last executing test programs: 10.369160345s ago: executing program 0 (id=1374): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.870850624s ago: executing program 0 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) stat(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[], 0xffaf}, 0x1, 0x0, 0x0, 0x858}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000004}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x14}, {0x0}, {0x0}, {&(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES8=0xffffffffffffffff], 0x24}], 0x4, &(0x7f0000000400)=ANY=[], 0x50, 0x24040094}, 0x80) r7 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYBLOB="020002", @ANYRESOCT=r7, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8=r5, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r6, @ANYRES32=r6, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080006", @ANYRESOCT, @ANYRES16, @ANYRES32=r7, @ANYRES8=0x0, @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000100000000000000000fbffffff0000"], 0x24, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xa, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) 7.853905765s ago: executing program 0 (id=1388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) r4 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x80000, 0x36, 0x21}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_kthread_work_execute_end\x00', r4, 0x0, 0x100000000}, 0x18) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockname$inet6(r0, 0x0, &(0x7f0000001080)) 7.368810971s ago: executing program 2 (id=1391): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid}]}}) 7.219152474s ago: executing program 0 (id=1395): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x20, 0x2, 0xa3, {0xa3, 0x22, "cb7b9737b6fe389a278c249a3e3fafa695783eb4a9b8c2586997d85e04ccce684e1e0bd73e4ca0942ea56c4491ae21bdf3b4630990b8a914bf0edd3a77ac7dad520b47ccd49e07ee1b683b9e4fd35708e4406883b32ff47275f8a22f259ab512248b12cb0e84dd97ae2bf108fc363be15f6a056536e5e184e5b4c06fc716158b34c67e0d351a0d8f469d5ddc6677fa29e81bbe47f7ce35046291259c621e5ef0d0"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x60, 0xa, 0x4e, "a8be4f564996758660a44caf813245a0dfb71f44c470a1469b23e4441a921cf31202481377ee161de1c138751c4668692816e11accfdb03c23475672fbb587cbae16a9fc35178400e102edeafddf"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, "1b76"}, &(0x7f0000000b00)={0x20, 0x82, 0x3, "f744b6"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "c33c"}, &(0x7f0000000b80)={0x20, 0x84, 0x4, "227ec6ec"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "38959a"}}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 7.218612557s ago: executing program 3 (id=1396): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7.165440254s ago: executing program 1 (id=1397): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 7.1274696s ago: executing program 2 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) stat(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[], 0xffaf}, 0x1, 0x0, 0x0, 0x858}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000004}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x14}, {0x0}, {0x0}, {&(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES8=0xffffffffffffffff], 0x24}], 0x4, &(0x7f0000000400)=ANY=[], 0x50, 0x24040094}, 0x80) r7 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYBLOB="020002", @ANYRESOCT=r7, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8=r5, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r6, @ANYRES32=r6, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080006", @ANYRESOCT, @ANYRES16, @ANYRES32=r7, @ANYRES8=0x0, @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, r7, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000100000000000000000fbffffff0000"], 0x24, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xa, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) 6.412956022s ago: executing program 1 (id=1400): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYRESHEX=r2]) read$snddsp(r3, &(0x7f0000000bc0)=""/4096, 0x1000) mkdir(0x0, 0x0) 5.295413626s ago: executing program 2 (id=1401): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e5090501020800010000072501"], 0x0) 5.040785857s ago: executing program 1 (id=1404): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x28) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5.015612911s ago: executing program 1 (id=1405): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c2402000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r1, 0x0, 0x100000000) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc0c8}, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x8, 0x9, 0x1, 0x5, 0x62260, r3, 0x7, '\x00', 0x0, r0, 0x5, 0x3, 0x5}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000001480)=ANY=[@ANYBLOB="aaaaaaaaaa22aaaaaaaaaa328100480008"], 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB]) 4.875191532s ago: executing program 4 (id=1406): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x810, 0xffffffffffffffff, 0x793df000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) read(r5, &(0x7f00000000c0)=""/226, 0xe2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000380)={0x3ff, 0x1, 0x400003fe, 0x0, 0xb, "1f16692cc49d000000000025aaab53baa813d6"}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x109140, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="f78d9ca36de5c6f2a5e954be8fff48f3bdd216", 0x13}], 0x1, 0x0, 0x0, 0x47}], 0x1, 0x8853) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/70, 0x46}, {0x0}], 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000005, 0x20010, r5, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4.817767288s ago: executing program 3 (id=1407): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) stat(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x3}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 4.723265343s ago: executing program 3 (id=1408): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x1000) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x9, 0xfff8, 0x64, 0xa4e1, 0xd, 0x89, 0x8, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, {[@ssrr={0x89, 0x13, 0xe2, [@remote, @private=0xa010100, @private=0xa010101, @multicast1]}, @noop, @lsrr={0x83, 0x7, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x93, [@rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0x1, [{@local, 0xe6}]}, @end, @cipso={0x86, 0xa, 0x3, [{0x6, 0x4, "fad9"}]}]}}}}}}}, 0x0) r2 = dup2(r1, r0) clock_gettime(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r2, 0x5f8e, 0x79f1, 0x13, &(0x7f0000003f00)={[0x2]}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000003f40)={0x4, 0x4, 0x0, 0x0, 0x7}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffd, @broadcast}, 0x10) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=""/243, 0xf3}, {&(0x7f0000001240)=""/222, 0xde}], 0x2, &(0x7f0000001340)=""/246, 0xf6}, 0x82}, {{&(0x7f0000001440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000014c0)=""/128, 0x80}, {&(0x7f0000001540)=""/100, 0x64}, {&(0x7f00000015c0)=""/206, 0xce}, {&(0x7f00000016c0)=""/195, 0xc3}, {&(0x7f00000017c0)=""/216, 0xd8}, {&(0x7f00000018c0)=""/193, 0xc1}, {&(0x7f0000001a40)=""/161, 0xa1}, {&(0x7f0000001b00)=""/200, 0xc8}], 0x8, &(0x7f00000000c0)}, 0x5}, {{&(0x7f0000001cc0)=@alg, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/11, 0xb}, {&(0x7f0000001d80)=""/240, 0xf0}, {&(0x7f0000001e80)=""/137, 0x89}], 0x3}, 0xfffffffd}, {{&(0x7f0000001f80)=@ax25={{0x3, @rose}, [@remote, @default, @remote, @null, @remote, @bcast, @default, @bcast]}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/53, 0x35}, {&(0x7f0000002040)=""/62, 0x3e}, {&(0x7f0000002080)=""/22, 0x16}], 0x3}, 0x58d}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002100)=""/120, 0x78}, {&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/161, 0xa1}, {&(0x7f0000002440)=""/22, 0x16}, {&(0x7f0000002480)=""/40, 0x28}], 0x6, &(0x7f0000002540)=""/211, 0xd3}}, {{&(0x7f0000002640)=@hci, 0x80, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/111, 0x6f}, {&(0x7f0000002740)=""/25, 0x19}, {&(0x7f0000002780)=""/149, 0x95}, {&(0x7f0000002840)=""/119, 0x77}, {&(0x7f00000028c0)=""/231, 0xe7}], 0x5}, 0x9}, {{&(0x7f0000002a40)=@xdp, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/192, 0xc0}, {&(0x7f0000002b80)=""/157, 0x9d}], 0x2, &(0x7f0000002c80)=""/4096, 0x1000}, 0x10001}], 0x8, 0x1, &(0x7f0000003ec0)) 4.722769612s ago: executing program 4 (id=1409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x9a) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000840), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1072"], 0x10}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000035942f8f00"/33], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000001a2e32dc7bea581636"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flistxattr(r1, &(0x7f0000000280)=""/15, 0xf) r8 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80800) setsockopt$inet6_tcp_int(r8, 0x6, 0x10, &(0x7f00000003c0)=0x10000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) 4.119531446s ago: executing program 1 (id=1410): syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000440)='E', 0x1, 0x40040c4, &(0x7f0000000180)={0xa, 0x4e20, 0x80007d, @loopback, 0xffffffff}, 0x1c) read(r1, &(0x7f0000000080)=""/16, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "7b5760d208bb5e0fa3e0e216760b9b2f4aedcb59887e7f9c8f4ab8cb5f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xac}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4080) 3.941602001s ago: executing program 0 (id=1411): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00dfb49a1af600000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r5, r5, 0x3, 0xfffffffffffffffd, 0x4001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000080080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = eventfd(0x0) fgetxattr(r7, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.766369651s ago: executing program 3 (id=1412): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000104c0)={&(0x7f0000010500)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0, 0xfffffffffffffe58}, 0x7, 0x0, 0x0, 0x6274a5ca71beadfb}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 3.680662331s ago: executing program 4 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 3.501732112s ago: executing program 2 (id=1414): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) io_uring_setup(0xdac, &(0x7f0000000180)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x5000, 0xffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8003, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0xc2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) pread64(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) bind$bt_sco(r3, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0) 2.919298201s ago: executing program 4 (id=1415): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x28) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.866587852s ago: executing program 4 (id=1416): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0xc048aeca, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x5000, 0xffff1000, 0x995c24793fa78afd}}, "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", "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"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x20, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x10001}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000000)=0x4, 0x2) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}}) 1.737451738s ago: executing program 2 (id=1417): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d0900010000000000ef915d564c90c200b7dd70abf26b7373ef969322f3bf92ee281a72d11be59d2a579176a6f6776a7593835946b095e860eac8188cc33bf3f57568bd1f8fcf09d2e45ebe7066e2da74a02118c53c5f59963533de4489267d2d90103bd65b6cc74ef8bdf19d91c22d6cd8d93695e95394bfa6632603de27798e2efa8a96423148532600ea9f04939e561f14d1c807095d77e84fd1167dc9", 0x35) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x935, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x40) modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffffff80, 0x8, 0x6060d0b0, 0xfffffffffffff9a1, 0x7, 0x1]}, &(0x7f0000000180)=0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000500012800e00010069703665727370616e0000003c0002800600030005cc0000060003000900000008000d0007000000060003000000000008000d0008000000060002"], 0x78}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xfff1, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004094) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 833.905291ms ago: executing program 3 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000b4267b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200f6"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x3, 0xfffffff7, 0x361bf4a1}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 785.373416ms ago: executing program 1 (id=1419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)=0x8000000) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8, 0x2, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sync() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x15) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070687931f85a0000050020000000000078a04e258c13f7da6a33ea64f5aff349c53f64e692abb33aba5585a7e445cdb48dbbbac510bb71c8fdb2d8d38af8d37e4703"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 778.876974ms ago: executing program 4 (id=1420): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000000c0)=@hopopts={0x87, 0x1, '\x00', [@generic={0x7}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x4}]}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010826bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0420bdb66b3c8b646efb02013700"/29, @ANYRES32=r0, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 265.431316ms ago: executing program 2 (id=1421): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x20, 0x2, 0xa3, {0xa3, 0x22, "cb7b9737b6fe389a278c249a3e3fafa695783eb4a9b8c2586997d85e04ccce684e1e0bd73e4ca0942ea56c4491ae21bdf3b4630990b8a914bf0edd3a77ac7dad520b47ccd49e07ee1b683b9e4fd35708e4406883b32ff47275f8a22f259ab512248b12cb0e84dd97ae2bf108fc363be15f6a056536e5e184e5b4c06fc716158b34c67e0d351a0d8f469d5ddc6677fa29e81bbe47f7ce35046291259c621e5ef0d0"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x60, 0xa, 0x4e, "a8be4f564996758660a44caf813245a0dfb71f44c470a1469b23e4441a921cf31202481377ee161de1c138751c4668692816e11accfdb03c23475672fbb587cbae16a9fc35178400e102edeafddf"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, "1b76"}, &(0x7f0000000b00)={0x20, 0x82, 0x3, "f744b6"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "c33c"}, &(0x7f0000000b80)={0x20, 0x84, 0x4, "227ec6ec"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "38959a"}}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 138.470289ms ago: executing program 0 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[], 0xffaf}, 0x1, 0x0, 0x0, 0x858}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000004}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4], 0x14}, {0x0}, {0x0}, {&(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES8=0xffffffffffffffff, @ANYRESOCT=0x0, @ANYRES8], 0x24}], 0x4, &(0x7f0000000400)=ANY=[], 0x50, 0x24040094}, 0x80) r7 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYBLOB="020002", @ANYRESOCT=r7, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8=r5, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r6, @ANYRES32=r6, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080006", @ANYRESOCT, @ANYRES16, @ANYRES32=r7, @ANYRES8=0x0, @ANYRES32=r7, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000100000000000000000fbffffff0000"], 0x24, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xa, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) 0s ago: executing program 3 (id=1423): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() gettid() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x7, 0x1cb, &(0x7f0000000480)}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x2863, 0x4) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @multicast2}, 0x10) kernel console output (not intermixed with test programs): driver sq905 failed with error -71 [ 283.828076][ T5967] usb 3-1: USB disconnect, device number 25 [ 284.101106][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.113880][ T8605] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 284.550306][ T8607] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 284.606031][ T8611] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 284.623152][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 284.630941][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.643543][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.661423][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.670995][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.679011][ T10] usb 4-1: Product: syz [ 284.683486][ T10] usb 4-1: Manufacturer: syz [ 284.688085][ T10] usb 4-1: SerialNumber: syz [ 284.699572][ T10] usb 4-1: selecting invalid altsetting 1 [ 284.734821][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 284.794274][ T8615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 284.800820][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.815447][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 284.848336][ T8616] vhci_hcd: connection closed [ 284.881043][ T3635] vhci_hcd: stop threads [ 284.890078][ T3635] vhci_hcd: release socket [ 284.950032][ T3635] vhci_hcd: disconnect device [ 285.013428][ T1206] vhci_hcd: vhci_device speed not set [ 285.220812][ T5967] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 285.286529][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 285.461366][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 285.533638][ T5967] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.602956][ T10] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 285.609579][ T10] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 285.635263][ T5967] usb 5-1: config 0 has no interface number 0 [ 286.116130][ T10] usb 4-1: selecting invalid altsetting 1 [ 286.139173][ T10] cdc_ncm 4-1:1.0: bind() failure [ 286.159040][ T10] usb 4-1: USB disconnect, device number 23 [ 286.198827][ T5967] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 286.236332][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.245691][ T5967] usb 5-1: Product: syz [ 286.250172][ T5967] usb 5-1: Manufacturer: syz [ 286.256796][ T5967] usb 5-1: SerialNumber: syz [ 286.264657][ T5967] usb 5-1: config 0 descriptor?? [ 286.275259][ T5967] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 286.277807][ T30] audit: type=1400 audit(1752543669.583:885): avc: denied { read } for pid=8635 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.284713][ T5967] usb 5-1: selecting invalid altsetting 1 [ 286.328899][ T8636] netlink: 'syz.0.726': attribute type 4 has an invalid length. [ 286.330755][ T5967] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 286.355099][ T8636] netlink: 152 bytes leftover after parsing attributes in process `syz.0.726'. [ 286.411382][ T5967] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 286.426433][ T8636] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 286.456286][ T5967] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 286.483045][ T5967] usb 5-1: media controller created [ 286.490100][ T8639] GUP no longer grows the stack in syz.3.727 (8639): 200000004000-20000000a000 (200000002000) [ 286.511642][ T30] audit: type=1400 audit(1752543669.793:886): avc: denied { sqpoll } for pid=8635 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 286.558099][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.560119][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.3.727 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 286.560145][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.560156][ T8639] Call Trace: [ 286.560161][ T8639] [ 286.560168][ T8639] dump_stack_lvl+0x16c/0x1f0 [ 286.560196][ T8639] gup_vma_lookup+0x1d2/0x220 [ 286.560222][ T8639] __get_user_pages+0x271/0x3b80 [ 286.560256][ T8639] ? __pfx___get_user_pages+0x10/0x10 [ 286.560282][ T8639] get_user_pages_remote+0x258/0xb20 [ 286.560301][ T8639] ? __pfx_mtree_load+0x10/0x10 [ 286.560326][ T8639] ? __pfx_get_user_pages_remote+0x10/0x10 [ 286.560353][ T8639] __access_remote_vm+0x246/0x810 [ 286.560382][ T8639] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.560401][ T8639] ? __pfx___access_remote_vm+0x10/0x10 [ 286.560430][ T8639] proc_pid_cmdline_read+0x4de/0x900 [ 286.560453][ T8639] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 286.560475][ T8639] ? rw_verify_area+0xcf/0x680 [ 286.560495][ T8639] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 286.560514][ T8639] vfs_readv+0x5be/0x8b0 [ 286.560537][ T8639] ? __pfx_vfs_readv+0x10/0x10 [ 286.560556][ T8639] ? kmem_cache_free+0x2d1/0x4d0 [ 286.560590][ T8639] ? __fget_files+0x20e/0x3c0 [ 286.560621][ T8639] ? do_preadv+0x1a6/0x270 [ 286.560638][ T8639] do_preadv+0x1a6/0x270 [ 286.560656][ T8639] ? __pfx_do_preadv+0x10/0x10 [ 286.560682][ T8639] do_syscall_64+0xcd/0x4c0 [ 286.560706][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.560722][ T8639] RIP: 0033:0x7fa394f8e929 [ 286.560736][ T8639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.560753][ T8639] RSP: 002b:00007fa395da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 286.560770][ T8639] RAX: ffffffffffffffda RBX: 00007fa3951b5fa0 RCX: 00007fa394f8e929 [ 286.560780][ T8639] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 286.560789][ T8639] RBP: 00007fa395010b39 R08: 0000000021000008 R09: 0000000000000000 [ 286.560799][ T8639] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 286.560808][ T8639] R13: 0000000000000000 R14: 00007fa3951b5fa0 R15: 00007ffd90683c88 [ 286.560830][ T8639] [ 286.792416][ T30] audit: type=1400 audit(1752543670.103:887): avc: denied { map } for pid=8648 comm="syz.0.730" path="socket:[19406]" dev="sockfs" ino=19406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.794606][ T8623] netlink: 160 bytes leftover after parsing attributes in process `syz.4.723'. [ 286.876332][ T5967] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 286.894913][ T5967] zl10353_read_register: readreg error (reg=127, ret==-71) [ 286.905548][ T5967] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 286.910968][ T1206] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 286.944836][ T5967] usb 5-1: USB disconnect, device number 24 [ 287.152298][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 287.161280][ T1206] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 287.174274][ T1206] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 287.177969][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 287.626823][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.634925][ T1206] usb 3-1: Product: syz [ 287.639090][ T1206] usb 3-1: Manufacturer: syz [ 287.643745][ T1206] usb 3-1: SerialNumber: syz [ 287.654879][ T1206] usb 3-1: config 0 descriptor?? [ 287.676157][ T8652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.695785][ T1206] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 288.098153][ T5967] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 288.165900][ T5901] usb 3-1: USB disconnect, device number 26 [ 288.165972][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 288.278171][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 288.370076][ T5967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 288.535251][ T5967] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 288.552951][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.567847][ T5967] usb 4-1: Product: syz [ 288.570467][ T8680] @: renamed from vlan0 [ 288.578777][ T5967] usb 4-1: Manufacturer: syz [ 288.581083][ T30] audit: type=1400 audit(1752543671.893:888): avc: denied { map } for pid=8679 comm="syz.0.738" path="/proc/564/net/vlan/vlan0" dev="proc" ino=4026533791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 288.586589][ T5967] usb 4-1: SerialNumber: syz [ 288.609355][ T30] audit: type=1400 audit(1752543671.893:889): avc: denied { execute } for pid=8679 comm="syz.0.738" path="/proc/564/net/vlan/vlan0" dev="proc" ino=4026533791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 288.633877][ T5967] usb 4-1: config 0 descriptor?? [ 288.669806][ T30] audit: type=1400 audit(1752543671.973:890): avc: denied { mount } for pid=8677 comm="syz.4.739" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 288.747374][ T8668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 288.759402][ T5967] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 289.013470][ T1206] usb 4-1: USB disconnect, device number 24 [ 289.013618][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 289.275336][ T30] audit: type=1400 audit(1752543672.573:891): avc: denied { setopt } for pid=8686 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 289.333827][ T30] audit: type=1400 audit(1752543672.573:892): avc: denied { getopt } for pid=8686 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.400258][ T30] audit: type=1400 audit(1752543672.613:893): avc: denied { bind } for pid=8686 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 289.727864][ T8708] lo speed is unknown, defaulting to 1000 [ 289.790857][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 289.992523][ T30] audit: type=1400 audit(1752543673.293:894): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 290.023000][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 290.029767][ T8713] netlink: 'syz.3.746': attribute type 39 has an invalid length. [ 290.047916][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 290.144001][ T8713] veth0_macvtap: left promiscuous mode [ 290.339014][ T10] libceph: connect (1)[c::]:6789 error -101 [ 290.373884][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 290.487743][ T8710] ceph: No mds server is up or the cluster is laggy [ 290.750124][ T30] audit: type=1326 audit(1752543674.053:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 290.764156][ T8723] sd 0:0:1:0: device reset [ 290.913998][ T8731] 9pnet_fd: Insufficient options for proto=fd [ 291.134834][ T8741] netlink: 92 bytes leftover after parsing attributes in process `syz.3.753'. [ 291.149680][ T8741] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 291.156240][ T8741] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 291.164827][ T8741] vhci_hcd vhci_hcd.0: Device attached [ 291.230697][ T5967] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 291.453117][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.550785][ T1206] usb 40-1: SetAddress Request (2) to port 0 [ 291.571080][ T8747] vhci_hcd vhci_hcd.0: port 0 already used [ 291.601614][ T5967] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 291.610756][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.623007][ T5967] usb 5-1: config 0 descriptor?? [ 291.630092][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 291.630105][ T30] audit: type=1326 audit(1752543674.933:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 291.659828][ T30] audit: type=1326 audit(1752543674.963:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 291.669750][ T1206] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 291.686796][ T30] audit: type=1326 audit(1752543674.963:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 291.716083][ T30] audit: type=1326 audit(1752543674.963:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 291.860986][ T30] audit: type=1326 audit(1752543675.033:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f323ddc11e5 code=0x7ffc0000 [ 291.900082][ T30] audit: type=1326 audit(1752543675.113:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8733 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddaf8e929 code=0x7fc00000 [ 291.967540][ T8742] vhci_hcd: connection reset by peer [ 292.095291][ T8756] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 292.683203][ T30] audit: type=1326 audit(1752543675.233:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 292.806631][ T5967] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 292.833971][ T3635] vhci_hcd: stop threads [ 292.838321][ T3635] vhci_hcd: release socket [ 292.858811][ T30] audit: type=1326 audit(1752543675.243:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 292.919488][ T3635] vhci_hcd: disconnect device [ 292.980003][ T30] audit: type=1400 audit(1752543675.403:964): avc: denied { connect } for pid=8754 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.063898][ T30] audit: type=1326 audit(1752543676.373:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 293.293261][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.381456][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.391878][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.417707][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.454607][ T5967] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 294.537378][ T5967] usb 5-1: USB disconnect, device number 25 [ 294.762464][ T8775] lo speed is unknown, defaulting to 1000 [ 294.905603][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 294.992774][ T8773] usb usb8: usbfs: process 8773 (syz.3.758) did not claim interface 0 before use [ 295.242508][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 295.282288][ T8787] 9pnet_fd: Insufficient options for proto=fd [ 295.771166][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 296.015411][ T8809] syz.4.769: attempt to access beyond end of device [ 296.015411][ T8809] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 296.890886][ T1206] usb 40-1: device descriptor read/8, error -110 [ 296.958139][ T8825] 9pnet_fd: Insufficient options for proto=fd [ 297.355174][ T8834] lo speed is unknown, defaulting to 1000 [ 297.481653][ T1206] usb usb40-port1: attempt power cycle [ 297.576236][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 297.841058][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 297.867221][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 297.867235][ T30] audit: type=1400 audit(1752543681.173:970): avc: denied { wake_alarm } for pid=8839 comm="syz.0.779" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.973656][ T30] audit: type=1400 audit(1752543681.283:971): avc: denied { bind } for pid=8841 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.032757][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 298.039380][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.063458][ T1206] usb usb40-port1: unable to enumerate USB device [ 298.071201][ T10] usb 4-1: config 0 has no interface number 0 [ 298.082587][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 298.103928][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.124444][ T10] usb 4-1: Product: syz [ 298.124467][ T10] usb 4-1: Manufacturer: syz [ 298.124482][ T10] usb 4-1: SerialNumber: syz [ 298.126914][ T10] usb 4-1: config 0 descriptor?? [ 298.145387][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.782'. [ 298.155667][ T30] audit: type=1400 audit(1752543681.463:972): avc: denied { write } for pid=8841 comm="syz.0.780" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 298.184184][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 298.194057][ T10] usb 4-1: selecting invalid altsetting 1 [ 298.238102][ T30] audit: type=1400 audit(1752543681.463:973): avc: denied { open } for pid=8841 comm="syz.0.780" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 298.344558][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 298.354997][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.365514][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 298.373847][ T10] usb 4-1: media controller created [ 298.873969][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.882906][ T8856] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8856] [ 298.898150][ T8856] overlayfs: failed to resolve './file1': -2 [ 299.259331][ T30] audit: type=1400 audit(1752543682.563:974): avc: denied { bind } for pid=8867 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.645640][ T8874] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 299.645640][ T8874] The task syz.0.787 (8874) triggered the difference, watch for misbehavior. [ 299.942600][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 299.961327][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 300.189171][ T8884] xt_hashlimit: size too large, truncated to 1048576 [ 301.617090][ T30] audit: type=1400 audit(1752543684.913:975): avc: denied { read } for pid=8904 comm="syz.2.797" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.746435][ T30] audit: type=1400 audit(1752543684.913:976): avc: denied { ioctl } for pid=8904 comm="syz.2.797" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.809587][ T8892] syz.3.792 (8892): drop_caches: 2 [ 302.375268][ T8922] SET target dimension over the limit! [ 302.377093][ T30] audit: type=1400 audit(1752543685.683:977): avc: denied { ioctl } for pid=8920 comm="syz.0.802" path="socket:[20769]" dev="sockfs" ino=20769 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 302.390757][ T1206] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 302.480516][ T30] audit: type=1326 audit(1752543685.783:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 302.506319][ T8923] sd 0:0:1:0: device reset [ 302.545263][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.560961][ T30] audit: type=1326 audit(1752543685.783:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 302.561129][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.823128][ T1206] usb 5-1: device descriptor read/64, error -71 [ 302.870877][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 302.870893][ T30] audit: type=1326 audit(1752543686.183:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e52b code=0x7ffc0000 [ 302.905894][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.202580][ T8929] loop6: detected capacity change from 0 to 2560 [ 303.215924][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.226407][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.236717][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.246169][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.255818][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.265787][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.275440][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.284623][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.286636][ T30] audit: type=1326 audit(1752543686.213:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.293028][ T8929] ldm_validate_partition_table(): Disk read failed. [ 303.320012][ T30] audit: type=1326 audit(1752543686.213:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.322598][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.354275][ T8929] Buffer I/O error on dev loop6, logical block 0, async page read [ 303.362343][ T8929] Dev loop6: unable to read RDB block 0 [ 303.368067][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.368222][ T8929] loop6: unable to read partition table [ 303.381787][ T8929] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 303.402298][ T30] audit: type=1326 audit(1752543686.213:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e52b code=0x7ffc0000 [ 303.408475][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.425612][ T30] audit: type=1326 audit(1752543686.213:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.434039][ T1206] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 303.474845][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.486809][ T30] audit: type=1326 audit(1752543686.213:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.513441][ T30] audit: type=1326 audit(1752543686.213:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e52b code=0x7ffc0000 [ 303.539637][ T30] audit: type=1326 audit(1752543686.213:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.564083][ T1206] usb 5-1: device descriptor read/64, error -71 [ 303.570481][ T30] audit: type=1326 audit(1752543686.213:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e52b code=0x7ffc0000 [ 303.593827][ T30] audit: type=1326 audit(1752543686.213:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 303.671017][ T1206] usb usb5-port1: attempt power cycle [ 304.010811][ T1206] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 304.042651][ T1206] usb 5-1: device descriptor read/8, error -71 [ 304.303466][ T1206] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 304.331511][ T1206] usb 5-1: device descriptor read/8, error -71 [ 304.441643][ T1206] usb usb5-port1: unable to enumerate USB device [ 304.817044][ T8958] qrtr: Invalid version 6 [ 306.324858][ T8978] sd 0:0:1:0: device reset [ 307.100494][ T8986] sctp: [Deprecated]: syz.2.823 (pid 8986) Use of int in max_burst socket option. [ 307.100494][ T8986] Use struct sctp_assoc_value instead [ 307.271338][ T5967] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 307.897311][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 307.897339][ T30] audit: type=1326 audit(1752543691.203:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 307.942196][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.952636][ T5967] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 308.091927][ T30] audit: type=1326 audit(1752543691.203:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.130946][ T30] audit: type=1326 audit(1752543691.243:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.426244][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.434476][ T30] audit: type=1326 audit(1752543691.243:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.460274][ T5967] usb 5-1: config 0 descriptor?? [ 308.465896][ T30] audit: type=1326 audit(1752543691.243:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.501688][ T30] audit: type=1326 audit(1752543691.243:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.530877][ T30] audit: type=1326 audit(1752543691.253:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.556052][ T30] audit: type=1326 audit(1752543691.773:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.580302][ T30] audit: type=1326 audit(1752543691.773:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.604687][ T30] audit: type=1326 audit(1752543691.773:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e52b code=0x7ffc0000 [ 308.643809][ T9002] FAULT_INJECTION: forcing a failure. [ 308.643809][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 308.664019][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.3.828 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 308.664045][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.664055][ T9002] Call Trace: [ 308.664061][ T9002] [ 308.664069][ T9002] dump_stack_lvl+0x16c/0x1f0 [ 308.664097][ T9002] should_fail_ex+0x512/0x640 [ 308.664119][ T9002] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 308.664144][ T9002] should_failslab+0xc2/0x120 [ 308.664169][ T9002] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 308.664192][ T9002] ? alloc_empty_file+0x55/0x1e0 [ 308.664212][ T9002] alloc_empty_file+0x55/0x1e0 [ 308.664229][ T9002] path_openat+0xda/0x2cb0 [ 308.664251][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.664283][ T9002] ? __pfx_path_openat+0x10/0x10 [ 308.664314][ T9002] do_filp_open+0x20b/0x470 [ 308.664338][ T9002] ? __pfx_do_filp_open+0x10/0x10 [ 308.664379][ T9002] ? _raw_spin_unlock+0x28/0x50 [ 308.664399][ T9002] ? alloc_fd+0x471/0x7d0 [ 308.664430][ T9002] do_sys_openat2+0x11b/0x1d0 [ 308.664446][ T9002] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.664464][ T9002] ? __fget_files+0x20e/0x3c0 [ 308.664494][ T9002] __x64_sys_creat+0xcc/0x120 [ 308.664512][ T9002] ? __pfx___x64_sys_creat+0x10/0x10 [ 308.664529][ T9002] ? __pfx_ksys_write+0x10/0x10 [ 308.664554][ T9002] ? rcu_is_watching+0x12/0xc0 [ 308.664576][ T9002] ? do_syscall_64+0x91/0x4c0 [ 308.664601][ T9002] do_syscall_64+0xcd/0x4c0 [ 308.664627][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.664644][ T9002] RIP: 0033:0x7fa394f8e929 [ 308.664659][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.664675][ T9002] RSP: 002b:00007fa395da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 308.664693][ T9002] RAX: ffffffffffffffda RBX: 00007fa3951b5fa0 RCX: 00007fa394f8e929 [ 308.664704][ T9002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 308.664715][ T9002] RBP: 00007fa395da3090 R08: 0000000000000000 R09: 0000000000000000 [ 308.664725][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.664735][ T9002] R13: 0000000000000000 R14: 00007fa3951b5fa0 R15: 00007ffd90683c88 [ 308.664759][ T9002] [ 308.971761][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 308.977821][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 308.991514][ T5967] usb 5-1: USB disconnect, device number 30 [ 309.018293][ T9009] FAULT_INJECTION: forcing a failure. [ 309.018293][ T9009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.156539][ T9009] CPU: 1 UID: 0 PID: 9009 Comm: syz.2.831 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 309.156568][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.156578][ T9009] Call Trace: [ 309.156584][ T9009] [ 309.156590][ T9009] dump_stack_lvl+0x16c/0x1f0 [ 309.156618][ T9009] should_fail_ex+0x512/0x640 [ 309.156645][ T9009] _copy_from_user+0x2e/0xd0 [ 309.156670][ T9009] copy_msghdr_from_user+0x98/0x160 [ 309.156696][ T9009] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 309.156733][ T9009] ___sys_sendmsg+0xfe/0x1d0 [ 309.156757][ T9009] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.156778][ T9009] ? __lock_acquire+0x622/0x1c90 [ 309.156825][ T9009] __sys_sendmsg+0x16d/0x220 [ 309.156847][ T9009] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.156887][ T9009] do_syscall_64+0xcd/0x4c0 [ 309.156912][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.156929][ T9009] RIP: 0033:0x7f6e2e38e929 [ 309.156943][ T9009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.156958][ T9009] RSP: 002b:00007f6e2f116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.156974][ T9009] RAX: ffffffffffffffda RBX: 00007f6e2e5b5fa0 RCX: 00007f6e2e38e929 [ 309.156984][ T9009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 309.156994][ T9009] RBP: 00007f6e2f116090 R08: 0000000000000000 R09: 0000000000000000 [ 309.157004][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.157014][ T9009] R13: 0000000000000000 R14: 00007f6e2e5b5fa0 R15: 00007fffb004b0d8 [ 309.157044][ T9009] [ 309.907238][ T9015] TCP: TCP_TX_DELAY enabled [ 310.230196][ T5841] IPVS: starting estimator thread 0... [ 311.260744][ T1206] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 311.680764][ T9032] IPVS: using max 41 ests per chain, 98400 per kthread [ 311.740787][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 311.798459][ T1206] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 311.850734][ T1206] usb 3-1: config 0 has no interface number 0 [ 311.970800][ T1206] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.986342][ T1206] usb 3-1: config 0 interface 85 has no altsetting 0 [ 312.012192][ T1206] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 312.028066][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.038869][ T1206] usb 3-1: Product: syz [ 312.062821][ T1206] usb 3-1: Manufacturer: syz [ 312.364862][ T1206] usb 3-1: SerialNumber: syz [ 312.378191][ T1206] usb 3-1: config 0 descriptor?? [ 312.419637][ T9050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.622363][ T9055] dns_resolver: Unsupported content type (152) [ 312.702846][ T9057] bridge0: port 3(batadv1) entered blocking state [ 312.710113][ T9057] bridge0: port 3(batadv1) entered disabled state [ 312.717409][ T9057] batadv1: entered allmulticast mode [ 312.724495][ T9057] batadv1: entered promiscuous mode [ 312.999105][ T1206] appletouch 3-1:0.85: Geyser mode initialized. [ 313.015477][ T1206] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input36 [ 313.192939][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 313.202549][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 313.360850][ T5967] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 313.520731][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 313.528844][ T5967] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 313.550749][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.662469][ T5967] usb 5-1: config 0 descriptor?? [ 313.686279][ T5967] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 313.860890][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 313.860905][ T30] audit: type=1400 audit(1752543697.133:1131): avc: denied { mount } for pid=9069 comm="syz.1.850" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 313.888369][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.137902][ T9077] netlink: 'syz.3.852': attribute type 2 has an invalid length. [ 314.239645][ T5901] usb 3-1: USB disconnect, device number 27 [ 314.256518][ T5901] appletouch 3-1:0.85: input: appletouch disconnected [ 314.855990][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.847'. [ 314.867805][ T5967] gspca_sonixj: reg_w1 err -71 [ 314.901690][ T5967] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 314.946714][ T5967] usb 5-1: USB disconnect, device number 31 [ 314.986452][ T9086] netlink: 892 bytes leftover after parsing attributes in process `syz.1.855'. [ 315.032118][ T9090] netlink: 'syz.2.857': attribute type 11 has an invalid length. [ 315.044166][ T9090] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 315.055867][ T9090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.857'. [ 315.082841][ T9094] netlink: 892 bytes leftover after parsing attributes in process `syz.1.855'. [ 316.097252][ T9104] fuse: Bad value for 'fd' [ 316.319042][ T9120] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 316.334426][ T9120] netlink: 'syz.0.867': attribute type 62 has an invalid length. [ 316.350860][ T1206] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 316.371110][ T881] IPVS: starting estimator thread 0... [ 316.490975][ T9123] IPVS: using max 74 ests per chain, 177600 per kthread [ 316.513219][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.554787][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.610806][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.620827][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.634484][ T1206] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.656353][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.659783][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.674069][ T1206] usb 5-1: config 0 descriptor?? [ 317.245393][ T1206] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 317.260871][ T1206] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 317.423012][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.431672][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.446016][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.455452][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.532270][ T881] usb 5-1: USB disconnect, device number 32 [ 317.633676][ T30] audit: type=1326 audit(1752543700.943:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.657083][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.680931][ T9140] sd 0:0:1:0: device reset [ 317.689395][ T30] audit: type=1326 audit(1752543700.943:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.719041][ T30] audit: type=1326 audit(1752543700.973:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2e38d290 code=0x7ffc0000 [ 317.742323][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.751569][ T30] audit: type=1326 audit(1752543700.983:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.774988][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.819316][ T30] audit: type=1326 audit(1752543700.983:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.842613][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.850540][ T30] audit: type=1326 audit(1752543700.993:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.873772][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.880940][ T30] audit: type=1326 audit(1752543701.023:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.904202][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.910551][ T30] audit: type=1326 audit(1752543701.023:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.934306][ T30] audit: type=1326 audit(1752543701.023:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 317.957497][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.081807][ T881] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 318.106590][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.117417][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.134191][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.176470][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.260056][ T881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.280323][ T881] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 318.305995][ T881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.327908][ T881] usb 3-1: config 0 descriptor?? [ 318.508658][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 319.170745][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 319.170766][ T30] audit: type=1326 audit(1752543702.453:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 319.201942][ T30] audit: type=1326 audit(1752543702.453:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 319.225248][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.268626][ T30] audit: type=1326 audit(1752543702.453:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e52b code=0x7ffc0000 [ 319.294001][ T30] audit: type=1326 audit(1752543702.453:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e52b code=0x7ffc0000 [ 319.689493][ T30] audit: type=1326 audit(1752543702.453:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e2e3c11e5 code=0x7ffc0000 [ 319.729915][ T881] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 319.746793][ T30] audit: type=1326 audit(1752543702.653:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 319.772178][ T30] audit: type=1326 audit(1752543702.653:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e52b code=0x7ffc0000 [ 319.798044][ T30] audit: type=1326 audit(1752543702.653:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e52b code=0x7ffc0000 [ 319.821269][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.858901][ T30] audit: type=1326 audit(1752543702.823:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e2e3c11e5 code=0x7ffc0000 [ 319.916902][ T30] audit: type=1326 audit(1752543703.033:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 319.940245][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.967307][ T9167] overlayfs: missing 'workdir' [ 320.136194][ T9174] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 320.144204][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.884'. [ 320.163455][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.195257][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.217186][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.233414][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.348203][ T9178] fuse: Unknown parameter 'Ќ " [ 320.348203][ T9178] 9Ғ^$fd' [ 320.447817][ T881] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 320.476590][ T881] usb 3-1: USB disconnect, device number 28 [ 322.474568][ T9206] lo speed is unknown, defaulting to 1000 [ 324.990227][ T9223] SELinux: failed to load policy [ 326.108297][ T9245] netlink: 'syz.1.904': attribute type 21 has an invalid length. [ 326.126419][ T9245] netlink: 128 bytes leftover after parsing attributes in process `syz.1.904'. [ 326.142356][ T9245] netlink: 'syz.1.904': attribute type 6 has an invalid length. [ 326.150093][ T9245] netlink: 3 bytes leftover after parsing attributes in process `syz.1.904'. [ 326.340984][ T5841] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 326.514950][ T9252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 326.521502][ T9252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.550752][ T9252] vhci_hcd vhci_hcd.0: Device attached [ 326.566096][ T5841] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 326.599280][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.608182][ T5841] usb 5-1: Product: syz [ 326.612490][ T5841] usb 5-1: Manufacturer: syz [ 326.617111][ T5841] usb 5-1: SerialNumber: syz [ 326.623825][ T5841] usb 5-1: config 0 descriptor?? [ 326.631643][ T5841] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 326.920769][ T881] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 327.327575][ T9267] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[9267] [ 327.429570][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 327.919776][ T9253] vhci_hcd: connection reset by peer [ 327.954421][ T59] vhci_hcd: stop threads [ 327.966352][ T59] vhci_hcd: release socket [ 328.022465][ T59] vhci_hcd: disconnect device [ 328.036261][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 328.036276][ T30] audit: type=1400 audit(1752543711.343:1206): avc: denied { accept } for pid=9276 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 328.850817][ T1206] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 328.889515][ T9287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.040709][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 329.049102][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 329.065550][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.084087][ T1206] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.096394][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.105548][ T1206] usb 3-1: Product: syz [ 329.109962][ T1206] usb 3-1: Manufacturer: syz [ 329.112042][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.117206][ T1206] usb 3-1: SerialNumber: syz [ 329.128455][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.130117][ T1206] usb 3-1: config 0 descriptor?? [ 329.148115][ T1206] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.166178][ T1206] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 329.175365][ T5841] usb 5-1: USB disconnect, device number 33 [ 330.071509][ T1206] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 330.078172][ T1206] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 330.087856][ T1206] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 330.095502][ T1206] em28xx 3-1:0.0: No AC97 audio processor [ 330.108293][ T1206] usb 3-1: USB disconnect, device number 29 [ 330.115384][ T1206] em28xx 3-1:0.0: Disconnecting em28xx [ 330.150201][ T1206] em28xx 3-1:0.0: Freeing device [ 330.353591][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.923'. [ 332.341215][ T881] vhci_hcd: vhci_device speed not set [ 332.424836][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 332.529681][ T30] audit: type=1400 audit(1752543715.833:1207): avc: denied { append } for pid=9350 comm="syz.4.934" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.565691][ T9351] netlink: 'syz.4.934': attribute type 2 has an invalid length. [ 332.578360][ T9351] netlink: 'syz.4.934': attribute type 8 has an invalid length. [ 332.589073][ T9346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9346 comm=syz.2.931 [ 332.590736][ T9351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.934'. [ 333.041951][ T9358] lo speed is unknown, defaulting to 1000 [ 333.745534][ T9367] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 334.530759][ T30] audit: type=1400 audit(1752543717.823:1208): avc: denied { execute } for pid=9381 comm="syz.2.945" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.629862][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 334.891957][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 335.060919][ T1206] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 335.390929][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 335.399715][ T1206] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 335.432697][ T1206] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 335.448031][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.456728][ T1206] usb 3-1: Product: syz [ 335.461429][ T1206] usb 3-1: Manufacturer: syz [ 335.526410][ T1206] usb 3-1: SerialNumber: syz [ 335.711333][ T1206] usb 3-1: config 0 descriptor?? [ 335.724428][ T9391] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 335.804812][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.952'. [ 335.816940][ T1206] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 336.151465][ T1206] usb 3-1: USB disconnect, device number 30 [ 336.157391][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 336.372734][ T30] audit: type=1400 audit(1752543719.683:1209): avc: denied { setopt } for pid=9425 comm="syz.0.959" lport=50389 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 337.043642][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.961'. [ 337.456046][ T30] audit: type=1400 audit(1752543720.763:1210): avc: denied { bind } for pid=9443 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 338.836545][ T9464] fuse: Bad value for 'fd' [ 338.870767][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 338.985887][ T9466] netdevsim netdevsim1: Direct firmware load for . [ 338.985887][ T9466] failed with error -2 [ 339.013096][ T9466] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 339.013096][ T9466] [ 339.033429][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 339.048956][ T30] audit: type=1326 audit(1752543722.353:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.074115][ T9468] sd 0:0:1:0: device reset [ 339.079104][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 339.108351][ T43] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 339.118681][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.129919][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.140839][ T30] audit: type=1326 audit(1752543722.353:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.169166][ T43] usb 3-1: Product: syz [ 339.173876][ T43] usb 3-1: Manufacturer: syz [ 339.181012][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.192150][ T43] usb 3-1: SerialNumber: syz [ 339.212245][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.221843][ T43] usb 3-1: config 0 descriptor?? [ 339.226930][ T30] audit: type=1326 audit(1752543722.353:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa394f8d290 code=0x7ffc0000 [ 339.258837][ T9458] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 339.259086][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.296126][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 339.316788][ T30] audit: type=1326 audit(1752543722.353:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.345342][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.373459][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.381184][ T30] audit: type=1326 audit(1752543722.353:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.381229][ T30] audit: type=1326 audit(1752543722.383:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.437337][ T30] audit: type=1326 audit(1752543722.403:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 339.507230][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 339.516701][ T43] usb 3-1: USB disconnect, device number 31 [ 339.560335][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 339.560351][ T30] audit: type=1400 audit(1752543722.863:1287): avc: denied { read } for pid=9478 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.593234][ T30] audit: type=1400 audit(1752543722.863:1288): avc: denied { open } for pid=9478 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.717969][ T30] audit: type=1400 audit(1752543723.023:1289): avc: denied { add_name } for pid=9475 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.746485][ T30] audit: type=1400 audit(1752543723.053:1290): avc: denied { create } for pid=9475 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.775745][ T30] audit: type=1400 audit(1752543723.053:1291): avc: denied { write } for pid=9475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.803814][ T30] audit: type=1400 audit(1752543723.053:1292): avc: denied { append } for pid=9475 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.825305][ T9488] FAULT_INJECTION: forcing a failure. [ 339.825305][ T9488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.847858][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.4.974 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 339.847884][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.847894][ T9488] Call Trace: [ 339.847900][ T9488] [ 339.847907][ T9488] dump_stack_lvl+0x16c/0x1f0 [ 339.847936][ T9488] should_fail_ex+0x512/0x640 [ 339.847962][ T9488] _copy_from_user+0x2e/0xd0 [ 339.847986][ T9488] copy_msghdr_from_user+0x98/0x160 [ 339.848010][ T9488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.848047][ T9488] ___sys_sendmsg+0xfe/0x1d0 [ 339.848072][ T9488] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.848093][ T9488] ? __lock_acquire+0x622/0x1c90 [ 339.848142][ T9488] __sys_sendmsg+0x16d/0x220 [ 339.848165][ T9488] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.848206][ T9488] do_syscall_64+0xcd/0x4c0 [ 339.848232][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.848250][ T9488] RIP: 0033:0x7f323dd8e929 [ 339.848264][ T9488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.848280][ T9488] RSP: 002b:00007f323ec39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.848298][ T9488] RAX: ffffffffffffffda RBX: 00007f323dfb5fa0 RCX: 00007f323dd8e929 [ 339.848310][ T9488] RDX: 0000000020000086 RSI: 0000200000000100 RDI: 0000000000000004 [ 339.848320][ T9488] RBP: 00007f323ec39090 R08: 0000000000000000 R09: 0000000000000000 [ 339.848331][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.848341][ T9488] R13: 0000000000000000 R14: 00007f323dfb5fa0 R15: 00007fffae43eb18 [ 339.848365][ T9488] [ 339.856692][ T30] audit: type=1400 audit(1752543723.163:1293): avc: denied { remove_name } for pid=9489 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.044229][ T30] audit: type=1400 audit(1752543723.283:1294): avc: denied { unlink } for pid=9489 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2162 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.175095][ T9499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 340.181631][ T9499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.208197][ T9499] vhci_hcd vhci_hcd.0: Device attached [ 340.290696][ T5908] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 340.329024][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 340.442688][ T1206] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 340.452128][ T5908] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.469048][ T5908] usb 5-1: config 0 has no interface number 0 [ 340.485484][ T5908] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 340.507422][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.555658][ T5908] usb 5-1: config 0 descriptor?? [ 340.618695][ T5908] usb 5-1: selecting invalid altsetting 1 [ 340.659363][ T5908] dvb_ttusb_budget: ttusb_init_controller: error [ 340.690156][ T5908] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 340.854855][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.857792][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.356281][ T5908] DVB: Unable to find symbol cx22700_attach() [ 341.444934][ T5908] DVB: Unable to find symbol tda10046_attach() [ 341.451410][ T5908] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 341.586943][ T9500] vhci_hcd: connection reset by peer [ 341.637948][ T5908] usb 5-1: USB disconnect, device number 34 [ 341.644683][ T52] vhci_hcd: stop threads [ 341.659154][ T52] vhci_hcd: release socket [ 341.669256][ T52] vhci_hcd: disconnect device [ 343.272161][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 343.471652][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 343.502375][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 343.632328][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.678757][ T9575] syzkaller0: entered promiscuous mode [ 343.685487][ T9575] syzkaller0: entered allmulticast mode [ 343.695708][ T9] usb 5-1: config 0 descriptor?? [ 343.712349][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 343.730403][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 343.762006][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 344.132218][ T9562] netlink: 'syz.4.992': attribute type 21 has an invalid length. [ 344.140010][ T9562] netlink: 128 bytes leftover after parsing attributes in process `syz.4.992'. [ 344.483570][ T9600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.920854][ T9] gspca_sunplus: reg_r err -110 [ 344.925792][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 344.960867][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057fda400: rx timeout, send abort [ 345.142879][ T30] audit: type=1400 audit(1752543727.853:1295): avc: denied { name_connect } for pid=9599 comm="syz.0.1000" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 345.469095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057fda400: abort rx timeout. Force session deactivation [ 345.640823][ T1206] vhci_hcd: vhci_device speed not set [ 345.723100][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 347.954331][ T9562] netlink: 'syz.4.992': attribute type 6 has an invalid length. [ 347.962453][ T9562] netlink: 3 bytes leftover after parsing attributes in process `syz.4.992'. [ 348.019388][ T5967] usb 5-1: USB disconnect, device number 35 [ 348.417004][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.277940][ T30] audit: type=1326 audit(1752543733.583:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.362752][ T30] audit: type=1326 audit(1752543733.613:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.439684][ T30] audit: type=1326 audit(1752543733.623:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.441033][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 350.536796][ T30] audit: type=1326 audit(1752543733.623:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.561237][ T30] audit: type=1326 audit(1752543733.623:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.584751][ T30] audit: type=1326 audit(1752543733.623:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.640022][ T9639] trusted_key: encrypted_key: insufficient parameters specified [ 350.657794][ T30] audit: type=1326 audit(1752543733.633:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.698029][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.706701][ T30] audit: type=1326 audit(1752543733.633:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.732177][ T30] audit: type=1326 audit(1752543733.633:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.756381][ T30] audit: type=1326 audit(1752543733.643:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323dd8e929 code=0x7ffc0000 [ 350.824956][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.795563][ T9642] 9pnet: Could not find request transport: fd0x00000000000000030x0000000000000005 [ 352.031123][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 352.390960][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 352.980707][ T5841] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 354.457591][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 354.501545][ T5841] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 354.531033][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.553651][ T5841] usb 5-1: config 0 descriptor?? [ 354.570942][ T5841] as10x_usb: device has been detected [ 354.584258][ T5841] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 354.636608][ T5841] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 354.716366][ T5841] as10x_usb: error during firmware upload part1 [ 354.747747][ T5841] Registered device nBox DVB-T Dongle [ 355.062309][ T9699] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1017'. [ 355.202529][ T9699] openvswitch: netlink: Flow key attr not present in new flow. [ 355.429382][ T9] usb 5-1: USB disconnect, device number 36 [ 355.538089][ T5841] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 355.723594][ T9] Unregistered device nBox DVB-T Dongle [ 355.736357][ T9] as10x_usb: device has been disconnected [ 355.810675][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 355.824299][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 355.877361][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.960193][ T5841] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.969884][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.977336][ T9718] netlink: 'syz.1.1031': attribute type 21 has an invalid length. [ 355.983635][ T5841] usb 3-1: Product: syz [ 355.986716][ T9718] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1031'. [ 355.989826][ T5841] usb 3-1: Manufacturer: syz [ 356.505614][ T5841] usb 3-1: SerialNumber: syz [ 356.540412][ T9718] netlink: 'syz.1.1031': attribute type 6 has an invalid length. [ 356.548632][ T9718] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1031'. [ 356.558702][ T5841] usb 3-1: config 0 descriptor?? [ 356.567108][ T5841] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 356.577362][ T5841] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 358.202378][ T9735] sctp: [Deprecated]: syz.2.1026 (pid 9735) Use of int in max_burst socket option deprecated. [ 358.202378][ T9735] Use struct sctp_assoc_value instead [ 358.854554][ T5841] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 358.864691][ T5841] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 358.883703][ T5841] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 358.891271][ T5841] em28xx 3-1:0.0: No AC97 audio processor [ 360.269101][ T5841] usb 3-1: USB disconnect, device number 32 [ 360.292249][ T5841] em28xx 3-1:0.0: Disconnecting em28xx [ 360.311551][ T5841] em28xx 3-1:0.0: Freeing device [ 360.359552][ T9766] sctp: [Deprecated]: syz.2.1042 (pid 9766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.359552][ T9766] Use struct sctp_sack_info instead [ 360.792127][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 361.316777][ T5967] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 361.339295][ T5841] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 361.491830][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.559574][ T5967] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 361.647422][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.743716][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 361.750383][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 361.768425][ T5841] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 361.784729][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.802776][ T5841] usb 5-1: config 0 descriptor?? [ 361.841225][ T5967] usb 3-1: config 0 descriptor?? [ 362.107590][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 362.107624][ T30] audit: type=1400 audit(1752543745.413:1338): avc: denied { getopt } for pid=9794 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.176330][ T9802] FAULT_INJECTION: forcing a failure. [ 362.176330][ T9802] name failslab, interval 1, probability 0, space 0, times 0 [ 362.206668][ T9797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.210876][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.0.1054 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 362.210897][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.210906][ T9802] Call Trace: [ 362.210911][ T9802] [ 362.210917][ T9802] dump_stack_lvl+0x16c/0x1f0 [ 362.210946][ T9802] should_fail_ex+0x512/0x640 [ 362.210966][ T9802] ? __kmalloc_noprof+0xbf/0x510 [ 362.210988][ T9802] ? video_usercopy+0x1a0/0x1720 [ 362.211007][ T9802] should_failslab+0xc2/0x120 [ 362.211029][ T9802] __kmalloc_noprof+0xd2/0x510 [ 362.211047][ T9802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.211069][ T9802] video_usercopy+0x1a0/0x1720 [ 362.211088][ T9802] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 362.211111][ T9802] ? __pfx___video_do_ioctl+0x10/0x10 [ 362.211130][ T9802] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 362.211152][ T9802] ? __pfx_video_usercopy+0x10/0x10 [ 362.211187][ T9802] v4l2_ioctl+0x1ba/0x250 [ 362.211204][ T9802] ? __pfx_v4l2_ioctl+0x10/0x10 [ 362.211224][ T9802] __x64_sys_ioctl+0x18e/0x210 [ 362.211242][ T9802] do_syscall_64+0xcd/0x4c0 [ 362.211265][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.211281][ T9802] RIP: 0033:0x7f2ddaf8e929 [ 362.211293][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.211308][ T9802] RSP: 002b:00007f2dd8df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.211323][ T9802] RAX: ffffffffffffffda RBX: 00007f2ddb1b5fa0 RCX: 00007f2ddaf8e929 [ 362.211333][ T9802] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 362.211342][ T9802] RBP: 00007f2dd8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 362.211351][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.211360][ T9802] R13: 0000000000000000 R14: 00007f2ddb1b5fa0 R15: 00007fff94d3ef08 [ 362.211380][ T9802] [ 362.409765][ T5841] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 362.417477][ T5841] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 362.426132][ T9797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.433933][ T5841] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 362.441479][ T5841] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 362.449457][ T5841] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 362.459784][ T5841] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 362.466071][ T30] audit: type=1400 audit(1752543745.773:1339): avc: denied { map } for pid=9805 comm="syz.0.1056" path="socket:[24059]" dev="sockfs" ino=24059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.564117][ T5841] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -71 [ 362.575850][ T5841] usb 5-1: USB disconnect, device number 37 [ 362.682273][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 362.723547][ T30] audit: type=1400 audit(1752543745.773:1340): avc: denied { read } for pid=9805 comm="syz.0.1056" path="socket:[24059]" dev="sockfs" ino=24059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.780149][ T9808] hsr_slave_0: left promiscuous mode [ 362.801224][ T9808] hsr_slave_1: left promiscuous mode [ 363.457076][ T9817] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 363.466229][ T9817] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 363.475142][ T9817] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 363.483980][ T9817] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 363.493187][ T9817] geneve2: entered promiscuous mode [ 363.498446][ T9817] geneve2: entered allmulticast mode [ 364.332135][ T5967] usbhid 3-1:0.0: can't add hid device: -71 [ 364.349071][ T5967] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 364.370555][ T5967] usb 3-1: USB disconnect, device number 33 [ 365.641738][ T1206] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 365.742990][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 365.852020][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.680654][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.706714][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.719770][ T1206] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 366.730065][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.741911][ T1206] usb 5-1: config 0 descriptor?? [ 367.087617][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.277420][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.327892][ T30] audit: type=1326 audit(1752543750.633:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.328890][ T9862] sd 0:0:1:0: device reset [ 367.352318][ T30] audit: type=1326 audit(1752543750.633:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.380260][ T30] audit: type=1326 audit(1752543750.633:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2e38d290 code=0x7ffc0000 [ 367.406280][ T30] audit: type=1326 audit(1752543750.633:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.435521][ T30] audit: type=1326 audit(1752543750.633:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.459965][ T30] audit: type=1326 audit(1752543750.673:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.483967][ T30] audit: type=1326 audit(1752543750.673:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.510192][ T30] audit: type=1326 audit(1752543750.713:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.549893][ T30] audit: type=1326 audit(1752543750.713:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.576442][ T1206] dragonrise 0003:0079:0011.000E: unknown main item tag 0x6 [ 367.583981][ T1206] dragonrise 0003:0079:0011.000E: item fetching failed at offset 4/5 [ 367.595938][ T1206] dragonrise 0003:0079:0011.000E: parse failed [ 367.602686][ T30] audit: type=1326 audit(1752543750.713:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2e38e929 code=0x7ffc0000 [ 367.626276][ T1206] dragonrise 0003:0079:0011.000E: probe with driver dragonrise failed with error -22 [ 367.691112][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 367.698073][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.717935][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.859680][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.871706][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 367.881152][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.967322][ T9877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 367.973873][ T9877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.981771][ T9877] vhci_hcd vhci_hcd.0: Device attached [ 368.261141][ T881] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 368.723295][ T9878] vhci_hcd: connection reset by peer [ 368.796381][ T36] vhci_hcd: stop threads [ 368.852450][ T36] vhci_hcd: release socket [ 368.911054][ T36] vhci_hcd: disconnect device [ 369.243444][ T9] usb 3-1: config 0 descriptor?? [ 369.266536][ T43] usb 5-1: USB disconnect, device number 38 [ 370.020940][ T9] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 370.094760][ T9886] lo speed is unknown, defaulting to 1000 [ 370.261277][ T9896] netlink: 4070 bytes leftover after parsing attributes in process `syz.3.1083'. [ 370.295520][ T9899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9899 comm=syz.1.1084 [ 370.524645][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.648278][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.986974][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.100208][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.417284][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.448493][ T9] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 371.457854][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.587151][ T9] usb 3-1: USB disconnect, device number 34 [ 372.344600][ T9918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 372.351167][ T9918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.371021][ T9918] vhci_hcd vhci_hcd.0: Device attached [ 373.234570][ T9919] vhci_hcd: connection closed [ 373.327167][ T30] kauditd_printk_skb: 536 callbacks suppressed [ 373.327184][ T30] audit: type=1400 audit(1752543756.633:1887): avc: denied { setcurrent } for pid=9921 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.382934][ T36] vhci_hcd: stop threads [ 373.474196][ T36] vhci_hcd: release socket [ 373.492787][ T30] audit: type=1401 audit(1752543756.683:1888): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 373.530884][ T36] vhci_hcd: disconnect device [ 373.534100][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.560952][ T881] vhci_hcd: vhci_device speed not set [ 373.565044][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.633308][ T30] audit: type=1400 audit(1752543756.933:1889): avc: denied { remove_name } for pid=9921 comm="syz.4.1090" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.664763][ T30] audit: type=1400 audit(1752543756.943:1890): avc: denied { unlink } for pid=9921 comm="syz.4.1090" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 373.880821][ T5967] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 374.587952][ T9941] mmap: syz.0.1096 (9941): VmData 37715968 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 374.641011][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 374.646519][ C0] Unknown status report in ack skb [ 374.684876][ T5967] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 374.739903][ T9950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 374.746463][ T9950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.754436][ T9950] vhci_hcd vhci_hcd.0: Device attached [ 374.810958][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.911327][ T5967] usb 5-1: Product: syz [ 374.968604][ T5967] usb 5-1: Manufacturer: syz [ 375.036212][ T5967] usb 5-1: SerialNumber: syz [ 375.219082][ T5967] usb 5-1: config 0 descriptor?? [ 375.242788][ T881] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 375.657361][ T9955] fuse: Unknown parameter 'g ' [ 375.821280][ T9951] vhci_hcd: connection reset by peer [ 375.827716][ T259] vhci_hcd: stop threads [ 375.832055][ T259] vhci_hcd: release socket [ 375.836576][ T259] vhci_hcd: disconnect device [ 375.855131][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 376.733289][ T9970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1105'. [ 376.823474][ T5967] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 376.892251][ T5967] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 376.987322][ T5967] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 377.102999][ T5967] usb 5-1: USB disconnect, device number 39 [ 378.103499][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.197759][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 378.923828][ T30] audit: type=1400 audit(1752543762.233:1891): avc: denied { getopt } for pid=9999 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 380.144696][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.173847][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.178911][T10021] x_tables: duplicate underflow at hook 1 [ 380.327988][T10023] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 380.457757][T10025] lo speed is unknown, defaulting to 1000 [ 380.531400][ T881] vhci_hcd: vhci_device speed not set [ 380.540958][ T30] audit: type=1400 audit(1752543763.833:1892): avc: denied { read } for pid=10022 comm="syz.1.1120" path="socket:[25641]" dev="sockfs" ino=25641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.225818][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.266137][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.300791][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 381.352291][T10051] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 381.360958][T10051] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 381.476911][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.488163][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.500297][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.509819][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.522731][T10043] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 381.532890][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.767477][ T9] usb 5-1: USB disconnect, device number 40 [ 381.776621][T10056] input: syz0 as /devices/virtual/input/input39 [ 383.200068][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.269134][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.364414][T10076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 384.370966][T10076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 384.378775][T10076] vhci_hcd vhci_hcd.0: Device attached [ 384.384304][T10080] vhci_hcd: connection closed [ 384.681087][ T5901] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 384.765629][T10083] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 384.812656][ T59] vhci_hcd: stop threads [ 384.832651][ T59] vhci_hcd: release socket [ 384.873131][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.873353][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.896173][ T30] audit: type=1400 audit(1752543768.143:1893): avc: denied { create } for pid=10084 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 384.899568][ T59] vhci_hcd: disconnect device [ 385.286975][T10077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.300326][T10077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.357612][T10077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.367232][T10077] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.378007][T10077] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.387102][T10077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.125921][T10098] dummy0: entered promiscuous mode [ 386.131553][T10098] macsec1: entered promiscuous mode [ 386.136900][T10098] macsec1: entered allmulticast mode [ 386.142261][T10098] dummy0: entered allmulticast mode [ 386.153142][T10098] dummy0: left allmulticast mode [ 386.158328][T10098] dummy0: left promiscuous mode [ 386.680785][ T30] audit: type=1326 audit(1752543769.973:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 386.735380][ T30] audit: type=1326 audit(1752543770.013:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 386.784911][ T30] audit: type=1326 audit(1752543770.013:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 386.872496][ T30] audit: type=1326 audit(1752543770.013:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 386.899987][ T30] audit: type=1326 audit(1752543770.013:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 387.284094][ T30] audit: type=1400 audit(1752543770.593:1899): avc: denied { append } for pid=10124 comm="syz.2.1147" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.349096][ T30] audit: type=1326 audit(1752543770.633:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 387.407406][ T30] audit: type=1326 audit(1752543770.633:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 387.457986][ T30] audit: type=1326 audit(1752543770.653:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa394f8e929 code=0x7ffc0000 [ 387.682279][T10137] kvm: pic: level sensitive irq not supported [ 387.683037][T10137] kvm: pic: non byte read [ 387.693924][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 387.850980][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 387.864303][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 387.885978][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 387.897921][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.909164][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.911731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.918347][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.927620][ T9] usb 3-1: Product: syz [ 387.939223][ T9] usb 3-1: Manufacturer: я [ 387.945425][ T9] usb 3-1: SerialNumber: syz [ 387.952244][T10154] 9pnet_fd: Insufficient options for proto=fd [ 388.157473][ T9] cdc_ncm 3-1:1.0: bind() failure [ 388.168804][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 388.177410][ T9] cdc_ncm 3-1:1.1: bind() failure [ 388.189284][ T9] usb 3-1: USB disconnect, device number 35 [ 389.264470][T10172] SELinux: failed to load policy [ 389.850855][ T5901] vhci_hcd: vhci_device speed not set [ 390.780066][T10204] comedi comedi3: pcl818: I/O port conflict (0x6,16) [ 390.917070][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 390.917086][ T30] audit: type=1400 audit(1752543774.223:1908): avc: denied { create } for pid=10208 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.024793][T10214] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 391.035270][T10214] 9pnet_fd: Insufficient options for proto=fd [ 391.041898][ T30] audit: type=1400 audit(1752543774.353:1909): avc: denied { ioctl } for pid=10212 comm="syz.3.1173" path="socket:[26238]" dev="sockfs" ino=26238 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.119926][T10217] tmpfs: Bad value for 'mpol' [ 392.500811][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 392.600792][ T5901] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 392.630882][ T9] usb 3-1: device descriptor read/64, error -71 [ 392.686219][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 392.808797][ T5901] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 392.817106][ T5901] usb 5-1: config 0 has no interface number 0 [ 392.823438][ T5901] usb 5-1: config 0 interface 41 has no altsetting 0 [ 392.832034][ T5901] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 392.841686][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.849667][ T5901] usb 5-1: Product: syz [ 392.853900][ T5901] usb 5-1: Manufacturer: syz [ 392.858500][ T5901] usb 5-1: SerialNumber: syz [ 393.370256][ T5901] usb 5-1: config 0 descriptor?? [ 393.390782][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 393.530696][ T9] usb 3-1: device descriptor read/64, error -71 [ 393.583508][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.592185][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.650888][ T9] usb usb3-port1: attempt power cycle [ 393.990921][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 394.043859][ T9] usb 3-1: device descriptor read/8, error -71 [ 394.205992][ T5901] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 394.283835][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 394.311107][ T9] usb 3-1: device descriptor read/8, error -71 [ 394.426704][ T9] usb usb3-port1: unable to enumerate USB device [ 394.683110][T10282] overlayfs: failed to resolve './file0': -2 [ 395.144346][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.168435][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.405730][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.414469][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.463234][ T5901] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 395.516905][ T5901] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 395.545129][ T5901] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 395.640966][ T5901] usb 5-1: USB disconnect, device number 41 [ 396.748407][T10313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 396.754945][T10313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 396.774960][T10313] vhci_hcd vhci_hcd.0: Device attached [ 397.100883][ T5901] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 397.160782][ T9] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 397.270799][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 397.277264][ T5901] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 397.299659][ T5901] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 397.308243][T10329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.309436][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.323845][ T5901] usb 5-1: Product: syz [ 397.328108][ T5901] usb 5-1: Manufacturer: syz [ 397.332849][ T5901] usb 5-1: SerialNumber: syz [ 397.358566][ T5901] usb 5-1: config 0 descriptor?? [ 397.372978][T10319] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.386653][T10314] vhci_hcd: connection reset by peer [ 397.392897][ T59] vhci_hcd: stop threads [ 397.408304][ T59] vhci_hcd: release socket [ 397.415739][ T5901] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 397.431200][ T59] vhci_hcd: disconnect device [ 397.524953][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.557750][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.640149][ T5901] usb 5-1: USB disconnect, device number 42 [ 397.640179][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 398.165214][T10353] FAULT_INJECTION: forcing a failure. [ 398.165214][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.182640][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 398.195584][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.0.1215 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 398.195609][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.195620][T10353] Call Trace: [ 398.195626][T10353] [ 398.195632][T10353] dump_stack_lvl+0x16c/0x1f0 [ 398.195662][T10353] should_fail_ex+0x512/0x640 [ 398.195689][T10353] _copy_from_user+0x2e/0xd0 [ 398.195715][T10353] usbdev_ioctl+0x22d3/0x4070 [ 398.195742][T10353] ? __schedule+0x1181/0x5de0 [ 398.195772][T10353] ? __pfx_usbdev_ioctl+0x10/0x10 [ 398.195808][T10353] ? __pfx___schedule+0x10/0x10 [ 398.195829][T10353] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 398.195867][T10353] ? rcu_is_watching+0x12/0xc0 [ 398.195891][T10353] ? irqentry_exit+0x3b/0x90 [ 398.195914][T10353] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.195947][T10353] ? __x64_sys_ioctl+0x123/0x210 [ 398.195968][T10353] ? __pfx_usbdev_ioctl+0x10/0x10 [ 398.195996][T10353] __x64_sys_ioctl+0x18e/0x210 [ 398.196018][T10353] do_syscall_64+0xcd/0x4c0 [ 398.196045][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.196063][T10353] RIP: 0033:0x7f2ddaf8e929 [ 398.196079][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.196096][T10353] RSP: 002b:00007f2dd8df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.196114][T10353] RAX: ffffffffffffffda RBX: 00007f2ddb1b5fa0 RCX: 00007f2ddaf8e929 [ 398.196130][T10353] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 398.196139][T10353] RBP: 00007f2dd8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.196147][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.196155][T10353] R13: 0000000000000000 R14: 00007f2ddb1b5fa0 R15: 00007fff94d3ef08 [ 398.196174][T10353] [ 398.381209][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.511971][T10361] FAULT_INJECTION: forcing a failure. [ 398.511971][T10361] name failslab, interval 1, probability 0, space 0, times 0 [ 398.570069][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.0.1216 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 398.570095][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.570104][T10361] Call Trace: [ 398.570109][T10361] [ 398.570116][T10361] dump_stack_lvl+0x16c/0x1f0 [ 398.570143][T10361] should_fail_ex+0x512/0x640 [ 398.570165][T10361] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 398.570189][T10361] should_failslab+0xc2/0x120 [ 398.570212][T10361] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 398.570231][T10361] ? security_file_alloc+0x34/0x2b0 [ 398.570256][T10361] security_file_alloc+0x34/0x2b0 [ 398.570276][T10361] init_file+0x93/0x4c0 [ 398.570289][T10361] alloc_empty_file+0x73/0x1e0 [ 398.570303][T10361] path_openat+0xda/0x2cb0 [ 398.570320][T10361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.570342][T10361] ? __pfx_path_openat+0x10/0x10 [ 398.570362][T10361] ? __lock_acquire+0xb8a/0x1c90 [ 398.570384][T10361] do_filp_open+0x20b/0x470 [ 398.570403][T10361] ? __pfx_do_filp_open+0x10/0x10 [ 398.570438][T10361] ? alloc_fd+0x471/0x7d0 [ 398.570463][T10361] do_sys_openat2+0x11b/0x1d0 [ 398.570477][T10361] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.570492][T10361] ? __fget_files+0x20e/0x3c0 [ 398.570518][T10361] __x64_sys_openat+0x174/0x210 [ 398.570534][T10361] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.570549][T10361] ? ksys_write+0x1ac/0x250 [ 398.570579][T10361] do_syscall_64+0xcd/0x4c0 [ 398.570605][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.570622][T10361] RIP: 0033:0x7f2ddaf8e929 [ 398.570635][T10361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.570651][T10361] RSP: 002b:00007f2dd8dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.570668][T10361] RAX: ffffffffffffffda RBX: 00007f2ddb1b6080 RCX: 00007f2ddaf8e929 [ 398.570679][T10361] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 398.570689][T10361] RBP: 00007f2dd8dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 398.570699][T10361] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 398.570709][T10361] R13: 0000000000000000 R14: 00007f2ddb1b6080 R15: 00007fff94d3ef08 [ 398.570733][T10361] [ 399.103067][ T30] audit: type=1400 audit(1752543782.413:1910): avc: denied { read } for pid=10369 comm="syz.2.1220" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 399.126123][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.159432][T10374] 9pnet_fd: Insufficient options for proto=fd [ 399.183296][ T30] audit: type=1400 audit(1752543782.463:1911): avc: denied { write } for pid=10369 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 399.507624][ T30] audit: type=1400 audit(1752543782.813:1912): avc: denied { listen } for pid=10375 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 399.535478][T10377] lo speed is unknown, defaulting to 1000 [ 400.625758][T10386] fuse: Bad value for 'fd' [ 400.693166][T10386] lo speed is unknown, defaulting to 1000 [ 400.939320][T10389] lo speed is unknown, defaulting to 1000 [ 401.291107][T10373] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 401.422510][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 401.973659][T10373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 401.993312][T10373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.999692][T10373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.007626][T10373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 402.018483][T10373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.026533][T10373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 402.240741][ T9] vhci_hcd: vhci_device speed not set [ 402.656480][T10413] "syz.4.1231" (10413) uses obsolete ecb(arc4) skcipher [ 402.764566][ T30] audit: type=1400 audit(1752543786.063:1913): avc: denied { associate } for pid=10418 comm="syz.4.1232" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 402.796875][ T30] audit: type=1400 audit(1752543786.103:1914): avc: denied { mounton } for pid=10418 comm="syz.4.1232" path="/file0" dev="rootfs" ino=27295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 402.821664][ T30] audit: type=1400 audit(1752543786.103:1915): avc: denied { setattr } for pid=10418 comm="syz.4.1232" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.993699][T10431] overlayfs: failed to clone upperpath [ 403.219613][T10435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 403.226136][T10435] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 403.247442][T10435] vhci_hcd vhci_hcd.0: Device attached [ 403.389066][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 403.450770][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 403.620788][ T5901] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 404.010730][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 404.016862][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 404.088397][T10436] vhci_hcd: connection reset by peer [ 404.230684][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 404.527969][ T12] vhci_hcd: stop threads [ 404.545954][ T12] vhci_hcd: release socket [ 404.558070][ T12] vhci_hcd: disconnect device [ 404.624312][ T30] audit: type=1400 audit(1752543787.883:1916): avc: denied { nlmsg_read } for pid=10446 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.890442][ T30] audit: type=1400 audit(1752543788.613:1917): avc: denied { create } for pid=10457 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 405.955730][ T30] audit: type=1400 audit(1752543789.253:1918): avc: denied { sys_admin } for pid=10457 comm="syz.1.1245" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 406.563292][ T30] audit: type=1400 audit(1752543789.403:1919): avc: denied { read } for pid=10460 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 406.563658][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 406.582803][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 406.697795][T10474] kernel profiling enabled (shift: 63) [ 406.710903][T10474] profiling shift: 63 too large [ 406.784309][T10474] No such timeout policy "syz1" [ 407.281832][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 407.293346][T10489] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1254'. [ 407.310988][T10489] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1254'. [ 408.730715][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 408.790820][ T5901] vhci_hcd: vhci_device speed not set [ 409.482478][T10505] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.1259'. [ 409.491060][T10507] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.499749][T10507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 409.508731][T10507] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.516623][T10507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 409.586494][ T30] audit: type=1400 audit(1752543792.893:1920): avc: denied { setattr } for pid=10506 comm="syz.1.1260" name="file0" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.690669][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.700998][ T5841] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 409.930980][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 410.451577][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 410.460346][ T5841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 410.474743][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.490878][ T5841] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 410.491242][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.499985][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.524768][ T5841] usb 3-1: Product: syz [ 410.529255][ T5841] usb 3-1: Manufacturer: syz [ 410.536478][ T5841] usb 3-1: SerialNumber: syz [ 410.545724][ T5841] usb 3-1: config 0 descriptor?? [ 410.571595][T10503] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 410.773702][ T5841] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 410.999069][ T5841] usb 3-1: USB disconnect, device number 40 [ 411.005129][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 412.370718][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 412.640774][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 412.647816][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 412.660377][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 412.669858][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.678237][ T9] usb 3-1: Product: syz [ 412.685204][ T9] usb 3-1: Manufacturer: syz [ 412.689890][ T9] usb 3-1: SerialNumber: syz [ 412.697212][ T9] usb 3-1: config 0 descriptor?? [ 412.703399][T10564] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 412.715263][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 412.857555][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 412.866692][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 412.960108][ T9] usb 3-1: USB disconnect, device number 41 [ 412.966168][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 413.034546][T10590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1287'. [ 413.046697][T10590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1287'. [ 413.264559][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 413.364213][T10611] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 414.070755][ T30] audit: type=1400 audit(1752543797.373:1921): avc: denied { read write } for pid=10628 comm="syz.0.1301" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.162127][ T30] audit: type=1400 audit(1752543797.403:1922): avc: denied { open } for pid=10628 comm="syz.0.1301" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.195363][ T30] audit: type=1400 audit(1752543797.403:1923): avc: denied { map } for pid=10628 comm="syz.0.1301" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.256162][ T30] audit: type=1400 audit(1752543797.403:1924): avc: denied { execute } for pid=10628 comm="syz.0.1301" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.498592][T10640] netlink: 'syz.4.1305': attribute type 21 has an invalid length. [ 414.508561][T10640] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1305'. [ 414.519858][T10640] netlink: 'syz.4.1305': attribute type 6 has an invalid length. [ 414.530691][T10640] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1305'. [ 414.577494][ T30] audit: type=1400 audit(1752543797.883:1925): avc: denied { map } for pid=10641 comm="syz.3.1306" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.604415][ T30] audit: type=1400 audit(1752543797.883:1926): avc: denied { execute } for pid=10641 comm="syz.3.1306" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 415.294783][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 415.852613][ T5849] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 415.905445][T10657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.523399][T10642] kexec: Could not allocate control_code_buffer [ 417.701638][T10678] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 417.813537][T10680] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 417.864255][ T259] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 417.865197][T10678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.941174][T10687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.987634][T10687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.012785][T10687] netlink: 'syz.3.1318': attribute type 21 has an invalid length. [ 418.021684][T10687] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1318'. [ 418.103338][T10678] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 418.113930][T10678] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 418.123983][T10678] bond1 (unregistering): Released all slaves [ 418.144786][T10687] netlink: 'syz.3.1318': attribute type 6 has an invalid length. [ 418.171177][T10687] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1318'. [ 418.259099][T10697] netlink: 'syz.0.1322': attribute type 64 has an invalid length. [ 418.267502][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 419.294531][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.319877][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.320802][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 419.932917][ T5849] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 419.942628][ T5849] Bluetooth: hci3: Injecting HCI hardware error event [ 419.950902][ T5849] Bluetooth: hci3: hardware error 0x00 [ 420.739129][T10727] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.747879][T10727] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.756595][T10727] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.765266][T10727] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.785154][T10727] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 420.831857][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.845345][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.859753][T10729] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1332'. [ 420.910359][T10733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.956232][T10729] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 420.999524][T10729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.033329][T10735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.061458][T10735] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 421.072920][T10735] bond1: (slave ipip0): Error -95 calling set_mac_address [ 421.119890][T10740] tmpfs: Unknown parameter '' [ 421.671025][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 421.850717][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 421.980251][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.991031][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.004872][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.013552][ T5849] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 422.125937][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.998105][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 423.025612][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.037383][ T9] usb 3-1: config 0 descriptor?? [ 425.592339][ T9] usb 3-1: can't set config #0, error -71 [ 425.602675][ T9] usb 3-1: USB disconnect, device number 42 [ 425.916653][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.936819][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.021699][T10773] 9pnet_fd: Insufficient options for proto=fd [ 428.365568][T10799] tipc: Failed to obtain node identity [ 428.382472][T10799] tipc: Enabling of bearer rejected, failed to enable media [ 429.824547][ T30] audit: type=1400 audit(1752543813.103:1927): avc: denied { setopt } for pid=10837 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 430.041116][ T5901] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 430.440727][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 430.466496][ T5901] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 430.479272][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 430.500141][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.553506][ T5901] usb 3-1: Product: syz [ 430.648367][ T5901] usb 3-1: Manufacturer: syz [ 430.653606][ T5901] usb 3-1: SerialNumber: syz [ 430.663989][ T5901] usb 3-1: config 0 descriptor?? [ 430.674695][ T5901] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 430.937617][ T5901] usb 3-1: USB disconnect, device number 43 [ 431.417570][T10868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.464061][T10868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.491584][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 432.528581][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 433.085711][T10884] overlayfs: failed to clone upperpath [ 434.148211][T10901] netlink: 'syz.4.1368': attribute type 21 has an invalid length. [ 434.159989][T10901] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1368'. [ 434.174478][T10901] netlink: 'syz.4.1368': attribute type 6 has an invalid length. [ 434.183253][T10898] input: syz0 as /devices/virtual/input/input44 [ 434.192035][T10901] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1368'. [ 434.205553][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 434.237415][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 434.392504][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 434.401621][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 436.226538][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.248147][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.362349][T10939] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 436.368889][T10939] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.439276][T10939] vhci_hcd vhci_hcd.0: Device attached [ 436.492117][T10945] input: syz0 as /devices/virtual/input/input45 [ 436.502542][T10944] netlink: 'syz.1.1380': attribute type 21 has an invalid length. [ 436.512935][T10940] vhci_hcd: connection closed [ 436.513310][ T259] vhci_hcd: stop threads [ 436.513322][T10944] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1380'. [ 436.517993][ T259] vhci_hcd: release socket [ 436.518009][ T259] vhci_hcd: disconnect device [ 436.542243][T10944] netlink: 'syz.1.1380': attribute type 6 has an invalid length. [ 436.550074][T10944] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1380'. [ 437.640038][T10957] 9pnet_fd: Insufficient options for proto=fd [ 439.224846][T10977] 9pnet_fd: Insufficient options for proto=fd [ 439.233272][ T30] audit: type=1400 audit(1752543822.533:1928): avc: denied { setopt } for pid=10974 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.274300][ T30] audit: type=1400 audit(1752543822.543:1929): avc: denied { remount } for pid=10974 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 439.524760][T10991] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 439.531318][T10991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.534222][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.546628][T10991] vhci_hcd vhci_hcd.0: Device attached [ 439.790727][ T5967] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 440.029800][T10992] vhci_hcd: connection reset by peer [ 440.054707][T10829] vhci_hcd: stop threads [ 440.058994][T10829] vhci_hcd: release socket [ 440.071265][T10829] vhci_hcd: disconnect device [ 440.098749][T10999] 9pnet_fd: Insufficient options for proto=fd [ 441.384387][ T30] audit: type=1400 audit(1752543824.693:1930): avc: denied { setopt } for pid=11004 comm="syz.4.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 441.554944][ T1206] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 441.732266][ T1206] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 441.758783][ T1206] usb 3-1: config 0 has no interface number 0 [ 441.790791][ T1206] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 441.815547][ T1206] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 441.976055][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.984564][ T1206] usb 3-1: Product: syz [ 441.988951][ T1206] usb 3-1: Manufacturer: syz [ 441.993720][ T1206] usb 3-1: SerialNumber: syz [ 441.999926][ T1206] usb 3-1: config 0 descriptor?? [ 442.005613][T11003] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 442.262524][ T1206] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.318797][ T1206] usb 3-1: MIDIStreaming interface descriptor not found [ 442.518680][ T1206] usb 3-1: USB disconnect, device number 44 [ 443.168119][ T3593] Bluetooth: hci5: Frame reassembly failed (-84) [ 444.498042][T11044] bond3: entered promiscuous mode [ 444.558464][T11044] bond3: entered allmulticast mode [ 444.639646][T11044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.458854][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 445.471410][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 445.580699][ T5967] vhci_hcd: vhci_device speed not set [ 445.791437][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.800043][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.889089][T11055] lo speed is unknown, defaulting to 1000 [ 445.939090][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 445.981654][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1420'. [ 446.015857][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 446.022106][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1419'. [ 446.040908][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1419'. [ 446.510659][ T1206] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 446.607418][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 446.620637][ T31] Not tainted 6.16.0-rc6-syzkaller #0 [ 446.626662][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.641658][ T31] task:kworker/0:1 state:D stack:23000 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 446.656477][T11057] delete_channel: no stack [ 446.895059][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 446.900326][ T31] Workqueue: usb_hub_wq hub_event [ 446.918475][ T1206] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 447.099610][ T31] Call Trace: [ 447.103190][ T31] [ 447.365973][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.390114][ T1206] usb 3-1: config 0 descriptor?? [ 447.390658][ T31] __schedule+0x116a/0x5de0 [ 447.398734][ T1206] gspca_main: sunplus-2.14.0 probing 041e:400b [ 447.407875][ T31] ? device_unregister+0x1d/0xc0 [ 447.420147][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 447.425618][ T31] ? dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 447.434398][ T31] ? __device_attach_driver+0x161/0x310 [ 447.440651][ T31] ? __pfx___schedule+0x10/0x10 [ 447.445606][ T31] ? find_held_lock+0x2b/0x80 [ 447.450345][ T31] ? schedule+0x2d7/0x3a0 [ 447.456989][ T31] schedule+0xe7/0x3a0 [ 447.461251][ T31] schedule_timeout+0x257/0x290 [ 447.467218][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 447.475827][ T31] ? mark_held_locks+0x49/0x80 [ 447.482805][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.507840][ T31] __wait_for_common+0x2ff/0x4e0 [ 447.545219][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 447.560327][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 447.575371][ T31] ? __pfx_device_del+0x10/0x10 [ 447.580263][ T31] ? kobject_put+0xab/0x5a0 [ 447.610395][ T31] i2c_del_adapter+0x546/0x6f0 [ 447.616639][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 447.623474][ T31] ? kfree+0x2b4/0x4d0 [ 447.630899][ T31] ? media_device_cleanup+0x53/0x80 [ 447.636332][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 447.643298][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 447.654156][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 447.660898][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 447.666332][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.674169][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.680886][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 447.686749][ T31] usb_probe_interface+0x300/0x9c0 [ 447.694144][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 447.701013][ T31] really_probe+0x241/0xa90 [ 447.705599][ T31] __driver_probe_device+0x1de/0x440 [ 447.711220][ T31] driver_probe_device+0x4c/0x1b0 [ 447.718452][ T31] __device_attach_driver+0x1df/0x310 [ 447.725430][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 447.731597][ T31] bus_for_each_drv+0x159/0x1e0 [ 447.736620][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.746964][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.752429][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.760855][ T31] __device_attach+0x1e4/0x4b0 [ 447.765697][ T31] ? __pfx___device_attach+0x10/0x10 [ 447.772510][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 447.780901][ T31] bus_probe_device+0x17f/0x1c0 [ 447.785923][ T31] device_add+0x1148/0x1a70 [ 447.790893][ T31] ? __pfx_device_add+0x10/0x10 [ 447.800864][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 447.806413][ T31] usb_set_configuration+0x1187/0x1e20 [ 447.817123][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 447.825341][ T31] usb_generic_driver_probe+0xb1/0x110 [ 447.831282][ T31] usb_probe_device+0xec/0x3e0 [ 447.836122][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 447.841891][ T31] really_probe+0x241/0xa90 [ 447.850806][ T31] __driver_probe_device+0x1de/0x440 [ 447.857293][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 447.863400][ T31] driver_probe_device+0x4c/0x1b0 [ 447.874205][ T31] __device_attach_driver+0x1df/0x310 [ 447.881308][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 447.889799][ T31] bus_for_each_drv+0x159/0x1e0 [ 447.896466][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.902040][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.907254][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.913331][ T31] __device_attach+0x1e4/0x4b0 [ 447.918119][ T31] ? __pfx___device_attach+0x10/0x10 [ 447.923666][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 447.929017][ T31] bus_probe_device+0x17f/0x1c0 [ 447.934096][ T31] device_add+0x1148/0x1a70 [ 447.938612][ T31] ? __pfx_device_add+0x10/0x10 [ 447.943565][ T31] ? add_device_randomness+0xb7/0xf0 [ 447.948980][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 447.955056][ T31] usb_new_device+0xd07/0x1a20 [ 447.959857][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 447.964948][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 447.970235][ T31] ? mark_held_locks+0x49/0x80 [ 447.975064][ T31] hub_event+0x2eb7/0x4fa0 [ 447.979562][ T31] ? __pfx_hub_event+0x10/0x10 [ 447.984461][ T31] ? sm3_block_generic+0x2e90/0x35e0 [ 447.989751][ T31] ? rcu_is_watching+0x12/0xc0 [ 447.994730][ T31] process_one_work+0x9cf/0x1b70 [ 447.999697][ T31] ? __pfx_defense_work_handler+0x10/0x10 [ 448.006320][ T31] ? __pfx_process_one_work+0x10/0x10 [ 448.011758][ T31] ? assign_work+0x1a0/0x250 [ 448.016446][ T31] worker_thread+0x6c8/0xf10 [ 448.021210][ T31] ? __pfx_worker_thread+0x10/0x10 [ 448.026456][ T31] kthread+0x3c5/0x780 [ 448.030856][ T31] ? __pfx_kthread+0x10/0x10 [ 448.035516][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.040279][ T31] ? __pfx_kthread+0x10/0x10 [ 448.045088][ T31] ret_from_fork+0x5d7/0x6f0 [ 448.049712][ T31] ? __pfx_kthread+0x10/0x10 [ 448.054356][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.059224][ T31] [ 448.062610][ T31] [ 448.062610][ T31] Showing all locks held in the system: [ 448.070352][ T31] 5 locks held by kworker/0:1/10: [ 448.180613][ T31] #0: ffff888021efd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 448.191759][ T31] #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 448.203104][ T31] #2: ffff888029db0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 448.212165][ T31] #3: ffff888024f88198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 448.227233][ T1206] gspca_sunplus: reg_r err -71 [ 448.232097][ T31] #4: ffff888032958160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 448.241671][ T1206] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 448.249711][ T31] 1 lock held by khungtaskd/31: [ 448.256541][ T1206] usb 3-1: USB disconnect, device number 45 [ 448.262597][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 448.278620][ T31] 3 locks held by kworker/0:2/1206: [ 448.285410][ T31] #0: ffff888021efd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 448.298022][ T31] #1: ffffc9000432fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 448.309354][ T31] #2: ffff888029ca8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 448.318629][ T31] 2 locks held by getty/5592: [ 448.323367][ T31] #0: ffff888032d4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 448.333231][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 448.343916][ T31] 5 locks held by kworker/u8:16/10832: [ 448.349378][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 448.360105][ T31] #1: ffffc90003eefd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 448.373104][ T31] #2: ffffffff9034ce90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 448.383174][ T31] #3: ffffffff90362ee8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 448.393799][ T31] #4: ffffffff8e5d03f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 448.404060][ T31] [ 448.406391][ T31] ============================================= [ 448.406391][ T31] [ 448.417712][ T31] NMI backtrace for cpu 0 [ 448.417725][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 448.417746][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.417756][ T31] Call Trace: [ 448.417761][ T31] [ 448.417768][ T31] dump_stack_lvl+0x116/0x1f0 [ 448.417796][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 448.417813][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.417835][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.417860][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 448.417881][ T31] watchdog+0xf70/0x12c0 [ 448.417905][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.417922][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.417946][ T31] ? __kthread_parkme+0x19e/0x250 [ 448.417973][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.417991][ T31] kthread+0x3c5/0x780 [ 448.418009][ T31] ? __pfx_kthread+0x10/0x10 [ 448.418027][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.418049][ T31] ? __pfx_kthread+0x10/0x10 [ 448.418067][ T31] ret_from_fork+0x5d7/0x6f0 [ 448.418092][ T31] ? __pfx_kthread+0x10/0x10 [ 448.418109][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.418142][ T31] [ 448.418147][ T31] Sending NMI from CPU 0 to CPUs 1: [ 448.542041][ C1] NMI backtrace for cpu 1 [ 448.542054][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 448.542071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.542079][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 448.542099][ C1] Code: 24 65 48 8b 15 88 dd 14 12 65 8b 05 99 dd 14 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 <8b> 82 3c 16 00 00 85 c0 74 2b 8b 82 18 16 00 00 83 f8 02 75 20 48 [ 448.542111][ C1] RSP: 0018:ffffc900001d7a50 EFLAGS: 00000246 [ 448.542124][ C1] RAX: 0000000080000100 RBX: ffff88805b778000 RCX: ffffffff8b04f73b [ 448.542133][ C1] RDX: ffff88801ea84880 RSI: ffffffff8b03ac8b RDI: ffff88805b778000 [ 448.542142][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 448.542150][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 448.542157][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 448.542165][ C1] FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 448.542180][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.542189][ C1] CR2: 00007fffb004aac0 CR3: 000000007fc24000 CR4: 00000000003526f0 [ 448.542198][ C1] Call Trace: [ 448.542202][ C1] [ 448.542207][ C1] ieee80211_clean_skb+0x1b/0x740 [ 448.542227][ C1] ieee80211_rx_list+0xba4/0x2980 [ 448.542247][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 448.542264][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 448.542278][ C1] ? lock_acquire+0x179/0x350 [ 448.542294][ C1] ieee80211_rx_napi+0xdc/0x410 [ 448.542311][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 448.542327][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.542344][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.542362][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 448.542379][ C1] tasklet_action_common+0x281/0x400 [ 448.542399][ C1] handle_softirqs+0x219/0x8e0 [ 448.542416][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 448.542433][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 448.542448][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 448.542465][ C1] run_ksoftirqd+0x3a/0x60 [ 448.542479][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 448.542498][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 448.542515][ C1] kthread+0x3c5/0x780 [ 448.542528][ C1] ? __pfx_kthread+0x10/0x10 [ 448.542541][ C1] ? rcu_is_watching+0x12/0xc0 [ 448.542560][ C1] ? __pfx_kthread+0x10/0x10 [ 448.542574][ C1] ret_from_fork+0x5d7/0x6f0 [ 448.542592][ C1] ? __pfx_kthread+0x10/0x10 [ 448.542604][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.542625][ C1] [ 448.543967][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 448.803024][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 448.813073][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.823110][ T31] Call Trace: [ 448.826373][ T31] [ 448.829290][ T31] dump_stack_lvl+0x3d/0x1f0 [ 448.833873][ T31] panic+0x71c/0x800 [ 448.837764][ T31] ? __pfx_panic+0x10/0x10 [ 448.842192][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 448.847575][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.853557][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 448.858933][ T31] ? watchdog+0xdda/0x12c0 [ 448.863338][ T31] ? watchdog+0xdcd/0x12c0 [ 448.867747][ T31] watchdog+0xdeb/0x12c0 [ 448.871981][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.876657][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.881884][ T31] ? __kthread_parkme+0x19e/0x250 [ 448.886919][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.891591][ T31] kthread+0x3c5/0x780 [ 448.895648][ T31] ? __pfx_kthread+0x10/0x10 [ 448.900221][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.904989][ T31] ? __pfx_kthread+0x10/0x10 [ 448.909593][ T31] ret_from_fork+0x5d7/0x6f0 [ 448.914185][ T31] ? __pfx_kthread+0x10/0x10 [ 448.918768][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.923537][ T31] [ 448.926730][ T31] Kernel Offset: disabled [ 448.931041][ T31] Rebooting in 86400 seconds..