000000f RSI: 00007fe6e17150a0 RDI: 0000000000000004 [ 644.966171][T13236] RBP: 00007fe6e1715090 R08: 0000000000000000 R09: 0000000000000000 [ 644.966182][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.966192][T13236] R13: 00007fe6e0a16038 R14: 00007fe6e0a15fa0 R15: 00007ffe5a864a48 [ 644.966230][T13236] [ 645.368934][ T793] usb 7-1: Manufacturer: syz [ 645.373528][ T793] usb 7-1: SerialNumber: syz [ 645.602093][ T793] usb 7-1: config 0 descriptor?? [ 645.733301][ T5820] Bluetooth: hci6: urb ffff88823be12f40 submission failed (2) [ 646.387421][ T30] audit: type=1400 audit(1771235312.988:7747): avc: denied { map } for pid=13246 comm="syz.4.1923" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 646.436220][ T30] audit: type=1400 audit(1771235312.988:7748): avc: denied { execute } for pid=13246 comm="syz.4.1923" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 646.631285][ T5923] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 646.878071][ T5923] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 646.887535][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.912863][ T5923] usb 2-1: config 0 descriptor?? [ 647.362210][ T5923] pantherlord 0003:0F30:0111.0013: item fetching failed at offset 1/5 [ 647.377452][ T5923] pantherlord 0003:0F30:0111.0013: parse failed [ 647.393791][ T5923] pantherlord 0003:0F30:0111.0013: probe with driver pantherlord failed with error -22 [ 647.800819][ T5878] usb 7-1: USB disconnect, device number 12 [ 647.826854][ T30] audit: type=1400 audit(1771235314.316:7749): avc: denied { unmount } for pid=11955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 647.940408][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'. [ 647.972265][ T793] usb 2-1: USB disconnect, device number 48 [ 648.529841][ T30] audit: type=1400 audit(1771235314.990:7750): avc: denied { write } for pid=13269 comm="syz.1.1929" lport=42855 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 648.600777][ T30] audit: type=1400 audit(1771235314.990:7751): avc: denied { setopt } for pid=13269 comm="syz.1.1929" lport=42855 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 648.811370][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 648.822108][ T793] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 648.918341][ T5865] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 648.971652][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 648.971741][ T5923] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 648.987370][ T10] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.000844][ T10] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.010981][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 649.016175][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.020220][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.028647][ T793] usb 2-1: not running at top speed; connect to a high speed hub [ 649.048547][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.059524][ T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.079023][ T793] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.087160][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.088131][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.108448][ T793] usb 2-1: Product: syz [ 649.108465][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.113088][ T793] usb 2-1: Manufacturer: syz [ 649.128716][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.128841][ T793] usb 2-1: SerialNumber: syz [ 649.141770][ T5865] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.155568][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.168201][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.168941][ T5865] usb 6-1: config 0 descriptor?? [ 649.186333][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.225466][ T5923] usb 4-1: config 1 has no interface number 0 [ 649.232778][ T5923] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.250101][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.259228][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.267381][ T5923] usb 4-1: Product: syz [ 649.275629][ T5923] usb 4-1: Manufacturer: syz [ 649.280305][ T5923] usb 4-1: SerialNumber: syz [ 649.332006][ T5923] usb 4-1: selecting invalid altsetting 1 [ 649.463954][ T793] usb 2-1: 0:2 : does not exist [ 649.476986][ T793] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 649.489481][ T793] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 649.502570][ T793] usb 2-1: 0:0: failed to get current value for ch 1 (-22) [ 649.521867][ T793] usb 2-1: 0:0: cannot get min/max values for control 2 (id 0) [ 649.536050][ T793] usb 2-1: 0:0: cannot get min/max values for control 2 (id 0) [ 649.565877][ T793] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 649.600564][ T793] usb 2-1: USB disconnect, device number 49 [ 649.685320][ T10] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 649.701231][ T5865] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 650.026733][T13281] sp0: Synchronizing with TNC [ 650.176832][T13280] [U] è [ 650.260381][ T10] usb 5-1: USB disconnect, device number 63 [ 650.264407][ T5923] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 650.277252][ T5923] cdc_ncm 4-1:1.1: bind() failure [ 650.306932][ T5923] usb 4-1: USB disconnect, device number 72 [ 650.468648][ T793] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 650.639376][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 650.649100][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.672710][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 650.694167][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 650.714250][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 650.746306][ T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 650.756274][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 650.778336][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 650.810404][ T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 650.829537][ T793] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 650.851910][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.872952][ T793] usb 2-1: Product: syz [ 650.877282][ T793] usb 2-1: Manufacturer: syz [ 650.882373][ T793] usb 2-1: SerialNumber: syz [ 650.892237][ T793] usb 2-1: config 0 descriptor?? [ 650.903103][T13292] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.913877][T13292] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.941233][ T793] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.047218][ C1] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1 [ 651.253034][ T793] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 651.261103][ T5923] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 651.538698][ T5923] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 651.560455][ T5923] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.572301][ T793] usb 6-1: device descriptor read/64, error -32 [ 651.578660][ T5923] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12552, setting to 64 [ 651.589798][ T5923] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 651.611101][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.621105][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 651.629697][ T5923] usb 5-1: SerialNumber: syz [ 651.687549][T13309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 651.705616][ T5865] usb 2-1: USB disconnect, device number 50 [ 651.800788][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 652.050687][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 652.072468][ T5923] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 652.074659][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 652.088707][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 652.089950][ T5923] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 652.123375][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 652.137916][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 652.144396][ T5923] usb 5-1: USB disconnect, device number 64 [ 652.150580][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 652.173097][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 652.193960][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 652.225958][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 652.250389][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 652.263028][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.271485][ T10] usb 7-1: Product: syz [ 652.276521][ T10] usb 7-1: Manufacturer: syz [ 652.281137][ T10] usb 7-1: SerialNumber: syz [ 652.297334][ T10] usb 7-1: config 0 descriptor?? [ 652.303646][T13314] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 652.311429][T13314] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 652.324904][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.523133][ T5887] usb 6-1: USB disconnect, device number 44 [ 652.641319][ T10] usb 7-1: USB disconnect, device number 13 [ 653.075812][T13325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.972630][ T30] audit: type=1400 audit(1771235319.798:7752): avc: denied { bind } for pid=13329 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 654.013363][T13336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.025347][T13336] bond0: (slave rose0): Enslaving as an active interface with an up link [ 654.114981][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 654.406296][T13335] netlink: 'syz.4.1950': attribute type 5 has an invalid length. [ 654.797402][T13351] overlayfs: missing 'lowerdir' [ 655.133389][T13335] ip6erspan0: entered promiscuous mode [ 655.703232][ T30] audit: type=1400 audit(1771235321.697:7753): avc: denied { getopt } for pid=13377 comm="syz.6.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 656.286488][T13382] loop5: detected capacity change from 0 to 4096 [ 656.777034][ T10] wlan1 speed is unknown, defaulting to 1000 [ 656.799436][ T10] óyz2: Port: 1 Link DOWN [ 657.131598][ T5941] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 657.334442][ T5941] usb 7-1: config 0 interface 0 has no altsetting 0 [ 657.350717][ T5941] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 657.366191][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.421844][ T5941] usb 7-1: config 0 descriptor?? [ 657.566919][ T10] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 657.595462][ T30] audit: type=1326 audit(1771235323.474:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 657.652930][ T30] audit: type=1326 audit(1771235323.474:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 657.804508][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 657.815287][ T10] usb 5-1: config 0 has no interface number 0 [ 657.823533][ T30] audit: type=1326 audit(1771235323.474:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 658.860572][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 658.869723][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 658.878942][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.887005][ T30] audit: type=1326 audit(1771235323.474:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 658.910522][ T10] usb 5-1: Product: syz [ 658.915452][ T5941] (null): keene_cmd_main failed (-110) [ 659.490726][ T10] usb 5-1: Manufacturer: syz [ 659.495381][ T10] usb 5-1: SerialNumber: syz [ 659.501462][ T10] usb 5-1: config 0 descriptor?? [ 659.506662][ T30] audit: type=1326 audit(1771235323.474:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.580340][ T5941] video4linux radio48: keene_cmd_main failed (-32) [ 659.587168][ T30] audit: type=1326 audit(1771235323.474:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.614208][ T5941] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 659.697047][ T30] audit: type=1326 audit(1771235323.474:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.775738][ T30] audit: type=1326 audit(1771235323.493:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.826756][ T30] audit: type=1326 audit(1771235323.502:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.869418][ T30] audit: type=1326 audit(1771235323.502:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.920236][ T30] audit: type=1326 audit(1771235323.511:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 659.951003][T13449] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 659.968231][T13449] .`: (slave wlan1): Opening slave failed [ 660.035025][ T30] audit: type=1326 audit(1771235323.511:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 660.100020][ T30] audit: type=1326 audit(1771235323.511:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 660.130255][ T30] audit: type=1326 audit(1771235323.511:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6e079bf79 code=0x7ffc0000 [ 660.482202][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 660.789546][ T793] usb 7-1: USB disconnect, device number 14 [ 661.586878][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 661.609664][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 661.641603][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 661.691834][ T10] usb 5-1: USB disconnect, device number 65 [ 661.769384][ T5865] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 661.961066][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 661.997684][ T5865] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 662.036314][ T5865] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 662.061432][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 662.101424][ T5865] usb 6-1: Product: syz [ 662.121125][ T5865] usb 6-1: Manufacturer: syz [ 662.125719][ T5865] usb 6-1: SerialNumber: syz [ 662.164512][ T5865] usb 6-1: config 0 descriptor?? [ 662.169922][T13476] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 662.687731][ T5865] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 662.711985][ T9] usb 6-1: USB disconnect, device number 45 [ 662.891688][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 662.927316][ T5865] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.986711][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0 [ 663.016802][ T5865] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 663.063254][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.122310][ T5865] usb 7-1: config 0 descriptor?? [ 663.614094][ T5865] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 663.970486][T13521] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 664.709937][ T10] libceph: connect (1)[c::]:6789 error -22 [ 664.731294][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 664.736704][ T5923] usb 7-1: USB disconnect, device number 15 [ 664.772103][T13527] ceph: No mds server is up or the cluster is laggy [ 665.214404][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 665.216318][ T30] audit: type=1400 audit(1771235330.602:7770): avc: denied { map } for pid=13534 comm="syz.5.1984" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 665.304754][T13539] bridge1: entered allmulticast mode [ 665.317499][T13539] team0: Port device bridge1 added [ 666.081512][T13541] xt_hashlimit: max too large, truncated to 1048576 [ 666.525355][ T30] audit: type=1400 audit(1771235331.818:7771): avc: denied { setopt } for pid=13551 comm="syz.6.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 668.005512][ T30] audit: type=1326 audit(1771235333.202:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.3.1993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x0 [ 668.126258][ T5865] hid-generic 0607:0005:0008.0017: item fetching failed at offset 0/2 [ 668.139124][ T5865] hid-generic 0607:0005:0008.0017: probe with driver hid-generic failed with error -22 [ 668.717275][ T793] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 669.080869][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 669.091401][ T793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.102731][ T793] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 669.111817][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.143183][ T30] audit: type=1400 audit(1771235334.259:7773): avc: denied { shutdown } for pid=13594 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 669.188766][ T793] usb 6-1: config 0 descriptor?? [ 669.398864][ T5923] libceph: connect (1)[c::]:6789 error -22 [ 669.459734][ T793] hub 6-1:0.0: bad descriptor, ignoring hub [ 669.529546][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 669.551372][ T793] hub 6-1:0.0: probe with driver hub failed with error -5 [ 669.859548][T13597] ceph: No mds server is up or the cluster is laggy [ 669.892688][ T5923] libceph: connect (1)[c::]:6789 error -22 [ 670.296697][ T793] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 670.327310][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 670.684971][ T793] usb 6-1: device firmware changed [ 670.698379][ T793] usb 6-1: USB disconnect, device number 46 [ 671.069296][ T793] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 671.261552][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 671.261589][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 671.302901][ T793] usb 6-1: config 0 has no interfaces? [ 671.331849][ T793] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 671.375963][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.420383][ T793] usb 6-1: Product: syz [ 671.440067][ T793] usb 6-1: Manufacturer: syz [ 671.476891][ T793] usb 6-1: SerialNumber: syz [ 671.484352][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 2466, setting to 64 [ 671.511290][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 671.534360][ T793] usb 6-1: config 0 descriptor?? [ 671.566211][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 671.610783][ T793] usb 6-1: can't set config #0, error -71 [ 671.618808][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 671.689486][ T793] usb 6-1: USB disconnect, device number 47 [ 671.979631][ T9] usb 5-1: Product: syz [ 671.983792][ T9] usb 5-1: Manufacturer: syz [ 672.026640][ T9] usb 5-1: SerialNumber: syz [ 672.034106][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 672.046902][ T9] usb 5-1: config 0 descriptor?? [ 672.053013][T13631] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 672.064043][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 672.082793][ T9] usb 5-1: selecting invalid altsetting 0 [ 672.089958][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 672.100830][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 672.255857][T13645] misc userio: Invalid payload size [ 672.308278][T13645] misc userio: The device must be registered before sending interrupts [ 672.699257][T13656] xt_connbytes: Forcing CT accounting to be enabled [ 672.782526][T13656] set match dimension is over the limit! [ 674.614958][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 674.622698][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 675.239321][ T5865] usb 5-1: USB disconnect, device number 66 [ 675.883542][ T10] libceph: connect (1)[c::]:6789 error -101 [ 675.984349][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 676.217312][T13688] ceph: No mds server is up or the cluster is laggy [ 676.338804][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 676.547892][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 676.652026][ T2686] block nbd0: Possible stuck request ffff888027a88000: control (read@0,1024B). Runtime 270 seconds [ 676.662943][ T2686] block nbd0: Possible stuck request ffff888027a88200: control (read@1024,1024B). Runtime 270 seconds [ 676.674760][ T2686] block nbd0: Possible stuck request ffff888027a88400: control (read@2048,1024B). Runtime 270 seconds [ 676.690118][ T2686] block nbd0: Possible stuck request ffff888027a88600: control (read@3072,1024B). Runtime 270 seconds [ 676.712208][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 676.802915][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 676.831445][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 676.849168][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 676.862478][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 677.173510][ T5887] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 677.314181][ T5887] usb 7-1: device descriptor read/64, error -71 [ 677.593295][ T5887] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 677.750887][ T5887] usb 7-1: device descriptor read/64, error -71 [ 678.013899][ T5887] usb usb7-port1: attempt power cycle [ 678.488993][ T30] audit: type=1400 audit(1771235343.024:7774): avc: denied { checkpoint_restore } for pid=13739 comm="syz.3.2041" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.562539][T13742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.570428][T13742] batadv_slave_0: entered promiscuous mode [ 678.576989][T13742] batadv_slave_0: entered allmulticast mode [ 678.715098][ T5887] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 678.940038][ T5887] usb 7-1: device descriptor read/8, error -71 [ 679.125964][T13749] pimreg: entered allmulticast mode [ 679.333099][ T5887] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 679.606342][ T5887] usb 7-1: device descriptor read/8, error -71 [ 679.743018][ T5887] usb usb7-port1: unable to enumerate USB device [ 679.853757][T13764] virtio-fs: tag not found [ 680.262417][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2048'. [ 680.930097][T13780] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 681.053921][T13785] trusted_key: encrypted_key: insufficient parameters specified [ 681.691580][T13792] lo speed is unknown, defaulting to 1000 [ 681.707094][T13792] wlan1 speed is unknown, defaulting to 1000 [ 681.943959][ T30] audit: type=1326 audit(1771235345.830:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.6.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 682.048238][ T30] audit: type=1326 audit(1771235345.830:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.6.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 682.077232][ T30] audit: type=1326 audit(1771235345.830:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.6.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 682.103808][ T30] audit: type=1326 audit(1771235346.354:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.6.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 682.128933][ T30] audit: type=1326 audit(1771235346.354:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.6.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x7ffc0000 [ 683.843150][T13830] affs: No valid root block on device nullb0 [ 684.001014][ T30] audit: type=1400 audit(1771235348.140:7780): avc: denied { ioctl } for pid=13823 comm="syz.6.2065" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 684.027779][ T5878] IPVS: starting estimator thread 0... [ 684.122395][T13831] IPVS: using max 55 ests per chain, 132000 per kthread [ 684.464686][ T5878] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 684.659613][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 684.668950][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 684.680880][ T5878] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 684.690277][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 684.698484][ T5878] usb 2-1: Product: syz [ 684.702838][ T5878] usb 2-1: Manufacturer: syz [ 684.707738][ T5878] usb 2-1: SerialNumber: syz [ 684.721739][ T5878] usb 2-1: config 0 descriptor?? [ 684.727232][T13834] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.795936][ T5887] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 684.915577][T13840] netlink: 584 bytes leftover after parsing attributes in process `syz.6.2069'. [ 684.986365][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 685.001510][T13840] qnx6: unable to read the first superblock [ 685.052342][ T5887] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 685.085538][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 685.218015][ T5923] usb 2-1: USB disconnect, device number 51 [ 685.227584][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.754794][T13841] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 685.785227][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 686.045952][ T5887] usb 6-1: USB disconnect, device number 48 [ 686.282004][ T5923] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 686.552647][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 686.707075][ T5923] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 686.734102][ T5923] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 686.751792][ T5923] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.763155][ T5923] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 686.790023][ T5923] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 686.799231][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.807398][ T5923] usb 5-1: Product: syz [ 686.811658][ T5923] usb 5-1: Manufacturer: syz [ 686.816274][ T5923] usb 5-1: SerialNumber: syz [ 686.829197][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 686.858077][ T5923] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input55 [ 687.105055][ T5923] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 687.113673][ T5923] (id 0x00) [ 687.223781][ T5923] rc_core: IR keymap rc-imon-pad not found [ 687.229769][ T5923] Registered IR keymap rc-empty [ 687.236392][ T5923] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 687.247888][ T5923] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 687.325018][ T5923] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 687.345557][ T5923] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input56 [ 687.367037][ T5923] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:67> initialized [ 687.681998][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 687.705872][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 688.003672][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 688.011374][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 688.204000][ T9] usb 5-1: USB disconnect, device number 67 [ 688.210112][T13873] imon:send_packet: packet tx failed (-71) [ 688.250780][T13873] imon:vfd_write: send packet #1 failed [ 688.272839][T13867] ceph: No mds server is up or the cluster is laggy [ 688.302502][ T30] audit: type=1326 audit(1771235352.191:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.6.2079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb55419bf79 code=0x0 [ 689.512318][ T5820] Bluetooth: hci4: Unexpected cc 0x0000 with no status [ 689.604135][T13899] random: crng reseeded on system resumption [ 689.736407][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 689.966278][ T9] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 690.041178][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.104776][ T9] usb 5-1: Product: syz [ 690.130680][ T9] usb 5-1: Manufacturer: syz [ 690.162404][ T9] usb 5-1: SerialNumber: syz [ 690.211691][ T9] usb 5-1: config 0 descriptor?? [ 690.253558][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 690.313145][ T5887] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 690.334355][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.398866][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 690.457012][ T9] usb 5-1: media controller created [ 690.485447][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 690.513501][ T5887] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 690.566753][ T5887] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 690.605503][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 690.608222][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.661298][ T5887] usb 6-1: Product: syz [ 690.682888][ T5887] usb 6-1: Manufacturer: syz [ 690.710811][ T5887] usb 6-1: SerialNumber: syz [ 690.772215][ T5887] usb 6-1: config 0 descriptor?? [ 690.779431][T13914] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 690.825450][ T9] DVB: Unable to find symbol mt352_attach() [ 690.939844][ T9] DVB: Unable to find symbol nxt6000_attach() [ 690.970291][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 690.991310][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 691.009381][ T30] audit: type=1326 audit(1771235354.716:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13931 comm="syz.3.2093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e079bf79 code=0x0 [ 691.056043][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 691.066323][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 691.087409][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 691.095672][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 691.114040][ T9] usb 5-1: USB disconnect, device number 68 [ 691.142069][ T30] audit: type=1400 audit(1771235354.847:7783): avc: denied { map } for pid=13928 comm="syz.6.2091" path="socket:[44614]" dev="sockfs" ino=44614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 691.184918][ T30] audit: type=1400 audit(1771235354.847:7784): avc: denied { read } for pid=13928 comm="syz.6.2091" path="socket:[44614]" dev="sockfs" ino=44614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 691.230542][T13938] Cannot find del_set index 4 as target [ 691.252170][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 692.390893][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 693.586852][ T5887] usb 6-1: USB disconnect, device number 49 [ 694.765194][T13951] team0 (unregistering): Port device team_slave_0 removed [ 695.106795][T13951] team0 (unregistering): Port device team_slave_1 removed [ 695.571364][T13951] team0 (unregistering): Port device netdevsim0 removed [ 695.782372][T13985] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 696.091924][T13990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.325936][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 696.344425][T13992] openvswitch: netlink: Message has -1 unknown bytes. [ 697.627265][ T5865] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 697.934641][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 697.941275][ T5865] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 697.982629][ T5865] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 697.998774][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 698.020237][ T5865] usb 2-1: Product: syz [ 698.024492][ T5865] usb 2-1: Manufacturer: syz [ 698.050659][ T5865] usb 2-1: SerialNumber: syz [ 698.062719][ T5865] usb 2-1: config 0 descriptor?? [ 698.099103][ T30] audit: type=1400 audit(1771235361.348:7785): avc: denied { read } for pid=13999 comm="syz.3.2116" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 698.125729][T13994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 698.246244][T14002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.259231][T14002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 698.401373][T14002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.413253][T14002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 698.874341][T14002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.896010][T14002] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 698.907111][T14002] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 700.507284][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 700.599969][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 700.859396][ T10] usb 2-1: USB disconnect, device number 52 [ 701.024304][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 701.111371][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 702.061434][ T5923] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 702.569193][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 702.599260][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.636182][ T5923] usb 4-1: Product: syz [ 702.642929][ T5820] Bluetooth: hci3: Unexpected cc 0x0000 with no status [ 702.673852][ T5923] usb 4-1: Manufacturer: syz [ 702.695715][ T5923] usb 4-1: SerialNumber: syz [ 702.723359][ T5923] usb 4-1: config 0 descriptor?? [ 702.739331][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 702.967993][ T5923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 702.991406][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 703.354853][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 704.789576][ T5923] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 704.806412][ T5923] usb 4-1: USB disconnect, device number 73 [ 705.674655][ T5923] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 705.744154][ T30] audit: type=1400 audit(1771235368.513:7786): avc: denied { mount } for pid=14086 comm="syz.3.2141" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 705.768349][T14087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 705.815621][ T30] audit: type=1400 audit(1771235368.579:7787): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 705.856384][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 705.903115][ T5923] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 705.915739][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.926053][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 705.936326][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 705.946383][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.959425][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 705.975051][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.261896][ T5923] usb 5-1: usb_control_msg returned -32 [ 706.396718][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 706.542946][T14097] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2137'. [ 706.562007][T14076] program syz.4.2137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.036900][ T30] audit: type=1400 audit(1771235369.720:7788): avc: denied { watch } for pid=14099 comm="syz.1.2145" path="/459/file0" dev="tmpfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 707.233105][ T30] audit: type=1400 audit(1771235369.898:7789): avc: denied { read } for pid=14101 comm="syz.6.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 707.441136][ T5820] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 707.577608][T14117] bridge0: entered allmulticast mode [ 707.625592][T14117] bridge_slave_1: left allmulticast mode [ 707.633892][T14117] bridge_slave_1: left promiscuous mode [ 707.650442][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.782689][T14117] bridge_slave_0: left allmulticast mode [ 707.789990][T14117] bridge_slave_0: left promiscuous mode [ 707.811445][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.973152][ T793] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 708.179214][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 708.224456][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.292543][ T793] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.345419][ T793] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 708.365356][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.396576][ T793] usb 4-1: config 0 descriptor?? [ 708.755586][T14124] block device autoloading is deprecated and will be removed. [ 708.758677][ T10] usb 4-1: USB disconnect, device number 74 [ 708.807552][ T2686] block nbd0: Possible stuck request ffff888027a88000: control (read@0,1024B). Runtime 300 seconds [ 708.818716][ T2686] block nbd0: Possible stuck request ffff888027a88200: control (read@1024,1024B). Runtime 300 seconds [ 708.829889][ T2686] block nbd0: Possible stuck request ffff888027a88400: control (read@2048,1024B). Runtime 300 seconds [ 708.840974][ T2686] block nbd0: Possible stuck request ffff888027a88600: control (read@3072,1024B). Runtime 300 seconds [ 709.264179][ T10] usb 5-1: USB disconnect, device number 69 [ 709.502733][T14143] fuse: Bad value for 'fd' [ 710.355138][T14136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.362831][T14136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.560136][T14136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.566265][T14136] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 710.853167][ T30] audit: type=1400 audit(1771235373.293:7790): avc: denied { append } for pid=14155 comm="syz.5.2161" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 711.460198][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 711.545498][ T31] INFO: task syz.0.1496:11735 blocked for more than 163 seconds. [ 711.561487][ T31] Tainted: G L syzkaller #0 [ 711.593639][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.800331][ T31] task:syz.0.1496 state:D stack:28136 pid:11735 tgid:11727 ppid:5803 task_flags:0x400140 flags:0x00080002 [ 711.816023][ T31] Call Trace: [ 711.819456][ T31] [ 711.822402][ T31] __schedule+0xfee/0x60e0 [ 711.826893][ T31] ? __lock_acquire+0x4a5/0x2630 [ 711.831842][ T31] ? __pfx___schedule+0x10/0x10 [ 711.836851][ T31] ? find_held_lock+0x2b/0x80 [ 711.841618][ T31] ? schedule+0x2bf/0x390 [ 711.846199][ T31] schedule+0xdd/0x390 [ 711.850871][ T31] schedule_preempt_disabled+0x13/0x30 [ 711.875801][ T31] __mutex_lock+0xc9a/0x1b90 [ 711.881552][ T31] ? sync_bdevs+0x153/0x480 [ 711.902867][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 712.059021][T14172] lo speed is unknown, defaulting to 1000 [ 712.076209][T14172] wlan1 speed is unknown, defaulting to 1000 [ 712.345202][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 712.361576][ T31] ? iput.part.0+0x1a0/0xf50 [ 712.366271][ T31] ? sync_bdevs+0x153/0x480 [ 712.370886][ T31] sync_bdevs+0x153/0x480 [ 712.375271][ T31] ksys_sync+0xb0/0xf0 [ 712.379734][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 712.384551][ T31] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 712.391009][ T31] ? do_syscall_64+0x95/0xf80 [ 712.395748][ T31] __do_sys_sync+0xe/0x20 [ 712.400774][ T31] do_syscall_64+0x106/0xf80 [ 712.405486][ T31] ? clear_bhb_loop+0x40/0x90 [ 712.410875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.416908][ T31] RIP: 0033:0x7f9386b9bf79 [ 712.421811][ T31] RSP: 002b:00007f9387ab8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 712.430355][ T31] RAX: ffffffffffffffda RBX: 00007f9386e16090 RCX: 00007f9386b9bf79 [ 712.438744][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.447262][ T31] RBP: 00007f9386e16090 R08: 0000000000000000 R09: 0000000000000000 [ 712.456033][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.466067][ T31] R13: 00007f9386e16128 R14: 00007f9386e16090 R15: 00007ffe31ed8f08 [ 712.505975][ T31] [ 712.522568][ T31] [ 712.522568][ T31] Showing all locks held in the system: [ 712.533834][ T31] 1 lock held by khungtaskd/31: [ 712.539122][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 712.560504][ T31] 1 lock held by udevd/5178: [ 712.565317][ T31] 2 locks held by getty/5564: [ 712.571048][ T5820] Bluetooth: hci4: command 0x0405 tx timeout [ 712.572423][ T31] #0: ffff88803812b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 712.588060][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 712.599821][ T31] 1 lock held by udevd/7974: [ 712.604460][ T31] #0: ffff888027994358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 712.613994][ T31] 1 lock held by syz.0.1496/11735: [ 712.619075][ T31] #0: ffff888027994358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 712.628539][ T31] 2 locks held by syz.4.2164/14172: [ 712.633807][ T31] #0: ffffffff905f4430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 712.643269][ T31] #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 712.679742][ T31] [ 712.682090][ T31] ============================================= [ 712.682090][ T31] [ 712.690675][ T31] NMI backtrace for cpu 1 [ 712.690692][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 712.690716][ T31] Tainted: [L]=SOFTLOCKUP [ 712.690722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.690733][ T31] Call Trace: [ 712.690738][ T31] [ 712.690745][ T31] dump_stack_lvl+0x100/0x190 [ 712.690777][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 712.690796][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 712.690824][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 712.690856][ T31] sys_info+0x141/0x190 [ 712.690880][ T31] watchdog+0xd25/0x1050 [ 712.690909][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.690938][ T31] ? __kthread_parkme+0x18c/0x230 [ 712.690966][ T31] ? kthread+0x13a/0x450 [ 712.690981][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.691002][ T31] kthread+0x370/0x450 [ 712.691017][ T31] ? __pfx_kthread+0x10/0x10 [ 712.691035][ T31] ret_from_fork+0x754/0xd80 [ 712.691054][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 712.691073][ T31] ? __switch_to+0x7b4/0x1120 [ 712.691094][ T31] ? __pfx_kthread+0x10/0x10 [ 712.691111][ T31] ret_from_fork_asm+0x1a/0x30 [ 712.691143][ T31] [ 712.691152][ T31] Sending NMI from CPU 1 to CPUs 0: [ 712.762549][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 712.763011][ C0] NMI backtrace for cpu 0 [ 712.763028][ C0] CPU: 0 UID: 0 PID: 5816 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.763047][ C0] Tainted: [L]=SOFTLOCKUP [ 712.763052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.763061][ C0] Workqueue: hci5 hci_cmd_timeout [ 712.763079][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 712.763097][ C0] Code: 7b 90 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 4d 5e 19 06 e8 58 c7 fc fc eb a2 e8 e1 c7 [ 712.763109][ C0] RSP: 0018:ffffc90003e57600 EFLAGS: 00000002 [ 712.763120][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 712.763129][ C0] RDX: 00000000000003fd RSI: ffffffff85781d20 RDI: ffffffff9b493800 [ 712.763138][ C0] RBP: ffffffff9b4937c0 R08: 0000000000000001 R09: 000000000000001f [ 712.763146][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 712.763154][ C0] R13: 0000000000000020 R14: fffffbfff3692752 R15: dffffc0000000000 [ 712.763164][ C0] FS: 0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 712.763177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.763194][ C0] CR2: 00007f91291e7198 CR3: 00000000402a9000 CR4: 00000000003526f0 [ 712.763202][ C0] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e [ 712.763211][ C0] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 712.763219][ C0] Call Trace: [ 712.763224][ C0] [ 712.763231][ C0] wait_for_lsr+0x13a/0x210 [ 712.763250][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 712.763264][ C0] serial8250_console_write+0xdb9/0x1900 [ 712.763287][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 712.763308][ C0] ? lock_acquire+0x1cf/0x380 [ 712.763331][ C0] console_flush_one_record+0x790/0xe50 [ 712.763350][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 712.763368][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 712.763386][ C0] console_unlock+0x103/0x260 [ 712.763400][ C0] ? __pfx_console_unlock+0x10/0x10 [ 712.763415][ C0] ? lock_acquire+0x140/0x380 [ 712.763435][ C0] ? vprintk_emit+0x66a/0x6b0 [ 712.763452][ C0] vprintk_emit+0x407/0x6b0 [ 712.763467][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 712.763484][ C0] ? __lock_acquire+0x4a5/0x2630 [ 712.763504][ C0] _printk+0xcf/0x110 [ 712.763517][ C0] ? __pfx__printk+0x10/0x10 [ 712.763530][ C0] ? register_lock_class+0x40/0x560 [ 712.763549][ C0] ? do_raw_spin_lock+0x128/0x260 [ 712.763566][ C0] bt_err+0xec/0x122 [ 712.763581][ C0] ? __pfx_bt_err+0x10/0x10 [ 712.763596][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 712.763619][ C0] ? process_one_work+0x124d/0x1920 [ 712.763634][ C0] hci_cmd_timeout+0xd1/0x260 [ 712.763648][ C0] process_one_work+0x9d7/0x1920 [ 712.763665][ C0] ? __pfx_process_one_work+0x10/0x10 [ 712.763682][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 712.763697][ C0] worker_thread+0x5da/0xe40 [ 712.763713][ C0] ? kthread+0x13a/0x450 [ 712.763724][ C0] ? __pfx_worker_thread+0x10/0x10 [ 712.763736][ C0] kthread+0x370/0x450 [ 712.763747][ C0] ? __pfx_kthread+0x10/0x10 [ 712.763759][ C0] ret_from_fork+0x754/0xd80 [ 712.763773][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 712.763785][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.763800][ C0] ? __switch_to+0x7b4/0x1120 [ 712.763816][ C0] ? __pfx_kthread+0x10/0x10 [ 712.763829][ C0] ret_from_fork_asm+0x1a/0x30 [ 712.763850][ C0] [ 712.765997][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 712.766012][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 712.766034][ T31] Tainted: [L]=SOFTLOCKUP [ 712.766040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.766050][ T31] Call Trace: [ 712.766055][ T31] [ 712.766062][ T31] dump_stack_lvl+0x100/0x190 [ 712.766089][ T31] vpanic+0x552/0x970 [ 712.766105][ T31] ? __pfx_vpanic+0x10/0x10 [ 712.766122][ T31] ? rcu_is_watching+0x12/0xc0 [ 712.766143][ T31] panic+0xd1/0xe0 [ 712.766158][ T31] ? __pfx_panic+0x10/0x10 [ 712.766176][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 712.766201][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 712.766226][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 712.766249][ T31] ? watchdog.cold+0x198/0x1ca [ 712.766266][ T31] ? watchdog+0xd35/0x1050 [ 712.766287][ T31] watchdog.cold+0x1a9/0x1ca [ 712.766311][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.766331][ T31] ? __kthread_parkme+0x18c/0x230 [ 712.766355][ T31] ? kthread+0x13a/0x450 [ 712.766368][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.766386][ T31] kthread+0x370/0x450 [ 712.766400][ T31] ? __pfx_kthread+0x10/0x10 [ 712.766415][ T31] ret_from_fork+0x754/0xd80 [ 712.766432][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 712.766449][ T31] ? __switch_to+0x7b4/0x1120 [ 712.766468][ T31] ? __pfx_kthread+0x10/0x10 [ 712.766484][ T31] ret_from_fork_asm+0x1a/0x30 [ 712.766511][ T31] [ 712.768147][ T31] Kernel Offset: disabled