last executing test programs: 6m33.473655666s ago: executing program 1 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x4}) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) 6m31.844799872s ago: executing program 1 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4000000000000000}, 0x18) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e27, @remote}, 0x5) 6m31.244794077s ago: executing program 1 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 6m30.719664839s ago: executing program 1 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) unshare(0x22020600) setns(r2, 0x24020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (fail_nth: 2) 6m29.782949929s ago: executing program 1 (id=145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x400100) write$sndseq(r0, &(0x7f0000000440)=[{0x0, 0x5, 0x1, 0x6, @time={0x95, 0x6}, {0x7, 0x1}, {0x9, 0x60}, @raw32={[0x1347, 0x5, 0xfffffff7]}}, {0x0, 0x1, 0x1, 0x8, @time={0x47d, 0x1cf31519}, {0x4, 0x1}, {0x45, 0x7f}, @addr={0x4, 0x4b}}, {0x0, 0x8, 0x5, 0x1, @tick=0xd0, {0x85, 0x9}, {0x7}, @raw8={"416ace74f8942a448f7ba104"}}, {0x90, 0x3, 0x9, 0x2, @tick=0x2, {0xc2, 0x80}, {0x1, 0x10}, @control={0x5, 0x6, 0x9}}, {0x40, 0x83, 0x2a, 0x6, @time={0x5, 0x55}, {0x7}, {0x3, 0x6}, @raw8={"2ca319627a4b61fad8f19482"}}, {0x40, 0x3, 0x6, 0x7, @tick=0x1, {0x3, 0x2}, {0xf8, 0xff}, @quote={{0x5}, 0x1}}, {0x8, 0x1, 0x0, 0x10, @tick=0xdfc3, {0x8}, {0x9, 0x9}, @raw8={"93692f39f3e0691f2907daef"}}], 0xc4) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffd87f00000000000000040000000002000000000000080200000000"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x1, 0x3ff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x4, 0x1, 0x3, 0xa, 0x1, 0x9}, &(0x7f00000000c0)=0x20) keyctl$read(0xb, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000000), 0x4) 6m28.627651114s ago: executing program 1 (id=152): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d"], 0x0) iopl(0x3) removexattr(0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) io_uring_setup(0x5304, &(0x7f0000000240)={0x0, 0x80e0fe, 0x10000, 0x3, 0x220}) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) 6m28.195479233s ago: executing program 32 (id=152): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d"], 0x0) iopl(0x3) removexattr(0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) io_uring_setup(0x5304, &(0x7f0000000240)={0x0, 0x80e0fe, 0x10000, 0x3, 0x220}) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) 4m41.964541684s ago: executing program 2 (id=542): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400090000100009042e00027e3a110009050202000202000009058202", @ANYRES64], 0x0) 4m40.55194634s ago: executing program 2 (id=547): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9da9, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x3) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x5, 0x6, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf25040000", @ANYRESHEX=r0], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c810) 4m38.594227953s ago: executing program 2 (id=555): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x6417, 0x80, 0x3, 0x3d9}, 0x0, &(0x7f0000000700)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_complete(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x88) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0xa, 0x1, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 4m35.714720036s ago: executing program 2 (id=564): socket$can_j1939(0x1d, 0x2, 0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "b2d3e36800", "11a819954d01e523ba588609fd2f2891", "67e8096e", "5a81e60325eaee97"}, 0x28) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m34.919409903s ago: executing program 2 (id=566): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x17, r1}, './file0\x00'}) 4m34.654704282s ago: executing program 2 (id=569): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x14, 0x1, 0x3d, 0x803}}], 0x14}}], 0x1, 0x20000844) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x8, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x401}) syz_open_procfs$pagemap(r3, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xd0080, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x7, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) close(r6) ioctl$LOOP_CHANGE_FD(r0, 0x4c09, r1) dup(r0) 4m19.472338902s ago: executing program 33 (id=569): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x14, 0x1, 0x3d, 0x803}}], 0x14}}], 0x1, 0x20000844) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x8, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x401}) syz_open_procfs$pagemap(r3, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xd0080, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x7, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) close(r6) ioctl$LOOP_CHANGE_FD(r0, 0x4c09, r1) dup(r0) 12.00117153s ago: executing program 6 (id=1552): timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) (async) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000000)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) (async) timer_gettime(r0, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 11.652631332s ago: executing program 6 (id=1553): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') uname(&(0x7f00000000c0)=""/29) listen(r1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20048800) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x240480d1}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) 8.477502017s ago: executing program 0 (id=1560): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r1) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 8.324939762s ago: executing program 5 (id=1561): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x603}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001e40), 0x2800, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000005640)={0x2, 0x3, 0x9, 0x846d}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) unshare(0x40020080) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 8.212609012s ago: executing program 3 (id=1562): syz_open_dev$dri(0x0, 0x1, 0x11f1c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f00000000c0)=0xca) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000001800090000000000000000001c14"], 0xe0}, 0x1, 0x0, 0x0, 0x28000090}, 0x0) read$FUSE(r3, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 7.228287061s ago: executing program 6 (id=1564): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x2}) syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x5, 0x4000, 0x1, 0x69, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000700)={0x80, 0x2000, 0x2000, 0x478b27d189243d75, 0x6, 0x7, 0x10, 0x1, {0x40, 0x2}, {0x0, 0xc, 0x1}, {0x0, 0x6, 0x1}, {0x8, 0x400}, 0x1, 0x1, 0xcf, 0x1ff, 0x0, 0x4, 0x5, 0x200, 0xa740000, 0x10000, 0x1, 0x6, 0x21, 0x100, 0x3, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r4, 0x0, 0x20000000}, 0x20) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x14}}}}, 0x7) read$FUSE(r8, &(0x7f0000002480)={0x2020}, 0x2020) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x6fe, 0x2}, @const={0x0, {0x9}}}) lseek(r8, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)="28fea41711", 0x5, 0xfffffffffffffffe) 6.980650467s ago: executing program 3 (id=1565): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000041}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000340)={{@hyper, 0x2}, @hyper, 0x0, 0x7, 0x20005e, 0x0, 0xc000000000000000, 0x0, 0xfffffffc}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'ip6tnl0\x00'}}, 0x1e) 6.249602727s ago: executing program 5 (id=1567): syz_open_dev$dri(0x0, 0x1, 0x11f1c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f00000000c0)=0xca) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000001800090000000000000000001c1400"], 0xe0}, 0x1, 0x0, 0x0, 0x28000090}, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 6.200833915s ago: executing program 0 (id=1568): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000b0000000b00d0e4c3a66cb0162a38"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x4, 0xbc63) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="8700000000180000710d71c8eef6cf61d40d380a9d8853719a0540f7"], 0x8) 5.574108501s ago: executing program 3 (id=1570): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4", 0xb5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089", 0x1a}], 0x3}}], 0x1, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) sendmmsg$inet(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)="7d4e846e3854c8fe45ced8491f8b2972c772c9b20156c5c7aea782d0a80c355d803d5d6bb82f7b4ab84ff5bdf63540233c15bea88ce1dc48c64e14acaba4401095ca0c495241e4d533325839e7eb446c8c0c5bf588cdce02fdfd80cb2233b40940b2059cf2dd6d918a35e8c778bb959f42185e933999293c19bf1dd61d5d3f0b617e61911c12388f9fc0b7a78dcb9dbe38c9e2dd9aeed68a19272f48e512af7a2dda997bd1da16b087d1", 0xaa}, {&(0x7f0000000b40)="24223f8e238fcf1aeb3b1d2552248e0137da9df4c726a0aa55bd238373339c175bacc0bdf241c8bfc45dc7f3c3e55188ff7b0e5b1f7241408ed208be231e308354a24b2c323ffdb1a0a4bc8933643de55fca25d038ed56534fdb4679c6ca60c3516225e925c8dbd746d130aaea25b23c84ebb55f30ea5f0a624e39eec6ecf6e8f0adda21d6ac4eca21a03d1647a7beabc29d50f0bb1af779c5e62a4031d35f282979c9e32f8564de29a8dc1108cdb177c14f6b6ae00544c6ab2b502836a54bd5650c7ae5c374552c8341ac845572e5ee6cd23c04580cb852df5f4582dd1e9a7299e00cf0602e60f79244161b849316875c84b1f2", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="471d9174b0bc71735abb1cb08dc4603b659c82cc602d7029fff0cc7e71ccd4a65a517e9200a7b0f686b3dc00233a2eecbf7a09b0c403b292834ade18f8c2abdb97a58a76589247612d21a53d592e84557cac5af6c75e9e", 0x57}, {0x0}, {&(0x7f00000017c0)="cf5a8adcfe570e55bd4d93e67de7008d14a0cb8b7a1c01e901d1b6a5d2d0e44cdc861ca4fc465e200cb2d4c5d3f28291572937390e2c75fa90ee162d3e20fe0d1962da0d64dcc69fe8f11f7debbf59c84999bfefc7a22e0d0721859e46c471b452d94900f7", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000002f00)="6aaf079781ecb10e7a9615d95595f12a679161ce3b9970cb6811d9fd21abdd236629976c2bb9eb4500dacd4f2771a7773e9e5a191c4bac3de5", 0x39}, {&(0x7f0000002f80)="3dc1bff9456e070ff0eafc95b3a4d9329fab3ef4c18e2f78ab6f14d574a390874d6676cd84af42b5ded717c56cbaf03094f2a63d490922b94aa991de31bf2a08a286931d99644177cc6f08655d31a694e2ceca6c9570526e36ec", 0x5a}], 0x2}}, {{&(0x7f0000001b00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003380)=[{&(0x7f0000003280)="e31a98", 0x3}, {&(0x7f00000032c0)="b6c3702c52605f", 0x7}, {&(0x7f0000003300)="62385d372f212b7079d0ad9706b678b05237840541558f8ef55adcc6941b6da9577d583a42125f9f291b8943de6f0d5453a365485759", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003400)="a34035f12245e7939669670a32bec07aefa13e279559af7f9fc9c281bc5ea584451713178862230f5a65f5cb5bf798e9bb7526a1d02abcaea2564661eb6f895f4e88944abcbae3ecb9fd696e8bb4c9916af8e1f99407bf3b6f03265f51b3acab882e5b8345143bd340e83323cbc886b0811226b8123c14e70ef4c8d9b080f7dcc1b0da425a2a7a8222386d703e12bae83135e2e77399ffd99ef9a470fc1e9c486ab2707a94c13b793980f92b4701074a19a05480ea05838115d791325b88a52856665f3837c77997be7a057a4cc1c93bc9e6f4d16f43a75d588cc66c1f5e4f4aa1fb65968d49", 0xe6}, {&(0x7f0000003500)}, {&(0x7f00000035c0)="87e5ef089a562abfe2a896546d88e636827f38eb354b1c3b2e682a4c1ca4de5c9a404361379a7e87c69139f6ed3d087b10888b94cb369542166c9ef6bdc9a4ef89f0420e0a40ad0c56", 0x49}, {&(0x7f0000003680)="7235755bc8bc488217138a8b6c08eed3d1087f224584c9a20a6787700cf89816656dc617848ed350f8db5a3473f03f28b4f32af906d744eea193de280ec0cbd12fca87ed42703a805841f675901dfb101711add7d163366aca45df0f7de2dc87f255cb5161b3d353030fde2c986defc24a84d4b186eb220e39d6a247cb25", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003cc0)="58efe4bce8be44e4c439bea0f9c2569ff282af71d6245d37066213c13f2a7d1e515872b01910f734f32f87cc3ea17d20fe39ba7d7ab5bb66893a14d771671c21eb606014c4da902d5913caf00fd86315d398ca4e8c1ace6f54b91d79cb882efcd8316fe42b91e7792f7dd3da5302d2d8146afd11f95ba0e265ba375981ab86b8c3c945259a8196e319e8343022a33a6d49e13ba2e5d3e57fe2891d82bf", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004140)="268c670d1ca9039191a072f758e2c1ce236864ba0c2a1c94626d0030eef88cef77663d1d4ca55b870e27896062169333deeb9be2aee7ece6356acc44d0973ac711bac90a14c4184a011caf00559d67dd5c428bb053dddf2f0c4d14ace25eb9450b237fdae4b2ec8e120f5b1a484f38bbca4c1b57804a740e549c5bc1b81885954e0a91411ab2256b", 0x88}, {&(0x7f0000004200)="de4a6585992ed453128460951adb215647d2205b5a09c1b3957ad03b45759e7f4c62e8b1fea855962a01d9c10e27dd71b8eb82135f2d47778b43aa05def8871918acf48b249963d9f1cdca20c7b9dc2b2f3544843d87f0898995e76c28362a4a72b696a56308a7ebc1a302e78a2995f0096380977cd601f76f74dfec3d3a551977aaef97", 0x84}, {&(0x7f00000042c0)="0ef764ee5f6eb4ce2dafc9bc35903a4529d52ff2b625e711d4f7bfb6f1c7616a2f4f949e45f7c4e21529d9284cfaa7590131d1fd751c5acade2443eaa56fdab00358734185c9b1c478515d571b8a180d1e73f8be41958a2313c24d217fc33f076be6", 0x62}, {&(0x7f0000004340)="30d2b84df6b92c304494382e61567160f161b932e3109cf77e96b37498b63e338fd9467ae5cb248a83f727218a59ee2005a6d40fcbd8fe77e61fd122415ac230ff9413e305cc1e03a44386969f62d6e5a71b7634663efda5f655c52058083e64c321909facbecdec5c55001b8dd338a26123d2b1966786f30ff7bae346525cd07d9aeb438a283792eace1792561f075875633c7922a126758a26dbfebd1221752c6a3360a10a64415c97b1863226dc499e9f31fe3a4a22f9", 0xb8}], 0x4}}], 0x7, 0x4008004) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xc, "42da"}, @main=@item_012={0x2, 0x0, 0x9, "0bd2"}]}}, 0x0}, 0x0) 5.432354193s ago: executing program 6 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 4.9041263s ago: executing program 4 (id=1572): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000004}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="030328bd7000080000000a000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x1154, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x1) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fff, 0xf3}) close_range(r0, 0xffffffffffffffff, 0x0) 4.807464115s ago: executing program 6 (id=1573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_io_uring_setup(0x4a2f, &(0x7f0000000200)={0x0, 0x52c3, 0x10100, 0x0, 0x10008004}, &(0x7f0000001480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x200000, 0x0, 0x20000000, 0x94}, &(0x7f0000001440)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x683e3057}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00') read$FUSE(r6, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockname$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000001340)="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", 0x2dd, 0x20000000, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x77, 0x0, 0x0, 0x8000000000000001, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x544c0, 0x0) 4.564760178s ago: executing program 5 (id=1574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) sendto$inet6(r0, &(0x7f0000000000)='X', 0x63, 0x24040045, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x9}}}, 0x84) 4.160843391s ago: executing program 4 (id=1575): r0 = syz_io_uring_setup(0x792, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000940)={0x6, 0x1000000, &(0x7f0000000900)=[r0]}, 0x1) 4.160494127s ago: executing program 6 (id=1576): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f00003e6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0xa3, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.017584043s ago: executing program 4 (id=1577): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x8000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) (async) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) flock(r0, 0x2) (async) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f0000000500)=0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00000000000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) 3.51810637s ago: executing program 4 (id=1578): creat(&(0x7f0000000000)='./file0\x00', 0x105) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b691ab1944c112825510fece7eee8d79010de2d993b1cb8858e89c87803e0cd8dce41c9e3ef2f1e7617aa641f6924a06df09cae7c3a444f956cf708e76c5261cd799c8b7723ecf3952cb36cfe968e541f39898c931ea54e37050a7c44a879dbea592ce77bd8b9e52120b1d91018bbc5d6a0d2c95ffe6bb55ae527e857fb0f546b58061811ee89d163be787a3c6fb76c2e4181b64c30929d5d79d0bd1dcb4f8db25b553dcf1ea3a104ffa10b8d2ef9b9f7c4be9808b07fcd36a79e6807989f81791f7b1e7c80aaf95cd7fd3cafc8452d8030d1a894ce524fecd13612e11e5461e81d6e601cdd7"]) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3512, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[], 0x11) times(0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x5, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x191c) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) 2.756640166s ago: executing program 5 (id=1579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x40100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x1bc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/152, 0x98}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000880)=""/87, 0x57}, {&(0x7f0000000900)=""/155, 0x9b}], 0x9}, 0x3}, {{&(0x7f0000000a80)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000b00)=""/252, 0xfc}], 0x1, &(0x7f0000000c00)=""/237, 0xed}, 0x9}, {{&(0x7f0000000d00)=@isdn, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/144, 0x90}, {&(0x7f0000001e40)=""/212, 0xd4}, {&(0x7f0000001f40)=""/95, 0x5f}, {&(0x7f0000001fc0)=""/115, 0x73}, {&(0x7f0000002040)=""/40, 0x28}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)=""/46, 0x2e}, {&(0x7f0000002140)=""/96, 0x60}], 0x9, &(0x7f0000002280)=""/221, 0xdd}, 0x7fff}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002380)=""/65, 0x41}, {&(0x7f0000002400)=""/45, 0x2d}, {&(0x7f0000002440)=""/48, 0x30}, {&(0x7f0000002480)=""/198, 0xc6}, {&(0x7f0000002580)=""/202, 0xca}, {&(0x7f0000002680)=""/183, 0xb7}, {&(0x7f0000002740)=""/66, 0x42}, {&(0x7f00000027c0)=""/203, 0xcb}], 0x8}, 0x5}, {{&(0x7f0000002940)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002e40)=[{&(0x7f00000029c0)=""/171, 0xab}, {&(0x7f0000002a80)=""/186, 0xba}, {&(0x7f0000002b40)=""/172, 0xac}, {&(0x7f0000002c00)=""/24, 0x18}, {&(0x7f0000002c40)=""/57, 0x39}, {&(0x7f0000002c80)=""/135, 0x87}, {&(0x7f0000002d40)=""/85, 0x55}, {&(0x7f0000002dc0)=""/39, 0x27}, {&(0x7f0000002e00)=""/4, 0x4}], 0x9}, 0xc}], 0x5, 0x40, &(0x7f0000003040)={0x77359400}) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f00000020c0), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = memfd_secret(0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r5, 0x0, 0x0) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.75192929s ago: executing program 4 (id=1580): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0xfffffd, 0xc, 0x4000, 0x0, {0x3, 0x7, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0xffffff81, 0x22000b02, 0x2, 0x0, 0x6}}, 0x50) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000240)={0x3, 0x7, 0x6}) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffff, 0x1100800, 0xf53, 0x9, 0x5, 0x3, 0x0, 0x0, 0x40, 0x10001}}, 0x50) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r5 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r5, 0x2dbe, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x7, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0xfffffffffffffffe) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r8, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) 2.098389491s ago: executing program 5 (id=1581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8000, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @loopback}, {0x22, 0x7c, 0x0, @multicast1}}}}}, 0x0) getpgid(0x0) (async) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() (async) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000006040)={0x2020}, 0x2020) (async) r6 = syz_open_pts(0xffffffffffffffff, 0xa001) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) (async) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) (async) listen(r0, 0x3) (async) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast2}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000001240)={0x41424344}, 0xfffffffb, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa39aaaa0180c2000003080045000034000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="8c08000090780000080a00000000fffffffe0000"], 0x0) 1.968337899s ago: executing program 4 (id=1582): open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2020, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="0d000000010001", 0x7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) fallocate(r2, 0x41, 0x9, 0x2c) 1.96803924s ago: executing program 0 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 1.867123366s ago: executing program 3 (id=1584): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfdfff034}, {0x6, 0x3, 0x8, 0x4}]}, 0x10) syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7ffffc, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) (async) r7 = semget$private(0x0, 0x4000000009, 0x0) semop(r7, &(0x7f00000002c0)=[{0x1, 0x85, 0x800}, {0x1, 0x8698, 0x1000}], 0x2) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/159) (async) semctl$GETALL(r7, 0x0, 0xd, &(0x7f00000003c0)=""/68) (async) semctl$SETALL(r7, 0x0, 0x11, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c55000000000000000000000000000000000000000000000000000020", [0x0, 0x2]}}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.634506518s ago: executing program 5 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x1ed, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7f, 0x45, 0x1b, 0x10, 0x545, 0x8002, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1db, 0x1, 0x1, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0xdd, 0x0, 0x7, 0xad, 0x16, 0x7, 0x4, [], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x4, 0xd, 0x2, [@generic={0x26, 0x24, "17a4bc0439437a34bb2387269d75906d5f04ca2cd25b529b23f3661d9ea3a1063c4dbe71"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x0, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xdd, 0x101}, @generic={0x65, 0xb, "3c2f356e97d6e31eea91ca9dcc5381a22b3cce621931fe8de5fb8733813f40e42eba9244226d18015ef8d3138fdd08c767bf3b1aa97501bafedb141f7301e8492a68695117f9dc03e1e0b47845bb9e8953ab061e9c61f7a7522b617fc23fd21718d138"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x1, 0x2, 0x8, [@generic={0x45, 0x38, "951100245a24aff39d232839d5f9fad07384a27ec2f5ad0ff973746548e1c9b95c074e0b1ca7a200284ad240b0eb5c366c35b7e55ded375f1501bf23359b3e820a1c23"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x6, 0x1, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfffe}, @generic={0x9e, 0x10, "247285c0caaace706478c230a52d71bdf8c5b60dc8051db90c161525fdda8a409defb3cc2ac32a4233b1eb0a90c3a7692a4c05bff515cace5c8a51843b374ea040b7353634e771f71150b83c860e7933dbce64abfcafe5e83f24c8bc76eb1706b9c1b655334fabbebb93f411d05e8b0522e5031fb202c404000797c04caf803768f25feb80ca31e629865ffad506da2120c73677cd5b9a88db83c8e5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x8, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 1.296489269s ago: executing program 3 (id=1586): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000941000000090018000000006574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edc42d254a8e740d859314651c4a54d12baf976f873d9812c00388a449429fd757bc362eda55faddfcd933cf2fbaede69f416a9e1f6820c73f4bb688c547c4a05c34c04eb4"], 0x68}}, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r6}) (async, rerun: 64) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00008c3000/0x2000)=nil, 0x2000}, 0x8}) (async) r10 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f0000000500)={0x1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r10, 0x0) (async) landlock_restrict_self(r10, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0xff, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x2}}, 0x44) 1.224194773s ago: executing program 0 (id=1587): r0 = syz_io_uring_setup(0x792, &(0x7f0000000000)={0x0, 0x35b3, 0x1000, 0x3, 0xc4}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000940)={0x6, 0x1000000, &(0x7f0000000900)=[r0]}, 0x1) 964.560885ms ago: executing program 3 (id=1588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000280), &(0x7f00000002c0)={'L-', 0x6}, 0x16, 0x1) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x240080c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='devlink_health_recover_aborted\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect$cdc_ecm(0x1, 0x55, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) 811.276123ms ago: executing program 0 (id=1589): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r0, &(0x7f0000000040)=""/38, 0x26) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0xf, 0x4, 0x681, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x7, 0x1, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730118000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=1590): uname(&(0x7f00000000c0)=""/29) kernel console output (not intermixed with test programs): pfx___mutex_lock+0x10/0x10 [ 415.846866][T10396] ? __pfx_vfs_read+0x10/0x10 [ 415.846916][T10396] ? __fget_files+0x20e/0x3c0 [ 415.846942][T10396] ksys_read+0x12a/0x240 [ 415.846969][T10396] ? __pfx_ksys_read+0x10/0x10 [ 415.847004][T10396] do_syscall_64+0xcd/0x260 [ 415.847039][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.847058][T10396] RIP: 0033:0x7f2af038d37c [ 415.847074][T10396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.847091][T10396] RSP: 002b:00007f2af1224030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.847110][T10396] RAX: ffffffffffffffda RBX: 00007f2af05b5fa0 RCX: 00007f2af038d37c [ 415.847122][T10396] RDX: 000000000000000f RSI: 00007f2af12240a0 RDI: 0000000000000004 [ 415.847134][T10396] RBP: 00007f2af1224090 R08: 0000000000000000 R09: 0000000000000000 [ 415.847145][T10396] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 415.847156][T10396] R13: 0000000000000000 R14: 00007f2af05b5fa0 R15: 00007fff85615618 [ 415.847181][T10396] [ 416.116086][ T1534] usb 6-1: Product: syz [ 416.120366][ T1534] usb 6-1: Manufacturer: syz [ 416.124960][ T1534] usb 6-1: SerialNumber: syz [ 416.212714][ T1534] usb 6-1: config 0 descriptor?? [ 416.456169][T10402] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1268'. [ 417.467136][T10399] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1264'. [ 418.598884][ T971] usb 6-1: USB disconnect, device number 19 [ 418.665929][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 418.665946][ T30] audit: type=1400 audit(1747959566.219:881): avc: denied { setopt } for pid=10419 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.711620][ T30] audit: type=1400 audit(1747959566.257:882): avc: denied { create } for pid=10421 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.752899][ T30] audit: type=1400 audit(1747959566.257:883): avc: denied { setopt } for pid=10421 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.331735][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1281'. [ 420.500345][ T5917] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 420.508438][ T30] audit: type=1400 audit(1747959567.940:884): avc: denied { ioctl } for pid=10443 comm="syz.5.1280" path="socket:[31755]" dev="sockfs" ino=31755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.743313][ T30] audit: type=1400 audit(1747959567.940:885): avc: denied { bind } for pid=10443 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.818893][ T30] audit: type=1400 audit(1747959567.940:886): avc: denied { setopt } for pid=10443 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 420.964479][T10448] tipc: Can't bind to reserved service type 2 [ 420.992012][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 421.001102][ T5917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 422.309063][ T30] audit: type=1400 audit(1747959567.940:887): avc: denied { accept } for pid=10443 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 422.329020][ T30] audit: type=1400 audit(1747959567.940:888): avc: denied { write } for pid=10443 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 422.343961][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.348435][ T30] audit: type=1400 audit(1747959568.371:889): avc: denied { bind } for pid=10447 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.379042][T10459] FAULT_INJECTION: forcing a failure. [ 422.379042][T10459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.392735][ T30] audit: type=1400 audit(1747959568.473:890): avc: denied { mount } for pid=10447 comm="syz.5.1282" name="/" dev="ramfs" ino=31771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.415306][T10459] CPU: 0 UID: 0 PID: 10459 Comm: syz.3.1284 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 422.415331][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.415341][T10459] Call Trace: [ 422.415346][T10459] [ 422.415351][T10459] dump_stack_lvl+0x16c/0x1f0 [ 422.415372][T10459] should_fail_ex+0x512/0x640 [ 422.415391][T10459] _copy_to_user+0x32/0xd0 [ 422.415409][T10459] simple_read_from_buffer+0xcb/0x170 [ 422.415428][T10459] proc_fail_nth_read+0x197/0x270 [ 422.415445][T10459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.415463][T10459] ? rw_verify_area+0xcf/0x680 [ 422.415477][T10459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.415497][T10459] vfs_read+0x1e1/0xc70 [ 422.415516][T10459] ? __pfx___mutex_lock+0x10/0x10 [ 422.415532][T10459] ? __pfx_vfs_read+0x10/0x10 [ 422.415556][T10459] ? __fget_files+0x20e/0x3c0 [ 422.415570][T10459] ksys_read+0x12a/0x240 [ 422.415587][T10459] ? __pfx_ksys_read+0x10/0x10 [ 422.415602][T10459] ? rcu_is_watching+0x12/0xc0 [ 422.415620][T10459] do_syscall_64+0xcd/0x260 [ 422.415637][T10459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.415652][T10459] RIP: 0033:0x7f483078d37c [ 422.415662][T10459] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 422.415672][T10459] RSP: 002b:00007f4831571030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.415683][T10459] RAX: ffffffffffffffda RBX: 00007f48309b5fa0 RCX: 00007f483078d37c [ 422.415690][T10459] RDX: 000000000000000f RSI: 00007f48315710a0 RDI: 0000000000000004 [ 422.415697][T10459] RBP: 00007f4831571090 R08: 0000000000000000 R09: 0000000000000000 [ 422.415703][T10459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.415709][T10459] R13: 0000000000000000 R14: 00007f48309b5fa0 R15: 00007fff2f94cc88 [ 422.415723][T10459] [ 422.708791][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 422.873845][ T5917] pvrusb2: ********** [ 422.882303][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 422.913120][ T5917] pvrusb2: Important functionality might not be entirely working. [ 422.925293][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.927312][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 422.956235][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.054525][ T5917] pvrusb2: ********** [ 423.100579][ T2333] pvrusb2: Invalid write control endpoint [ 423.183375][ T5860] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 423.375878][ T5860] usb 7-1: device descriptor read/64, error -71 [ 423.482757][ T5917] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 423.617506][ T2333] pvrusb2: Invalid write control endpoint [ 423.643347][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 423.655442][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 423.663000][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 423.686728][ T2333] pvrusb2: Device being rendered inoperable [ 423.695491][T10433] pvrusb2: Attempted to execute control transfer when device not ok [ 423.712236][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 423.724189][ T10] usb 5-1: USB disconnect, device number 36 [ 423.733204][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 423.746123][ T2333] pvrusb2: Attached sub-driver cx25840 [ 423.751811][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 423.764807][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 423.782044][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 423.787934][ T5917] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 423.797372][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 423.805745][ T5917] usb 6-1: config 0 has no interface number 0 [ 423.811960][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.843985][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 423.852020][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 423.860262][ T5860] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 423.868048][ T5917] usb 6-1: config 0 has no interface number 0 [ 423.874752][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.887979][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 423.895645][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 423.903948][ T5917] usb 6-1: config 0 has no interface number 0 [ 423.910057][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.937676][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 423.959925][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 423.968367][ T5917] usb 6-1: config 0 has no interface number 0 [ 423.974589][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.987902][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 423.995430][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 424.003644][ T5917] usb 6-1: config 0 has no interface number 0 [ 424.009932][ T5860] usb 7-1: device descriptor read/64, error -71 [ 424.016319][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 424.029687][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 424.037272][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 424.045815][ T5917] usb 6-1: config 0 has no interface number 0 [ 424.051933][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 424.065493][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 424.074418][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 424.082648][ T5917] usb 6-1: config 0 has no interface number 0 [ 424.088743][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 424.101993][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 424.109564][ T5917] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 424.117833][ T5917] usb 6-1: config 0 has no interface number 0 [ 424.123940][ T5917] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 424.137430][ T5860] usb usb7-port1: attempt power cycle [ 424.143261][ T5917] usb 6-1: config 0 interface 160 has no altsetting 0 [ 424.152481][ T5917] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 424.161563][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.169604][ T5917] usb 6-1: Product: syz [ 424.173856][ T5917] usb 6-1: Manufacturer: syz [ 424.178455][ T5917] usb 6-1: SerialNumber: syz [ 424.184342][ T5917] usb 6-1: config 0 descriptor?? [ 424.210326][ T1534] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 424.220608][ T971] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 424.287941][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 424.287957][ T30] audit: type=1400 audit(1747959571.476:902): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.326954][ T30] audit: type=1400 audit(1747959571.476:903): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.351745][ T30] audit: type=1400 audit(1747959571.476:904): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.377848][ T30] audit: type=1400 audit(1747959571.504:905): avc: denied { ioctl } for pid=10473 comm="syz.3.1289" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.384253][ T1534] usb 1-1: Using ep0 maxpacket: 16 [ 424.403623][ T30] audit: type=1400 audit(1747959571.504:906): avc: denied { read } for pid=10475 comm="syz.4.1290" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.433957][ T30] audit: type=1400 audit(1747959571.504:907): avc: denied { read open } for pid=10475 comm="syz.4.1290" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.438033][ T5917] speedtch 6-1:0.160: speedtch_bind: wrong device class 127 [ 424.480032][ T5917] speedtch 6-1:0.160: usbatm_usb_probe: bind failed: -19! [ 424.490160][ T971] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 424.492098][ T5917] usb 6-1: USB disconnect, device number 20 [ 424.501179][ T971] usb 4-1: config 150 has no interface number 0 [ 424.506675][ T30] audit: type=1400 audit(1747959571.504:908): avc: denied { ioctl } for pid=10475 comm="syz.4.1290" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b8d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.525300][ T971] usb 4-1: config 150 interface 204 has no altsetting 0 [ 424.535643][ T5860] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 424.565845][ T30] audit: type=1400 audit(1747959571.588:909): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.578783][ T971] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 424.592854][ T30] audit: type=1400 audit(1747959571.588:910): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.628209][ T5860] usb 7-1: device descriptor read/8, error -71 [ 424.630189][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.643429][ T971] usb 4-1: Product: syz [ 424.645424][ T30] audit: type=1400 audit(1747959571.588:911): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.647630][ T971] usb 4-1: Manufacturer: syz [ 424.678134][ T971] usb 4-1: SerialNumber: syz [ 424.883309][ T5860] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 424.893873][ T5890] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 424.908736][ T5860] usb 7-1: device descriptor read/8, error -71 [ 424.987150][ T971] usb 4-1: USB disconnect, device number 45 [ 425.033354][ T5860] usb usb7-port1: unable to enumerate USB device [ 425.054576][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 425.070139][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 425.087842][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 425.097194][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.112803][ T5890] usb 5-1: config 0 descriptor?? [ 425.129127][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 425.339929][ T5890] bcm5974 5-1:0.0: could not read from device [ 425.367093][ T5171] bcm5974 5-1:0.0: could not read from device [ 425.379066][ T5890] input: failed to attach handler mousedev to device input45, error: -5 [ 425.392086][ T5890] usb 5-1: USB disconnect, device number 37 [ 427.026862][ T1534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.036406][ T1534] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 427.055642][ T1534] usb 1-1: can't read configurations, error -71 [ 428.556041][T10519] syz.5.1301: attempt to access beyond end of device [ 428.556041][T10519] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 428.570510][T10519] hpfs: hpfs_map_sector(): read error [ 428.640709][T10520] o2cb: This node has not been configured. [ 428.646902][T10520] o2cb: Cluster check failed. Fix errors before retrying. [ 428.654140][T10520] (syz.5.1301,10520,1):user_dlm_register:674 ERROR: status = -22 [ 428.662109][T10520] (syz.5.1301,10520,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 428.866466][ T971] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 429.006232][T10521] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 429.119679][ T971] usb 7-1: Using ep0 maxpacket: 16 [ 429.207891][ T971] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 429.665482][ T30] kauditd_printk_skb: 384 callbacks suppressed [ 429.665500][ T30] audit: type=1400 audit(1747959576.153:1296): avc: denied { execmem } for pid=10518 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 429.763883][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 429.772271][ T30] audit: type=1400 audit(1747959576.237:1297): avc: denied { prog_load } for pid=10525 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 429.772313][ T30] audit: type=1400 audit(1747959576.284:1298): avc: denied { bpf } for pid=10525 comm="syz.3.1306" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.772350][ T30] audit: type=1400 audit(1747959576.303:1299): avc: denied { create } for pid=10518 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 429.772386][ T30] audit: type=1400 audit(1747959576.415:1300): avc: denied { create } for pid=10518 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.772423][ T30] audit: type=1400 audit(1747959576.434:1301): avc: denied { create } for pid=10518 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.875309][ T971] usb 7-1: config 0 has no interface number 0 [ 429.884690][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 429.900321][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 429.907253][ T30] audit: type=1400 audit(1747959576.452:1302): avc: denied { execmem } for pid=10518 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 429.955095][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 429.990768][ T971] usb 7-1: config 0 has no interface number 0 [ 430.025825][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 430.047139][ T30] audit: type=1400 audit(1747959576.499:1303): avc: denied { read } for pid=10518 comm="syz.4.1304" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.089657][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 430.102095][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 430.110277][ T971] usb 7-1: config 0 has no interface number 0 [ 430.121922][ T30] audit: type=1400 audit(1747959576.499:1304): avc: denied { read open } for pid=10518 comm="syz.4.1304" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.153695][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 430.185881][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 430.192790][ T30] audit: type=1400 audit(1747959576.537:1305): avc: denied { read } for pid=10518 comm="syz.4.1304" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.223534][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 430.232975][ T971] usb 7-1: config 0 has no interface number 0 [ 430.239083][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 430.256982][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 430.268654][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 430.288728][ T971] usb 7-1: config 0 has no interface number 0 [ 430.298395][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 430.320299][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 430.350063][ T971] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 430.359664][ T971] usb 7-1: config 0 has no interface number 0 [ 430.466718][ T971] usb 7-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 431.267151][T10542] nfs4: Unknown parameter 'rd' [ 432.148919][ T971] usb 7-1: config 0 interface 160 has no altsetting 0 [ 432.263675][ T971] usb 7-1: unable to read config index 6 descriptor/start: -71 [ 432.281130][ T971] usb 7-1: can't read configurations, error -71 [ 432.543197][T10533] fuse: Bad value for 'fd' [ 432.709111][ T1219] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 432.893729][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 432.985765][ T1219] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 433.014122][ T1219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.057432][ T1219] usb 1-1: config 0 has no interface number 0 [ 433.067203][T10564] fuse: Unknown parameter 'f' [ 433.071992][ T1219] usb 1-1: config 0 interface 244 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.295618][T10567] syz.3.1317: attempt to access beyond end of device [ 433.295618][T10567] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 433.308766][T10567] hpfs: hpfs_map_sector(): read error [ 433.382194][T10568] o2cb: This node has not been configured. [ 433.388043][T10568] o2cb: Cluster check failed. Fix errors before retrying. [ 433.395264][T10568] (syz.3.1317,10568,1):user_dlm_register:674 ERROR: status = -22 [ 433.403027][T10568] (syz.3.1317,10568,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 433.489807][ T1219] usb 1-1: config 0 interface 244 has no altsetting 0 [ 433.542131][ T1219] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 433.556054][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.565113][ T1219] usb 1-1: Product: syz [ 433.569283][ T1219] usb 1-1: Manufacturer: syz [ 433.573876][ T1219] usb 1-1: SerialNumber: syz [ 433.588923][ T1219] usb 1-1: config 0 descriptor?? [ 433.603831][ T1219] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort found [ 433.616016][T10564] fuseblk: Unknown parameter 'group_N}HHid' [ 433.882010][ T1219] snd_usb_toneport 1-1:0.244: cannot get proper max packet size [ 433.912599][ T1219] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort now disconnected [ 433.949242][ T1219] snd_usb_toneport 1-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 434.103799][ T1534] usb 1-1: USB disconnect, device number 37 [ 434.351928][ T1534] kernel read not supported for file /617/net/igmp (pid: 1534 comm: kworker/1:2) [ 434.429160][T10572] overlayfs: statfs failed on './file0' [ 434.496957][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 434.698937][T10606] blktrace: Concurrent blktraces are not allowed on sg0 [ 434.839080][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1327'. [ 435.019869][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 435.019885][ T30] audit: type=1400 audit(1747959581.513:1665): avc: denied { read write open } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.103385][ T30] audit: type=1400 audit(1747959581.513:1666): avc: denied { ioctl } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.128937][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.227521][ T30] audit: type=1400 audit(1747959581.578:1667): avc: denied { read write } for pid=8134 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.251689][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.304005][T10622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 435.373644][ T30] audit: type=1400 audit(1747959581.578:1668): avc: denied { read write open } for pid=8134 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.398667][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.580195][ T30] audit: type=1400 audit(1747959581.597:1669): avc: denied { ioctl } for pid=8134 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.605787][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.613288][ T30] audit: type=1400 audit(1747959581.625:1670): avc: denied { create } for pid=10613 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.634914][ T30] audit: type=1400 audit(1747959581.625:1671): avc: denied { write } for pid=10613 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.677058][ T30] audit: type=1400 audit(1747959581.635:1672): avc: denied { read } for pid=10613 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.896683][T10632] syz.0.1334: attempt to access beyond end of device [ 435.896683][T10632] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 435.909711][T10632] hpfs: hpfs_map_sector(): read error [ 435.981264][T10633] o2cb: This node has not been configured. [ 435.987129][T10633] o2cb: Cluster check failed. Fix errors before retrying. [ 435.994355][T10633] (syz.0.1334,10633,1):user_dlm_register:674 ERROR: status = -22 [ 436.002338][T10633] (syz.0.1334,10633,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 436.103498][ T30] audit: type=1400 audit(1747959581.635:1673): avc: denied { read } for pid=10613 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 436.123849][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.130819][ T30] audit: type=1400 audit(1747959581.635:1674): avc: denied { read write } for pid=10613 comm="syz.0.1330" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.204971][T10625] team_slave_1: entered promiscuous mode [ 436.710293][T10645] FAULT_INJECTION: forcing a failure. [ 436.710293][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.725590][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.6.1342 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 436.725616][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.725628][T10645] Call Trace: [ 436.725634][T10645] [ 436.725642][T10645] dump_stack_lvl+0x16c/0x1f0 [ 436.725672][T10645] should_fail_ex+0x512/0x640 [ 436.725702][T10645] _copy_to_user+0x32/0xd0 [ 436.725732][T10645] simple_read_from_buffer+0xcb/0x170 [ 436.725762][T10645] proc_fail_nth_read+0x197/0x270 [ 436.725790][T10645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.725819][T10645] ? rw_verify_area+0xcf/0x680 [ 436.725842][T10645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.725870][T10645] vfs_read+0x1e1/0xc70 [ 436.725899][T10645] ? __pfx___mutex_lock+0x10/0x10 [ 436.725926][T10645] ? __pfx_vfs_read+0x10/0x10 [ 436.725960][T10645] ? __fget_files+0x20e/0x3c0 [ 436.725986][T10645] ksys_read+0x12a/0x240 [ 436.726012][T10645] ? __pfx_ksys_read+0x10/0x10 [ 436.726036][T10645] ? rcu_is_watching+0x12/0xc0 [ 436.726065][T10645] do_syscall_64+0xcd/0x260 [ 436.726094][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.726112][T10645] RIP: 0033:0x7fb89538d37c [ 436.726132][T10645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.726149][T10645] RSP: 002b:00007fb8961b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.726166][T10645] RAX: ffffffffffffffda RBX: 00007fb8955b5fa0 RCX: 00007fb89538d37c [ 436.726178][T10645] RDX: 000000000000000f RSI: 00007fb8961b00a0 RDI: 0000000000000004 [ 436.726189][T10645] RBP: 00007fb8961b0090 R08: 0000000000000000 R09: 0000000000000000 [ 436.726200][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.726210][T10645] R13: 0000000000000000 R14: 00007fb8955b5fa0 R15: 00007fff1700e998 [ 436.726234][T10645] [ 436.913888][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.711095][T10662] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 437.721393][T10662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.731108][T10662] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 438.006133][ T1219] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 438.257533][ T1219] usb 4-1: Using ep0 maxpacket: 8 [ 438.301591][ T1219] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 438.319348][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.335962][ T1219] usb 4-1: Product: syz [ 438.352730][ T1219] usb 4-1: Manufacturer: syz [ 438.357708][ T1219] usb 4-1: SerialNumber: syz [ 438.367956][ T1219] usb 4-1: config 0 descriptor?? [ 438.635828][T10676] syz.0.1351: attempt to access beyond end of device [ 438.635828][T10676] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 438.648866][T10676] hpfs: hpfs_map_sector(): read error [ 438.721217][T10677] o2cb: This node has not been configured. [ 438.727115][T10677] o2cb: Cluster check failed. Fix errors before retrying. [ 438.734528][T10677] (syz.0.1351,10677,1):user_dlm_register:674 ERROR: status = -22 [ 438.742306][T10677] (syz.0.1351,10677,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 439.184889][ T1219] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 439.246126][ T1534] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 439.263768][ T1219] gspca_sn9c2028: read1 error -32 [ 439.291776][ T1219] gspca_sn9c2028: read1 error -32 [ 439.305037][ T5890] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 439.307342][ T1219] gspca_sn9c2028: read1 error 0 [ 439.340250][ T1219] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 439.422630][ T1534] usb 5-1: Using ep0 maxpacket: 32 [ 439.439088][ T1534] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.459832][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 439.476016][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.497259][ T1534] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 439.510638][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 439.520188][ T1534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.549413][ T5890] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping [ 439.556745][ T1219] usb 4-1: USB disconnect, device number 46 [ 439.558922][ T1534] usb 5-1: config 0 descriptor?? [ 439.572081][ T5890] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 439.591784][ T5890] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 439.604326][T10664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 439.626332][ T1534] hub 5-1:0.0: USB hub found [ 439.631110][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.673607][ T5890] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.683372][ T5815] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 439.689511][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.696255][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.706382][ T5890] usb 6-1: Product: syz [ 439.710658][ T5890] usb 6-1: Manufacturer: syz [ 439.715376][ T5890] usb 6-1: SerialNumber: syz [ 439.848374][ T1534] hub 5-1:0.0: 2 ports detected [ 439.963212][ T5890] usb 6-1: 0:2 : does not exist [ 439.974128][ T5890] usb 6-1: unit 4 not found! [ 439.993438][ T5890] usb 6-1: USB disconnect, device number 21 [ 440.125302][T10688] random: crng reseeded on system resumption [ 440.398775][ T30] kauditd_printk_skb: 420 callbacks suppressed [ 440.398791][ T30] audit: type=1400 audit(1747959586.358:2093): avc: denied { execmem } for pid=10687 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 440.424391][ T30] audit: type=1400 audit(1747959586.377:2094): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.527789][T10695] bridge1: entered promiscuous mode [ 440.629102][T10696] befs: (nbd6): No write support. Marking filesystem read-only [ 440.637201][T10696] syz.6.1357: attempt to access beyond end of device [ 440.637201][T10696] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 440.651469][T10696] befs: (nbd6): unable to read superblock [ 440.714666][ T30] audit: type=1400 audit(1747959586.377:2095): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.741531][ T30] audit: type=1400 audit(1747959586.377:2096): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.774931][ T1534] usb 5-1: USB disconnect, device number 38 [ 440.783672][ T30] audit: type=1400 audit(1747959586.489:2097): avc: denied { create } for pid=10690 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 440.836019][ T30] audit: type=1400 audit(1747959586.489:2098): avc: denied { read } for pid=10690 comm="syz.3.1358" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.857904][ T30] audit: type=1400 audit(1747959586.489:2099): avc: denied { read open } for pid=10690 comm="syz.3.1358" path="net:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.918644][ T30] audit: type=1400 audit(1747959586.499:2100): avc: denied { create } for pid=10690 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 440.952201][ T30] audit: type=1400 audit(1747959586.499:2101): avc: denied { write } for pid=10690 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 440.980284][ T30] audit: type=1400 audit(1747959586.508:2102): avc: denied { create } for pid=10690 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.702294][T10719] syz.0.1364: attempt to access beyond end of device [ 442.702294][T10719] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 442.716303][T10719] hpfs: hpfs_map_sector(): read error [ 443.121707][ T5890] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 443.267494][T10720] o2cb: This node has not been configured. [ 443.276301][T10720] o2cb: Cluster check failed. Fix errors before retrying. [ 443.283530][T10720] (syz.0.1364,10720,1):user_dlm_register:674 ERROR: status = -22 [ 443.291334][T10720] (syz.0.1364,10720,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 443.869721][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 443.896167][ T5890] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 443.947565][ T5890] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 443.970137][ T5890] usb 6-1: config 0 has no interface number 0 [ 443.976269][ T5890] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 444.023822][ T5890] usb 6-1: config 0 interface 160 has no altsetting 0 [ 444.042022][ T5890] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 444.059054][ T5890] usb 6-1: config 0 has no interface number 0 [ 444.071645][ T5890] usb 6-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 444.242381][ T5890] usb 6-1: config 0 interface 160 has no altsetting 0 [ 444.267229][ T5890] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 444.274849][ T5890] usb 6-1: can't read configurations, error -71 [ 444.891922][T10732] mkiss: ax0: crc mode is auto. [ 445.759568][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 445.759598][ T30] audit: type=1400 audit(1747959591.559:2353): avc: denied { perfmon } for pid=10736 comm="syz.4.1371" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.129748][ T30] audit: type=1400 audit(1747959591.615:2354): avc: denied { perfmon } for pid=10736 comm="syz.4.1371" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.263657][ T30] audit: type=1400 audit(1747959591.634:2355): avc: denied { bpf } for pid=10736 comm="syz.4.1371" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.263702][ T30] audit: type=1400 audit(1747959591.634:2356): avc: denied { create } for pid=10741 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.263742][ T30] audit: type=1400 audit(1747959591.643:2357): avc: denied { execmem } for pid=10737 comm="syz.5.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 446.263779][ T30] audit: type=1400 audit(1747959591.812:2358): avc: denied { read write } for pid=10734 comm="syz.3.1370" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.263821][ T30] audit: type=1400 audit(1747959591.812:2359): avc: denied { read write open } for pid=10734 comm="syz.3.1370" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.263862][ T30] audit: type=1400 audit(1747959591.812:2360): avc: denied { ioctl } for pid=10734 comm="syz.3.1370" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.263902][ T30] audit: type=1400 audit(1747959591.812:2361): avc: denied { create } for pid=10741 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.263943][ T30] audit: type=1400 audit(1747959591.821:2362): avc: denied { create } for pid=10741 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.920143][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.237511][ T5890] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 447.408440][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 447.441501][ T5890] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 447.453504][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 447.482409][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 447.514287][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 447.606269][T10767] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1380'. [ 447.689662][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 447.703267][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.713413][ T5890] usb 5-1: Product: syz [ 447.717585][ T5890] usb 5-1: Manufacturer: syz [ 447.722255][ T5890] usb 5-1: SerialNumber: syz [ 447.735883][ T5890] usb 5-1: config 0 descriptor?? [ 447.982431][T10769] syz.6.1379: attempt to access beyond end of device [ 447.982431][T10769] nbd6: rw=0, sector=0, nr_sectors = 8 limit=0 [ 447.995528][T10769] hpfs: hpfs_map_sector(): read error [ 448.077661][T10770] o2cb: This node has not been configured. [ 448.083590][T10770] o2cb: Cluster check failed. Fix errors before retrying. [ 448.090858][T10770] (syz.6.1379,10770,1):user_dlm_register:674 ERROR: status = -22 [ 448.098650][T10770] (syz.6.1379,10770,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 448.132706][T10758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.142166][T10758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.163274][ T5890] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 448.170431][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 448.170516][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 448.269213][T10778] binder: 10771:10778 ioctl c0306201 200000000640 returned -22 [ 448.542157][ T1219] usb 5-1: USB disconnect, device number 39 [ 448.552837][ T1219] mcba_usb 5-1:0.0 can0: device disconnected [ 449.315631][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.662007][T10785] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1383'. [ 451.118861][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 451.118873][ T30] audit: type=1400 audit(1747959596.573:2672): avc: denied { ioctl } for pid=10805 comm="syz.0.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.181747][ T30] audit: type=1400 audit(1747959596.610:2673): avc: denied { write } for pid=10797 comm="syz.5.1387" name="ip6_flowlabel" dev="proc" ino=4026533665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 451.206339][ T971] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 451.257026][ T30] audit: type=1400 audit(1747959596.610:2674): avc: denied { write } for pid=10797 comm="syz.5.1387" path="/proc/652/net/ip6_flowlabel" dev="proc" ino=4026533665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 451.356362][ T30] audit: type=1400 audit(1747959596.610:2675): avc: denied { sys_module } for pid=10792 comm="syz.4.1386" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 451.427680][ T971] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.450148][ T971] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.470381][ T30] audit: type=1400 audit(1747959596.610:2676): avc: denied { module_request } for pid=10792 comm="syz.4.1386" kmod="syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 451.504379][ T971] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.535486][ T971] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 451.565255][ T30] audit: type=1400 audit(1747959596.666:2677): avc: denied { ioctl } for pid=10805 comm="syz.0.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.600990][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.642485][T10807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 451.732846][ T30] audit: type=1400 audit(1747959596.685:2678): avc: denied { create } for pid=10811 comm="syz.6.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.859052][ T30] audit: type=1400 audit(1747959596.685:2679): avc: denied { ioctl } for pid=10805 comm="syz.0.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.940939][T10817] GUP no longer grows the stack in syz.6.1391 (10817): 200000004000-20000000a000 (200000002000) [ 451.965564][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.6.1391 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 451.965591][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.965602][T10817] Call Trace: [ 451.965609][T10817] [ 451.965616][T10817] dump_stack_lvl+0x16c/0x1f0 [ 451.965647][T10817] gup_vma_lookup+0x1d2/0x220 [ 451.965674][T10817] __get_user_pages+0x234/0x36f0 [ 451.965707][T10817] ? __pfx___get_user_pages+0x10/0x10 [ 451.965743][T10817] get_user_pages_remote+0x258/0xb20 [ 451.965770][T10817] ? __pfx_mtree_load+0x10/0x10 [ 451.965796][T10817] ? __pfx_get_user_pages_remote+0x10/0x10 [ 451.965832][T10817] __access_remote_vm+0x233/0x9d0 [ 451.965859][T10817] ? __pfx___access_remote_vm+0x10/0x10 [ 451.965889][T10817] proc_pid_cmdline_read+0x4de/0x900 [ 451.965920][T10817] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 451.965950][T10817] ? rw_verify_area+0xcf/0x680 [ 451.965974][T10817] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 451.966000][T10817] vfs_readv+0x6bf/0x8a0 [ 451.966022][T10817] ? get_pid_task+0x106/0x250 [ 451.966052][T10817] ? __pfx_vfs_readv+0x10/0x10 [ 451.966078][T10817] ? find_held_lock+0x2b/0x80 [ 451.966116][T10817] ? __fget_files+0x20e/0x3c0 [ 451.966139][T10817] ? do_preadv+0x1af/0x270 [ 451.966162][T10817] do_preadv+0x1af/0x270 [ 451.966187][T10817] ? __pfx_do_preadv+0x10/0x10 [ 451.966220][T10817] do_syscall_64+0xcd/0x260 [ 451.966248][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.966266][T10817] RIP: 0033:0x7fb89538e969 [ 451.966280][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.966298][T10817] RSP: 002b:00007fb8961b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 451.966316][T10817] RAX: ffffffffffffffda RBX: 00007fb8955b5fa0 RCX: 00007fb89538e969 [ 451.966328][T10817] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 451.966339][T10817] RBP: 00007fb8961b0090 R08: 0000000000000000 R09: 0000000000000000 [ 451.966351][T10817] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 451.966362][T10817] R13: 0000000000000000 R14: 00007fb8955b5fa0 R15: 00007fff1700e998 [ 451.966388][T10817] [ 452.183726][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.190746][ T30] audit: type=1400 audit(1747959596.685:2680): avc: denied { ioctl } for pid=10805 comm="syz.0.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.215655][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.221877][ T30] audit: type=1400 audit(1747959596.704:2681): avc: denied { ioctl } for pid=10811 comm="syz.6.1390" path="socket:[33119]" dev="sockfs" ino=33119 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.247739][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.253886][ T5815] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 452.743945][T10827] netlink: 'syz.5.1394': attribute type 21 has an invalid length. [ 452.752423][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1394'. [ 452.894264][T10833] trusted_key: encrypted_key: insufficient parameters specified [ 454.107038][ T971] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 454.115985][ T971] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input46 [ 454.179113][ T971] usb 1-1: USB disconnect, device number 38 [ 454.185080][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 454.872231][ T5819] Bluetooth: hci5: command 0x0c1a tx timeout [ 455.109021][T10861] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 455.368135][T10873] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 455.697492][T10882] tmpfs: Unknown parameter 'MM0Bk3ry~6u8D y%MjTӥ} ԣ| \D.}tS(݌8^' [ 455.716050][T10881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.788545][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.870987][ T5815] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 455.950467][ T1534] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 456.122007][ T1534] usb 1-1: Using ep0 maxpacket: 16 [ 456.137643][ T1534] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 456.182931][ T1534] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.262440][ T1534] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.308376][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.350048][ T1534] usb 1-1: Product: syz [ 456.354321][ T1534] usb 1-1: Manufacturer: syz [ 456.362960][ T1534] usb 1-1: SerialNumber: syz [ 456.476252][ T30] kauditd_printk_skb: 371 callbacks suppressed [ 456.476268][ T30] audit: type=1400 audit(1747959601.587:3053): avc: denied { create } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.542476][ T30] audit: type=1400 audit(1747959601.615:3054): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.579325][ T30] audit: type=1400 audit(1747959601.615:3055): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.634094][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 456.645614][ T30] audit: type=1400 audit(1747959601.615:3056): avc: denied { create } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.665138][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.666363][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 456.803527][ T30] audit: type=1400 audit(1747959601.615:3057): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.096946][ T30] audit: type=1400 audit(1747959601.624:3058): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.120245][ T30] audit: type=1400 audit(1747959601.624:3059): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.124251][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.139910][ T30] audit: type=1400 audit(1747959601.624:3060): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.139951][ T30] audit: type=1400 audit(1747959601.633:3061): avc: denied { bind } for pid=10890 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.140022][ T30] audit: type=1400 audit(1747959601.633:3062): avc: denied { ioctl } for pid=10889 comm="syz.6.1414" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.299980][T10897] lo speed is unknown, defaulting to 1000 [ 457.528531][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 457.560517][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 457.581865][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 457.615259][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 457.642127][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.689073][ T10] usb 7-1: config 0 descriptor?? [ 458.768289][ T1534] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 458.927130][ T1534] usb 1-1: USB disconnect, device number 39 [ 459.096269][ T5819] Bluetooth: hci5: command 0x0c1a tx timeout [ 459.194265][T10924] hsr0: entered promiscuous mode [ 459.266399][T10924] hsr0: left promiscuous mode [ 459.350201][ T971] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 459.588296][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 459.614366][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.624682][T10925] lo speed is unknown, defaulting to 1000 [ 459.650931][ T10] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 459.664172][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.674926][ T10] hdpvr 7-1:0.0: device init failed [ 459.680196][ T10] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 459.699409][ T971] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 459.721653][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.042293][ T10] usb 7-1: USB disconnect, device number 35 [ 460.054452][ T971] usb 4-1: config 0 descriptor?? [ 460.538587][ T971] viewsonic 0003:2133:0018.0011: item fetching failed at offset 2/5 [ 460.570682][ T971] viewsonic 0003:2133:0018.0011: probe with driver viewsonic failed with error -22 [ 460.582559][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1426'. [ 461.125608][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.151181][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.185698][ T1534] usb 4-1: USB disconnect, device number 47 [ 461.441321][T10953] tipc: Started in network mode [ 461.447073][T10953] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 461.465146][T10953] tipc: Enabled bearer , priority 10 [ 461.618632][T10948] @: renamed from veth0_vlan (while UP) [ 461.894074][ T30] kauditd_printk_skb: 363 callbacks suppressed [ 461.894091][ T30] audit: type=1400 audit(1747959606.619:3426): avc: denied { create } for pid=10965 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.926987][ T30] audit: type=1400 audit(1747959606.619:3427): avc: denied { bind } for pid=10965 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 462.426011][ T30] audit: type=1400 audit(1747959606.628:3428): avc: denied { listen } for pid=10965 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 462.453610][ T30] audit: type=1400 audit(1747959606.628:3429): avc: denied { create } for pid=10965 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 462.484607][ T30] audit: type=1400 audit(1747959606.628:3430): avc: denied { connect } for pid=10965 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 462.525894][ T30] audit: type=1400 audit(1747959606.731:3431): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.578534][ T30] audit: type=1400 audit(1747959606.787:3432): avc: denied { create } for pid=10963 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.626167][T10972] FAULT_INJECTION: forcing a failure. [ 462.626167][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.637513][ T30] audit: type=1400 audit(1747959606.797:3433): avc: denied { write } for pid=10963 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.642192][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.0.1436 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 462.642215][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.642225][T10972] Call Trace: [ 462.642231][T10972] [ 462.642237][T10972] dump_stack_lvl+0x16c/0x1f0 [ 462.642264][T10972] should_fail_ex+0x512/0x640 [ 462.642290][T10972] _copy_from_iter+0x2a4/0x15b0 [ 462.642315][T10972] ? __alloc_skb+0x200/0x380 [ 462.642337][T10972] ? __pfx__copy_from_iter+0x10/0x10 [ 462.642361][T10972] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 462.642388][T10972] netlink_sendmsg+0x829/0xdd0 [ 462.642412][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.642440][T10972] sock_write_iter+0x4ff/0x5b0 [ 462.642463][T10972] ? __pfx_sock_write_iter+0x10/0x10 [ 462.642492][T10972] ? bpf_lsm_file_permission+0x9/0x10 [ 462.642515][T10972] ? security_file_permission+0x71/0x210 [ 462.642539][T10972] ? rw_verify_area+0xcf/0x680 [ 462.642563][T10972] vfs_write+0x5ba/0x1180 [ 462.642586][T10972] ? __pfx_sock_write_iter+0x10/0x10 [ 462.642610][T10972] ? __pfx_vfs_write+0x10/0x10 [ 462.642630][T10972] ? find_held_lock+0x2b/0x80 [ 462.642664][T10972] ksys_write+0x205/0x240 [ 462.642686][T10972] ? __pfx_ksys_write+0x10/0x10 [ 462.642707][T10972] ? rcu_is_watching+0x12/0xc0 [ 462.642732][T10972] do_syscall_64+0xcd/0x260 [ 462.642756][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.642772][T10972] RIP: 0033:0x7fbfd5d8e969 [ 462.642784][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.642799][T10972] RSP: 002b:00007fbfd6c6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.642815][T10972] RAX: ffffffffffffffda RBX: 00007fbfd5fb5fa0 RCX: 00007fbfd5d8e969 [ 462.642825][T10972] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 462.642835][T10972] RBP: 00007fbfd6c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.642844][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.642854][T10972] R13: 0000000000000000 R14: 00007fbfd5fb5fa0 R15: 00007fff95e23988 [ 462.642875][T10972] [ 462.674507][ T1534] tipc: Node number set to 10136234 [ 462.793420][ T30] audit: type=1400 audit(1747959606.815:3434): avc: denied { read write } for pid=10963 comm="syz.6.1433" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.057383][ T30] audit: type=1400 audit(1747959606.825:3435): avc: denied { read write open } for pid=10963 comm="syz.6.1433" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.593904][ T5860] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 464.061060][ T5860] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 464.082174][ T5860] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 464.109711][ T5860] usb 4-1: config 0 has no interface number 0 [ 464.119330][ T5860] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.145118][ T5860] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 464.300499][ T5860] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.764615][ T5860] usb 4-1: config 0 interface 52 has no altsetting 0 [ 464.784663][ T5860] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 464.801963][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 464.813807][ T5860] usb 4-1: Product: syz [ 464.817983][ T5860] usb 4-1: SerialNumber: syz [ 464.843251][ T5860] usb 4-1: config 0 descriptor?? [ 466.425765][T11002] tipc: Started in network mode [ 466.425789][T11002] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 466.425927][T11002] tipc: Enabled bearer , priority 10 [ 466.564891][ T5860] usb 4-1: Can not set alternate setting to 1, error: -71 [ 466.630073][ T5860] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 466.677555][ T5860] usb 4-1: USB disconnect, device number 48 [ 467.031966][T11008] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1448'. [ 467.105114][T11008] syz.6.1448: attempt to access beyond end of device [ 467.105114][T11008] nbd6: rw=0, sector=0, nr_sectors = 8 limit=0 [ 467.118114][T11008] hpfs: hpfs_map_sector(): read error [ 467.189510][T11009] o2cb: This node has not been configured. [ 467.195538][T11009] o2cb: Cluster check failed. Fix errors before retrying. [ 467.202743][T11009] (syz.6.1448,11009,1):user_dlm_register:674 ERROR: status = -22 [ 467.210517][T11009] (syz.6.1448,11009,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 467.337777][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 467.337793][ T30] audit: type=1400 audit(1747959611.745:3626): avc: denied { ioctl } for pid=10996 comm="syz.4.1447" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.418716][ T30] audit: type=1400 audit(1747959611.773:3627): avc: denied { ioctl } for pid=10996 comm="syz.4.1447" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.463559][ T30] audit: type=1400 audit(1747959611.848:3628): avc: denied { create } for pid=11010 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.487441][ T1534] tipc: Node number set to 10136234 [ 467.501654][ T30] audit: type=1400 audit(1747959611.848:3629): avc: denied { setopt } for pid=11010 comm="syz.0.1450" lport=131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.538232][T11003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.572640][ T30] audit: type=1400 audit(1747959611.848:3630): avc: denied { create } for pid=11010 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.651642][ T30] audit: type=1400 audit(1747959611.848:3631): avc: denied { ioctl } for pid=11010 comm="syz.0.1450" path="socket:[34144]" dev="sockfs" ino=34144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.878960][ T30] audit: type=1400 audit(1747959611.857:3632): avc: denied { ioctl } for pid=10996 comm="syz.4.1447" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.036447][T11017] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1452'. [ 468.041402][ T30] audit: type=1400 audit(1747959611.857:3633): avc: denied { create } for pid=11012 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.133384][ T30] audit: type=1400 audit(1747959611.895:3634): avc: denied { bind } for pid=11012 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.210487][ T30] audit: type=1400 audit(1747959611.923:3635): avc: denied { ioctl } for pid=10996 comm="syz.4.1447" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.584589][T11021] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 468.597095][T11021] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 468.607374][T11021] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 468.616776][T11021] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 468.633473][T11021] geneve2: entered promiscuous mode [ 468.638867][T11021] geneve2: entered allmulticast mode [ 469.345481][ T1219] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 469.494206][T11035] binder: 11034:11035 ioctl c0306201 200000000080 returned -22 [ 469.539773][ T1219] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 469.548165][ T1219] usb 5-1: config 0 has no interface number 0 [ 469.552029][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.591338][ T1219] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 469.643941][ T1219] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 469.660314][ T1219] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 469.670376][ T1219] usb 5-1: Product: syz [ 469.674644][ T1219] usb 5-1: Manufacturer: syz [ 469.679640][ T1219] usb 5-1: SerialNumber: syz [ 469.697345][ T1219] usb 5-1: config 0 descriptor?? [ 469.720700][T11030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 469.737970][ T1219] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 469.756042][ T1219] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 469.774484][ T1219] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 469.792308][ T1219] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 469.806968][ T1219] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 469.847027][ T1219] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 469.881094][ T1219] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 469.908038][ T1219] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 469.927035][ T1219] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 470.243357][ T1219] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 470.296738][ T1219] usb 5-1: USB disconnect, device number 40 [ 470.322704][ T5819] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 470.336253][ T1219] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 470.368447][ T1219] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 470.398684][ T1219] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 470.440016][ T1219] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 470.496021][ T1219] keyspan 5-1:0.107: device disconnected [ 470.829474][T11064] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 470.876003][T11064] veth0_macvtap: left promiscuous mode [ 470.912931][T11064] batman_adv: batadv0: Adding interface: macvtap0 [ 470.928001][T11064] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.953364][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.981825][T11064] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 471.494438][ T5860] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 471.688430][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 471.706198][ T5860] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.727833][ T5860] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.768726][ T5860] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.789387][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.804266][ T5860] usb 7-1: Product: 劋ṭᡣ乙쑹ⰾ⋼釂簑쐞綴ꃰ梴塾㖵ể䔠쮆鷧⍾鈍ᄽ⤌嘾ꍞࡘ巌匦袽Ⓜ겦፰䑹⫡ⲿ誔絈ၖ䂯祷줨䆰㳫嗃ᝍ슀〵Ȩ࿳⊿踚윇乽豓赁八㢽䤆誉⍯㤝菂岪歖濹暊纴ᖘ煒칺洚욠窢䐥ꧬᬠ劁 [ 471.847433][ T5860] usb 7-1: Manufacturer: ᱜ [ 471.867022][ T5860] usb 7-1: SerialNumber: 똋戌䢿셁抋ᩫ᰻ [ 472.099034][T11097] FAULT_INJECTION: forcing a failure. [ 472.099034][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.125328][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.4.1478 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 472.125354][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.125365][T11097] Call Trace: [ 472.125372][T11097] [ 472.125379][T11097] dump_stack_lvl+0x16c/0x1f0 [ 472.125407][T11097] should_fail_ex+0x512/0x640 [ 472.125434][T11097] _copy_from_user+0x2e/0xd0 [ 472.125460][T11097] wext_handle_ioctl+0xc2/0x2a0 [ 472.125490][T11097] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 472.125520][T11097] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 472.125550][T11097] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.125580][T11097] sock_ioctl+0x3a1/0x6b0 [ 472.125606][T11097] ? __pfx_sock_ioctl+0x10/0x10 [ 472.125628][T11097] ? hook_file_ioctl_common+0x145/0x410 [ 472.125657][T11097] ? selinux_file_ioctl+0x180/0x270 [ 472.125683][T11097] ? selinux_file_ioctl+0xb4/0x270 [ 472.125710][T11097] ? __pfx_sock_ioctl+0x10/0x10 [ 472.125734][T11097] __x64_sys_ioctl+0x190/0x200 [ 472.125759][T11097] do_syscall_64+0xcd/0x260 [ 472.125786][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.125803][T11097] RIP: 0033:0x7f2af038e969 [ 472.125817][T11097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.125834][T11097] RSP: 002b:00007f2af1224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.125851][T11097] RAX: ffffffffffffffda RBX: 00007f2af05b5fa0 RCX: 00007f2af038e969 [ 472.125861][T11097] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 472.125872][T11097] RBP: 00007f2af1224090 R08: 0000000000000000 R09: 0000000000000000 [ 472.125882][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.125892][T11097] R13: 0000000000000000 R14: 00007f2af05b5fa0 R15: 00007fff85615618 [ 472.125914][T11097] [ 472.167862][ T5860] usb 7-1: 0:2 : does not exist [ 472.168599][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.205854][ T5860] usb 7-1: USB disconnect, device number 36 [ 472.210565][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.274783][ T1534] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 472.378754][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.681254][ T1534] usb 1-1: device descriptor read/64, error -71 [ 472.813098][ T30] kauditd_printk_skb: 516 callbacks suppressed [ 472.814283][ T30] audit: type=1400 audit(1747959616.862:4143): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.969928][ T1534] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 473.064343][ T30] audit: type=1400 audit(1747959616.871:4144): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.089399][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.161975][ T30] audit: type=1400 audit(1747959616.993:4145): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.289133][ T1534] usb 1-1: device descriptor read/64, error -71 [ 473.296389][ T30] audit: type=1400 audit(1747959617.058:4146): avc: denied { read write } for pid=7782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.320711][ T30] audit: type=1400 audit(1747959617.067:4147): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.345844][ T30] audit: type=1400 audit(1747959617.067:4148): avc: denied { read write open } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.394505][ T30] audit: type=1400 audit(1747959617.067:4149): avc: denied { ioctl } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.432413][ T1534] usb usb1-port1: attempt power cycle [ 473.876528][ T30] audit: type=1400 audit(1747959617.077:4150): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.902539][ T30] audit: type=1400 audit(1747959617.077:4151): avc: denied { ioctl } for pid=11086 comm="syz.0.1475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.927466][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.978652][ T30] audit: type=1400 audit(1747959617.086:4152): avc: denied { create } for pid=11103 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.231308][ T1219] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 474.314798][ T1534] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 474.350542][ T1534] usb 1-1: device descriptor read/8, error -71 [ 474.744015][T11116] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1484'. [ 474.807334][ T971] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 474.825032][T11115] syz.6.1484: attempt to access beyond end of device [ 474.825032][T11115] nbd6: rw=0, sector=0, nr_sectors = 8 limit=0 [ 474.827909][ T1219] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 474.837885][T11115] hpfs: hpfs_map_sector(): read error [ 474.861128][T11115] o2cb: This node has not been configured. [ 474.867273][T11115] o2cb: Cluster check failed. Fix errors before retrying. [ 474.874456][T11115] (syz.6.1484,11115,0):user_dlm_register:674 ERROR: status = -22 [ 474.882173][T11115] (syz.6.1484,11115,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 474.904336][ T1219] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 474.913463][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.921755][ T1219] usb 5-1: Product: syz [ 474.926287][ T1219] usb 5-1: Manufacturer: syz [ 474.930897][ T1219] usb 5-1: SerialNumber: syz [ 474.952188][ T5917] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 474.959934][ T1534] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 475.045287][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 475.131571][ T971] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 475.157123][ T971] usb 4-1: config 0 has no interface number 0 [ 475.177869][ T971] usb 4-1: config 0 interface 106 has no altsetting 0 [ 475.226303][ T1534] usb 1-1: device not accepting address 43, error -71 [ 475.235813][ T1534] usb usb1-port1: unable to enumerate USB device [ 475.282318][ T971] usb 4-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 475.301408][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.309914][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.319629][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.328016][ T971] usb 4-1: Product: syz [ 475.336411][ T971] usb 4-1: Manufacturer: syz [ 475.344469][ T971] usb 4-1: SerialNumber: syz [ 475.363386][ T971] usb 4-1: config 0 descriptor?? [ 475.385136][ T971] cdc_phonet 4-1:0.106: probe with driver cdc_phonet failed with error -22 [ 475.394534][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.409003][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.432086][ T5917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 475.456351][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 475.474317][ T5917] usb 6-1: can't read configurations, error -71 [ 475.627326][ T1534] usb 4-1: USB disconnect, device number 49 [ 475.754866][T11127] fuse: Unknown parameter 'user_i00000000000000000000' [ 476.349862][T11105] Process accounting resumed [ 476.357843][ T1219] usb 5-1: selecting invalid altsetting 1 [ 476.365672][ T1219] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 476.365757][ T1219] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 476.385592][ T1219] usb 5-1: USB disconnect, device number 41 [ 477.171057][ T5917] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 477.406152][ T971] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 477.420026][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 477.599046][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 477.613087][ T5917] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 477.631202][ T5917] usb 6-1: config 179 has no interface number 0 [ 477.637697][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 477.649978][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 477.661387][ T971] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 477.661635][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 477.690751][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 477.702595][ T971] usb 5-1: config 0 has no interface number 0 [ 477.704598][ T5917] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 477.908908][ T971] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 477.915487][ T5917] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 477.919058][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.938058][ T971] usb 5-1: Product: syz [ 477.948820][ T971] usb 5-1: Manufacturer: syz [ 477.962065][ T971] usb 5-1: SerialNumber: syz [ 477.970323][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.988221][ T971] usb 5-1: config 0 descriptor?? [ 478.014243][T11137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 478.016073][ T971] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 478.052212][T11149] binder: 11147:11149 ioctl c0306201 200000000240 returned -11 [ 478.178872][ T30] kauditd_printk_skb: 455 callbacks suppressed [ 478.178888][ T30] audit: type=1400 audit(1747959621.885:4606): avc: denied { ioctl } for pid=11146 comm="syz.0.1495" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.236855][ T30] audit: type=1400 audit(1747959621.941:4607): avc: denied { create } for pid=11156 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.261267][ T5860] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 478.280114][ T30] audit: type=1400 audit(1747959621.941:4608): avc: denied { write } for pid=11156 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.303353][ T971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 478.335240][ T971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 478.337717][ T30] audit: type=1400 audit(1747959621.941:4609): avc: denied { connect } for pid=11156 comm="syz.6.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.389892][ T1219] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 478.392802][ T30] audit: type=1400 audit(1747959621.941:4610): avc: denied { name_connect } for pid=11156 comm="syz.6.1498" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 478.443185][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 478.466363][ T5860] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 478.478504][T11159] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 478.487077][T11159] audit: out of memory in audit_log_start [ 478.508439][ T30] audit: type=1400 audit(1747959621.960:4611): avc: denied { ioctl } for pid=11154 comm="syz.3.1497" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.539999][ T1534] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input47 [ 478.553240][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 478.570077][ T5860] usb 1-1: config 0 has no interface number 0 [ 478.576345][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 478.583805][ T1219] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 478.590498][ T30] audit: type=1400 audit(1747959621.978:4612): avc: denied { ioctl } for pid=11138 comm="syz.4.1492" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.623274][ T1219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.623297][ T1219] usb 4-1: config 0 has no interface number 0 [ 478.636349][ T1219] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 478.652308][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 478.656936][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.659517][ T30] audit: type=1400 audit(1747959621.978:4613): avc: denied { ioctl } for pid=11138 comm="syz.4.1492" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 478.675786][ T1219] usb 4-1: Product: syz [ 478.703423][ T1219] usb 4-1: Manufacturer: syz [ 478.708088][ T1219] usb 4-1: SerialNumber: syz [ 478.711446][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 478.718682][ T1219] usb 4-1: config 0 descriptor?? [ 478.720929][ T5860] usb 1-1: config 0 has no interface number 0 [ 478.736098][ T1219] hub 4-1:0.31: bad descriptor, ignoring hub [ 478.745770][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 478.756302][ T1219] hub 4-1:0.31: probe with driver hub failed with error -5 [ 478.827183][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 478.865486][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 478.869915][ T1219] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 479.035947][T11163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.350575][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.369117][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.387932][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 479.401373][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 479.411695][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.420561][ T1219] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 479.420561][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.420645][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 479.463282][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 479.487798][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 479.488251][ T1534] usb 5-1: USB disconnect, device number 42 [ 479.495943][ T1219] usb 4-1: Failed to create links for entity 6 [ 479.548794][ T1534] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 479.562285][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.573009][ T1219] usb 4-1: Failed to register entities (-22). [ 479.586096][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.609750][ T1534] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 479.651482][ T1219] usb 4-1: USB disconnect, device number 50 [ 479.676844][ T1534] quatech2 5-1:0.51: device disconnected [ 479.683211][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 479.703669][ T5917] usb 6-1: USB disconnect, device number 26 [ 479.709698][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 479.709740][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 479.733837][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 479.753674][ T5917] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 479.764485][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.773321][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.785259][T11167] loop7: detected capacity change from 0 to 16384 [ 479.787982][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 479.823251][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 479.831428][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.837599][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.852588][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 479.867795][ T5860] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 479.876423][ T5860] usb 1-1: config 0 has no interface number 0 [ 479.886998][ T5860] usb 1-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.946184][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1503'. [ 479.948556][ T5860] usb 1-1: config 0 interface 160 has no altsetting 0 [ 480.021539][ T5860] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 480.040672][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.049376][ T5860] usb 1-1: Product: syz [ 480.053549][ T5860] usb 1-1: Manufacturer: syz [ 480.058274][ T5860] usb 1-1: SerialNumber: syz [ 480.079464][ T5860] usb 1-1: config 0 descriptor?? [ 480.120788][T11168] loop7: detected capacity change from 16384 to 0 [ 480.147301][ C0] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 480.328458][ T5860] speedtch 1-1:0.160: speedtch_bind: wrong device class 127 [ 480.346101][ T5860] speedtch 1-1:0.160: usbatm_usb_probe: bind failed: -19! [ 480.369218][ T5860] usb 1-1: USB disconnect, device number 44 [ 480.388870][ T971] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 480.682411][T11184] overlay: Bad value for 'workdir' [ 480.682736][T11187] overlay: Bad value for 'workdir' [ 480.725070][ T971] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.737510][ T971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 480.759515][ T971] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 480.769975][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.778158][ T971] usb 7-1: Product: syz [ 480.782695][ T971] usb 7-1: Manufacturer: syz [ 480.788621][ T971] usb 7-1: SerialNumber: syz [ 480.798732][ T971] usb 7-1: config 0 descriptor?? [ 480.807332][T11175] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 481.247428][ T971] rc_core: IR keymap rc-streamzap not found [ 481.253369][ T971] Registered IR keymap rc-empty [ 481.330929][ T971] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 481.354943][ T971] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input48 [ 481.456361][T11192] xt_CT: No such helper "pptp" [ 481.486156][ T971] usb 7-1: USB disconnect, device number 37 [ 481.636976][T11202] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1512'. [ 483.091553][T11217] 9pnet_fd: Insufficient options for proto=fd [ 483.343932][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1519'. [ 483.480455][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 483.534571][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 483.534587][ T30] audit: type=1400 audit(1747959626.899:4985): avc: denied { perfmon } for pid=11223 comm="syz.4.1520" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.593213][ T30] audit: type=1400 audit(1747959626.899:4986): avc: denied { read write open } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.632907][ T30] audit: type=1400 audit(1747959626.899:4987): avc: denied { ioctl } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.666628][ T30] audit: type=1400 audit(1747959626.927:4988): avc: denied { perfmon } for pid=11223 comm="syz.4.1520" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.799801][ T30] audit: type=1400 audit(1747959626.927:4989): avc: denied { perfmon } for pid=11223 comm="syz.4.1520" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.834018][ T30] audit: type=1400 audit(1747959626.927:4990): avc: denied { perfmon } for pid=11223 comm="syz.4.1520" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.873956][ T30] audit: type=1400 audit(1747959626.936:4991): avc: denied { bpf } for pid=11223 comm="syz.4.1520" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.927683][ T30] audit: type=1400 audit(1747959626.945:4992): avc: denied { bpf } for pid=11223 comm="syz.4.1520" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 483.994972][ T30] audit: type=1400 audit(1747959626.945:4993): avc: denied { prog_run } for pid=11223 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 484.054086][ T30] audit: type=1400 audit(1747959626.983:4994): avc: denied { create } for pid=11223 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.143864][T11232] usb usb8: usbfs: process 11232 (syz.5.1523) did not claim interface 0 before use [ 484.307840][T11242] SELinux: failed to load policy [ 484.366136][ T5917] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 484.377899][ T5860] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 484.472002][T11244] SELinux: failed to load policy [ 484.531767][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 484.561314][ T5917] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 484.580364][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 484.596711][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.622651][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 484.630830][ T5917] usb 4-1: config 0 has no interface number 0 [ 484.654640][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.664408][ T5860] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 484.673610][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 484.692426][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 484.700898][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.721801][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 484.730831][ T5860] usb 1-1: config 0 descriptor?? [ 484.755279][ T5917] usb 4-1: config 0 has no interface number 0 [ 484.761471][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 484.783940][T11253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11253 comm=syz.4.1529 [ 484.796073][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 484.912744][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 484.941487][ T5917] usb 4-1: config 0 has no interface number 0 [ 484.949519][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 485.009345][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 485.073719][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 485.125535][ T5917] usb 4-1: config 0 has no interface number 0 [ 485.192332][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 485.261998][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 485.330097][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 485.341481][ T5917] usb 4-1: config 0 has no interface number 0 [ 485.347714][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 485.379526][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 485.746308][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 485.766484][ T5860] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 485.791152][ T5917] usb 4-1: config 0 has no interface number 0 [ 485.803569][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 485.858712][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 485.900840][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 485.916389][ T5917] usb 4-1: config 0 has no interface number 0 [ 485.933306][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 485.980169][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 485.991543][ T5917] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 486.009668][ T5917] usb 4-1: config 0 has no interface number 0 [ 486.021304][ T5917] usb 4-1: config 0 interface 160 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 486.054903][ T5917] usb 4-1: config 0 interface 160 has no altsetting 0 [ 486.082207][ T5917] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 486.102085][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.118402][ T5917] usb 4-1: Product: syz [ 486.128005][ T5917] usb 4-1: Manufacturer: syz [ 486.140409][ T5917] usb 4-1: SerialNumber: syz [ 486.150301][ T5917] usb 4-1: config 0 descriptor?? [ 486.193974][ T1534] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 486.233052][ T971] usb 1-1: USB disconnect, device number 45 [ 486.441035][ T5917] speedtch 4-1:0.160: speedtch_bind: wrong device class 127 [ 486.448363][ T5917] speedtch 4-1:0.160: usbatm_usb_probe: bind failed: -19! [ 486.459010][ T5917] usb 4-1: USB disconnect, device number 51 [ 486.526064][ T1534] usb 6-1: Using ep0 maxpacket: 8 [ 486.966243][ T1534] usb 6-1: config index 0 descriptor too short (expected 496, got 18) [ 486.983293][ T1534] usb 6-1: config 125 has too many interfaces: 152, using maximum allowed: 32 [ 487.000083][ T1534] usb 6-1: config 125 has an invalid descriptor of length 222, skipping remainder of the config [ 487.017093][ T1534] usb 6-1: config 125 has 0 interfaces, different from the descriptor's value: 152 [ 487.055450][ T1534] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 487.092217][ T1534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.220109][ T1534] usb 6-1: Product: syz [ 487.224314][ T1534] usb 6-1: Manufacturer: syz [ 487.229085][ T1534] usb 6-1: SerialNumber: syz [ 487.425303][T11276] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 487.803274][ T1219] libceph: connect (1)[c::]:6789 error -97 [ 487.816812][ T1219] libceph: mon0 (1)[c::]:6789 connect error [ 487.836803][ T1219] libceph: connect (1)[c::]:6789 error -97 [ 487.875639][ T1219] libceph: mon0 (1)[c::]:6789 connect error [ 487.976223][T11286] xt_ecn: cannot match TCP bits for non-tcp packets [ 487.995556][T11281] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 488.184744][ T971] libceph: connect (1)[c::]:6789 error -97 [ 488.190901][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 488.239072][T11290] SELinux: failed to load policy [ 488.604087][T11292] ubi31: attaching mtd0 [ 488.626400][T11292] ubi31: scanning is finished [ 488.631180][T11292] ubi31: empty MTD device detected [ 488.661324][T11293] kAFS: No cell specified [ 488.836386][ T971] libceph: connect (1)[c::]:6789 error -97 [ 488.842467][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 488.889878][T11292] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 488.897467][T11292] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 488.904769][T11292] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 488.912007][T11292] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 488.919462][T11292] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 488.926468][T11292] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 488.934530][T11292] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1506996367 [ 488.944903][T11292] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 488.955735][T11294] ubi31: background thread "ubi_bgt31d" started, PID 11294 [ 488.983140][ T30] kauditd_printk_skb: 716 callbacks suppressed [ 488.983172][ T30] audit: type=1400 audit(1747959631.987:5663): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.109672][ T30] audit: type=1400 audit(1747959632.015:5664): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.142289][T11279] ceph: No mds server is up or the cluster is laggy [ 489.152650][ T30] audit: type=1400 audit(1747959632.015:5665): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.177761][ T30] audit: type=1400 audit(1747959632.015:5666): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.205278][ T1534] usb 6-1: USB disconnect, device number 27 [ 489.227439][ T30] audit: type=1400 audit(1747959632.015:5667): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.274472][ T30] audit: type=1400 audit(1747959632.025:5668): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.326219][ T30] audit: type=1400 audit(1747959632.025:5669): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.352619][ T30] audit: type=1400 audit(1747959632.025:5670): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.372509][ T30] audit: type=1400 audit(1747959632.109:5671): avc: denied { write } for pid=11275 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.389370][T11280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.839520][ T5917] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 489.964920][T11304] binder: 11303:11304 ioctl c0306201 0 returned -14 [ 489.973228][T11304] binder: 11303:11304 ioctl c0306201 0 returned -14 [ 490.031762][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 490.054413][ T5917] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 490.072768][ T5917] usb 4-1: config 0 has no interface number 0 [ 490.081591][ T5917] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 1024 [ 490.106682][ T5917] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 490.128046][ T1534] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 490.139413][ T5917] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 490.148453][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.177316][ T5917] usb 4-1: Product: syz [ 490.181526][ T5917] usb 4-1: Manufacturer: syz [ 490.186297][ T5917] usb 4-1: SerialNumber: syz [ 490.196545][ T5917] usb 4-1: config 0 descriptor?? [ 490.217133][ T5917] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.341826][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 490.351543][ T1534] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 490.359078][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.370563][ T1534] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.382391][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.393505][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 490.413205][ T1534] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 490.421756][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.433150][ T1534] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.478049][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.498759][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 490.542277][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 490.555048][ T5917] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 490.555689][ T1219] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 490.566730][ T1534] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 490.590230][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.601938][ T5917] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 490.624597][ T1534] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.640620][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.660164][ T1534] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 490.688298][ T1534] usb 1-1: string descriptor 0 read error: -22 [ 490.695991][ T1534] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 490.705031][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.744747][ T1534] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 490.816287][ T1219] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 490.819741][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 490.834816][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.842905][ T1219] usb 6-1: Product: syz [ 490.855158][ T1219] usb 6-1: Manufacturer: syz [ 490.856322][T11298] bridge_slave_1: left allmulticast mode [ 490.859753][ T1219] usb 6-1: SerialNumber: syz [ 490.883532][T11298] bridge_slave_1: left promiscuous mode [ 490.898108][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.903328][ T1219] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.934123][T11298] bridge_slave_0: left allmulticast mode [ 490.966171][T11298] bridge_slave_0: left promiscuous mode [ 490.983410][ T971] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 490.994306][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.044878][T11325] SELinux: failed to load policy [ 491.107983][ T5917] usb 1-1: USB disconnect, device number 46 [ 491.214702][ T1534] usb 4-1: USB disconnect, device number 52 [ 491.221766][ C0] usb 6-1: ath9k_htc: invalid pkt_len (fd64) [ 491.234622][ T1534] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 491.404402][ T1534] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 491.488462][ T1219] usb 6-1: USB disconnect, device number 28 [ 491.571325][ T1534] quatech2 4-1:0.51: device disconnected [ 491.667574][T11333] siw: device registration error -23 [ 492.545667][ T971] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 492.554400][ T971] ath9k_htc: Failed to initialize the device [ 492.566197][ T1219] usb 6-1: ath9k_htc: USB layer deinitialized [ 492.961443][ T5917] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 493.507599][ T5917] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 493.544293][ T5917] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 493.558144][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.575491][ T5917] usb 7-1: Product: syz [ 493.579877][ T5917] usb 7-1: Manufacturer: syz [ 493.584803][ T5917] usb 7-1: SerialNumber: syz [ 494.471220][ T30] kauditd_printk_skb: 671 callbacks suppressed [ 494.471236][ T30] audit: type=1400 audit(1747959637.122:6341): avc: denied { read write } for pid=7782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.573781][ T30] audit: type=1400 audit(1747959637.122:6342): avc: denied { read write open } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.635623][ T30] audit: type=1400 audit(1747959637.122:6343): avc: denied { ioctl } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.770190][ T30] audit: type=1400 audit(1747959637.197:6344): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.801097][ T30] audit: type=1400 audit(1747959637.207:6345): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.914583][ T30] audit: type=1400 audit(1747959637.207:6346): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 494.948835][ T30] audit: type=1400 audit(1747959637.244:6347): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 495.375513][ T30] audit: type=1400 audit(1747959637.319:6348): avc: denied { read } for pid=11355 comm="syz.5.1561" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.427724][T11337] Process accounting resumed [ 495.474076][T11366] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1562'. [ 495.492532][T11366] syz.3.1562: attempt to access beyond end of device [ 495.492532][T11366] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 495.505506][T11366] hpfs: hpfs_map_sector(): read error [ 495.521536][T11366] o2cb: This node has not been configured. [ 495.527574][T11366] o2cb: Cluster check failed. Fix errors before retrying. [ 495.534675][T11366] (syz.3.1562,11366,0):user_dlm_register:674 ERROR: status = -22 [ 495.542586][T11366] (syz.3.1562,11366,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 495.570292][ T5917] usb 7-1: selecting invalid altsetting 1 [ 495.578368][ T30] audit: type=1400 audit(1747959637.319:6349): avc: denied { read open } for pid=11355 comm="syz.5.1561" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.612380][ T30] audit: type=1400 audit(1747959637.328:6350): avc: denied { read } for pid=11356 comm="syz.0.1560" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 495.661422][ T5917] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 495.661481][ T5917] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 495.777792][ T5917] usb 7-1: USB disconnect, device number 38 [ 495.799639][T11365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 495.820620][T11370] SELinux: failed to load policy [ 496.108334][T11373] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 497.437440][T11390] batadv_slave_1: entered promiscuous mode [ 497.594990][T11392] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1567'. [ 497.668367][T11392] syz.5.1567: attempt to access beyond end of device [ 497.668367][T11392] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 497.681386][T11392] hpfs: hpfs_map_sector(): read error [ 497.689903][ T5917] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 497.758742][T11393] o2cb: This node has not been configured. [ 497.764645][T11393] o2cb: Cluster check failed. Fix errors before retrying. [ 497.771867][T11393] (syz.5.1567,11393,1):user_dlm_register:674 ERROR: status = -22 [ 497.779617][T11393] (syz.5.1567,11393,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 497.844501][T11388] batadv_slave_1: left promiscuous mode [ 497.985746][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 498.004299][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.025225][T11398] netlink: 'syz.4.1572': attribute type 21 has an invalid length. [ 498.033540][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.045341][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 498.057168][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 498.070175][ T5917] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 498.079396][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.101539][ T5917] hub 1-1:1.0: bad descriptor, ignoring hub [ 498.105037][T11398] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 498.105037][T11398] program syz.4.1572 not setting count and/or reply_len properly [ 498.124424][ T5917] hub 1-1:1.0: probe with driver hub failed with error -5 [ 498.124903][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 498.124918][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 498.130437][ T5917] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 498.132177][ T971] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 498.142255][ T5917] cdc_wdm 1-1:1.0: Unknown control protocol [ 498.546799][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.562955][ T971] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.595764][ T971] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.616543][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.625575][ T971] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 498.648416][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.672383][ T971] usb 4-1: config 0 descriptor?? [ 498.681464][ T5917] usb 1-1: USB disconnect, device number 47 [ 499.054808][ T5862] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 499.293079][ T5917] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 499.332198][ T971] kye 0003:0458:5015.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 499.351092][ T971] kye 0003:0458:5015.0013: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 499.361991][ T971] kye 0003:0458:5015.0013: tablet-enabling feature report not found [ 499.372899][ T971] kye 0003:0458:5015.0013: tablet enabling failed [ 499.396731][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 499.402851][T11417] nfs4: Unknown parameter 'DU~yٓˈX蜇> >azAJ äDVpv&יȷr>9R6hA1TpPJwR ]j' [ 499.431091][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.441579][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 499.452173][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 499.470486][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 499.481734][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 499.487787][ T5862] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 499.498064][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.508957][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.531716][ T5917] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.576329][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.863693][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 499.863823][ T30] audit: type=1400 audit(1747959642.155:6681): avc: denied { ioctl } for pid=11384 comm="syz.0.1568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.914988][ T5862] hub 1-1:1.0: bad descriptor, ignoring hub [ 499.921627][ T5917] usb 7-1: config 0 descriptor?? [ 499.932376][ T5862] hub 1-1:1.0: probe with driver hub failed with error -5 [ 499.939720][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 499.986070][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 499.987344][ T30] audit: type=1400 audit(1747959642.211:6682): avc: denied { ioctl } for pid=11384 comm="syz.0.1568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.032001][ T5862] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 500.036731][ T1219] usb 4-1: USB disconnect, device number 53 [ 500.048903][ T5862] cdc_wdm 1-1:1.0: Unknown control protocol [ 500.099215][ T30] audit: type=1400 audit(1747959642.248:6683): avc: denied { ioctl } for pid=11407 comm="syz.6.1576" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.147763][ T30] audit: type=1400 audit(1747959642.248:6684): avc: denied { ioctl } for pid=11407 comm="syz.6.1576" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.176924][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.191188][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.210477][ T30] audit: type=1400 audit(1747959642.248:6685): avc: denied { ioctl } for pid=11407 comm="syz.6.1576" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.251314][ T5917] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 500.272356][ T30] audit: type=1400 audit(1747959642.248:6686): avc: denied { ioctl } for pid=11407 comm="syz.6.1576" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.290788][T11422] binder_alloc: binder_alloc_mmap_handler: 11420 200000bdb000-200000bde000 already mapped failed -16 [ 500.298479][ T30] audit: type=1400 audit(1747959642.267:6687): avc: denied { read write } for pid=7782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.333527][ T5862] usb 1-1: USB disconnect, device number 48 [ 500.340930][ T30] audit: type=1400 audit(1747959642.267:6688): avc: denied { read write open } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.368847][ T30] audit: type=1400 audit(1747959642.267:6689): avc: denied { ioctl } for pid=7782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.396280][ T30] audit: type=1400 audit(1747959642.389:6690): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 501.378918][T11447] team_slave_0: entered promiscuous mode [ 501.385138][T11447] team_slave_1: entered promiscuous mode [ 501.505099][ T971] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 501.610971][ T5863] usb 7-1: USB disconnect, device number 39 [ 501.684961][ T1219] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 501.695269][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 501.709578][ T971] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.801518][ T971] usb 5-1: config 0 has no interface number 0 [ 501.826431][ T971] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.841892][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.850714][ T971] usb 5-1: Product: syz [ 501.854877][ T971] usb 5-1: Manufacturer: syz [ 501.861342][ T971] usb 5-1: SerialNumber: syz [ 501.870369][ T1219] usb 6-1: Using ep0 maxpacket: 16 [ 501.889395][ T971] usb 5-1: config 0 descriptor?? [ 501.905269][ T971] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.918887][ T1219] usb 6-1: unable to get BOS descriptor or descriptor too short [ 501.935614][ T1219] usb 6-1: config 1 has an invalid interface number: 221 but max is 0 [ 501.945622][ T1219] usb 6-1: config 1 has no interface number 0 [ 501.952195][ T1219] usb 6-1: config 1 interface 221 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 501.963051][ T1219] usb 6-1: config 1 interface 221 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 501.976698][ T1219] usb 6-1: config 1 interface 221 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.002764][ T1219] usb 6-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 502.020138][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.029295][ T1219] usb 6-1: Product: syz [ 502.033594][ T1219] usb 6-1: Manufacturer: syz [ 502.454531][ T1219] usb 6-1: SerialNumber: syz [ 614.769737][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 614.769757][ C1] rcu: 0-...!: (1 GPs behind) idle=34ec/1/0x4000000000000000 softirq=55662/55663 fqs=1 [ 614.770428][ C1] rcu: (detected by 1, t=10506 jiffies, g=44017, q=375 ncpus=2) [ 614.770446][ C1] Sending NMI from CPU 1 to CPUs 0: [ 614.770474][ C0] NMI backtrace for cpu 0 [ 614.770487][ C0] CPU: 0 UID: 0 PID: 1219 Comm: kworker/0:3 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 614.770506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.770516][ C0] Workqueue: usb_hub_wq hub_event [ 614.770537][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 614.770561][ C0] Code: b4 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 97 20 e9 11 <65> 8b 05 a8 20 e9 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 614.770574][ C0] RSP: 0000:ffffc90000007c40 EFLAGS: 00000046 [ 614.770585][ C0] RAX: dffffc0000000000 RBX: ffff8880581f3340 RCX: ffffffff8b695de0 [ 614.770595][ C0] RDX: ffff8880286d8000 RSI: 0000000000000001 RDI: 0000000000000006 [ 614.770604][ C0] RBP: ffff8880b8427990 R08: 0000000000000006 R09: 0000000000000001 [ 614.770613][ C0] R10: ffff8880581f3340 R11: 0000000000000000 R12: 0000000000000001 [ 614.770622][ C0] R13: 0000000000000000 R14: ffff8880b8427840 R15: 0000000000000000 [ 614.770630][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 614.770645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.770655][ C0] CR2: 000000110c2a6cdf CR3: 00000000330ac000 CR4: 00000000003526f0 [ 614.770664][ C0] DR0: 0100000100000000 DR1: 0000000000000006 DR2: 0000000000000005 [ 614.770673][ C0] DR3: 0000000000000011 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 614.770682][ C0] Call Trace: [ 614.770687][ C0] [ 614.770693][ C0] timerqueue_del+0x40/0x150 [ 614.770710][ C0] __remove_hrtimer+0x99/0x290 [ 614.770732][ C0] __hrtimer_run_queues+0x4f9/0xad0 [ 614.770750][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 614.770764][ C0] ? read_tsc+0x9/0x20 [ 614.770786][ C0] hrtimer_interrupt+0x397/0x8e0 [ 614.770806][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 614.770823][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 614.770842][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 614.770857][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 614.770875][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 a0 89 8b 8b e8 68 6e f0 09 65 66 c7 05 d6 91 27 12 00 00 e8 19 3c 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 614.770888][ C0] RSP: 0000:ffffc90000007f28 EFLAGS: 00000202 [ 614.770898][ C0] RAX: 0000000000144dea RBX: 00000000ffffffff RCX: 0000000000000002 [ 614.770907][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2e0 [ 614.770916][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 614.770924][ C0] R10: ffffffff90852e17 R11: 0000000000000000 R12: 0000000000000100 [ 614.770933][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed10050db000 [ 614.770948][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 614.770963][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 614.770984][ C0] ? rcu_is_watching+0x12/0xc0 [ 614.771000][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 614.771018][ C0] __irq_exit_rcu+0x109/0x170 [ 614.771033][ C0] irq_exit_rcu+0x9/0x30 [ 614.771052][ C0] sysvec_call_function_single+0xa4/0xc0 [ 614.771069][ C0] [ 614.771074][ C0] [ 614.771079][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 614.771094][ C0] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 614.771111][ C0] Code: 00 e8 b2 12 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 80 49 20 00 48 85 db 0f 85 55 01 00 00 e8 02 4e 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 37 ce 85 [ 614.771123][ C0] RSP: 0000:ffffc9000451f428 EFLAGS: 00000287 [ 614.771134][ C0] RAX: ffffffff8f0cdb78 RBX: 0000000000000000 RCX: ffffc900199cc000 [ 614.771143][ C0] RDX: 0000000000100000 RSI: ffffffff819af7ee RDI: 0000000000000007 [ 614.771152][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 614.771160][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f0cdb78 [ 614.771168][ C0] R13: ffffffff8f0cdb20 R14: ffffc9000451f4b8 R15: dffffc0000000000 [ 614.771181][ C0] ? console_flush_all+0x99e/0xc60 [ 614.771198][ C0] ? console_flush_all+0x99e/0xc60 [ 614.771215][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 614.771234][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 614.771253][ C0] console_unlock+0xd8/0x210 [ 614.771267][ C0] ? __pfx_console_unlock+0x10/0x10 [ 614.771284][ C0] ? dev_printk_emit+0xfa/0x140 [ 614.771297][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 614.771311][ C0] vprintk_emit+0x418/0x6d0 [ 614.771327][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 614.771346][ C0] dev_printk_emit+0xfa/0x140 [ 614.771359][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 614.771388][ C0] __dev_printk+0xf5/0x270 [ 614.771401][ C0] _dev_info+0xe4/0x120 [ 614.771414][ C0] ? __pfx__dev_info+0x10/0x10 [ 614.771426][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 614.771443][ C0] ? usb_match_device+0xd5/0x570 [ 614.771462][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 614.771478][ C0] ? usb_cache_string+0xf2/0x150 [ 614.771493][ C0] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 614.771514][ C0] usb_new_device+0x94c/0x1a20 [ 614.771533][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.771548][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 614.771565][ C0] ? mark_held_locks+0x49/0x80 [ 614.771586][ C0] hub_event+0x2eb7/0x4fa0 [ 614.771612][ C0] ? __pfx_hub_event+0x10/0x10 [ 614.771627][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 614.771646][ C0] ? rcu_is_watching+0x12/0xc0 [ 614.771662][ C0] process_one_work+0x9cf/0x1b70 [ 614.771681][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 614.771699][ C0] ? __pfx_process_one_work+0x10/0x10 [ 614.771720][ C0] ? assign_work+0x1a0/0x250 [ 614.771735][ C0] worker_thread+0x6c8/0xf10 [ 614.771752][ C0] ? __kthread_parkme+0x19e/0x250 [ 614.771771][ C0] ? __pfx_worker_thread+0x10/0x10 [ 614.771785][ C0] kthread+0x3c2/0x780 [ 614.771799][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771811][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771824][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771836][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771849][ C0] ? rcu_is_watching+0x12/0xc0 [ 614.771865][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771877][ C0] ret_from_fork+0x45/0x80 [ 614.771890][ C0] ? __pfx_kthread+0x10/0x10 [ 614.771903][ C0] ret_from_fork_asm+0x1a/0x30 [ 614.771927][ C0] [ 614.772466][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g44017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 614.772487][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 614.772496][ C1] rcu: RCU grace-period kthread stack dump: [ 614.772502][ C1] task:rcu_preempt state:R running task stack:28728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 614.772562][ C1] Call Trace: [ 614.772568][ C1] [ 614.772579][ C1] __schedule+0x116f/0x5de0 [ 614.772612][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 614.772643][ C1] ? __pfx___schedule+0x10/0x10 [ 614.772671][ C1] ? find_held_lock+0x2b/0x80 [ 614.772693][ C1] ? schedule+0x2d7/0x3a0 [ 614.772717][ C1] schedule+0xe7/0x3a0 [ 614.772739][ C1] schedule_timeout+0x123/0x290 [ 614.772760][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 614.772781][ C1] ? __pfx_process_timeout+0x10/0x10 [ 614.772806][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 614.772829][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 614.772859][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 614.772888][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 614.772917][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 614.772947][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 614.772978][ C1] rcu_gp_kthread+0x270/0x380 [ 614.773005][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 614.773029][ C1] ? rcu_is_watching+0x12/0xc0 [ 614.773050][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 614.773075][ C1] ? __kthread_parkme+0x19e/0x250 [ 614.773101][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 614.773127][ C1] kthread+0x3c2/0x780 [ 614.773145][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773161][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773178][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773195][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773211][ C1] ? rcu_is_watching+0x12/0xc0 [ 614.773233][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773251][ C1] ret_from_fork+0x45/0x80 [ 614.773267][ C1] ? __pfx_kthread+0x10/0x10 [ 614.773285][ C1] ret_from_fork_asm+0x1a/0x30 [ 614.773321][ C1] [ 614.773328][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 614.773338][ C1] CPU: 1 UID: 0 PID: 5809 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 614.773358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.773369][ C1] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 614.773390][ C1] Code: 89 ee e8 de 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 7d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 614.773406][ C1] RSP: 0018:ffffc9000436f8b8 EFLAGS: 00000293 [ 614.773421][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af2e99 [ 614.773432][ C1] RDX: ffff888028138000 RSI: ffffffff81af2e73 RDI: 0000000000000005 [ 614.773444][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 614.773455][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 614.773466][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 614.773477][ C1] FS: 0000555582b2f500(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 614.773495][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.773508][ C1] CR2: 00007fbfd6ae56c0 CR3: 0000000061519000 CR4: 00000000003526f0 [ 614.773520][ C1] DR0: 0100000100000000 DR1: 0000000000000006 DR2: 0000000000000005 [ 614.773531][ C1] DR3: 0000000000000011 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 614.773542][ C1] Call Trace: [ 614.773548][ C1] [ 614.773566][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 614.773592][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 614.773614][ C1] flush_tlb_mm_range+0x322/0x1780 [ 614.773639][ C1] ? find_held_lock+0x2b/0x80 [ 614.773661][ C1] ? copy_process+0x793d/0x91b0 [ 614.773686][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 614.773712][ C1] ? up_write+0x1b2/0x520 [ 614.773733][ C1] copy_process+0x7957/0x91b0 [ 614.773774][ C1] ? __pfx_copy_process+0x10/0x10 [ 614.773806][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.773838][ C1] kernel_clone+0xfc/0x960 [ 614.773863][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 614.773894][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 614.773921][ C1] __do_sys_clone+0xce/0x120 [ 614.773944][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 614.773986][ C1] ? do_user_addr_fault+0x843/0x1370 [ 614.774013][ C1] do_syscall_64+0xcd/0x260 [ 614.774039][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.774056][ C1] RIP: 0033:0x7fbfd5d851d3 [ 614.774072][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 614.774088][ C1] RSP: 002b:00007fff95e23c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 614.774105][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfd5d851d3 [ 614.774117][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 614.774128][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 614.774138][ C1] R10: 0000555582b2f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 614.774150][ C1] R13: 00000000000927c0 R14: 000000000007776e R15: 00007fff95e23da0 [ 614.774174][ C1] [ 757.028651][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 241s! [syz-executor:5809] [ 757.028674][ C1] Modules linked in: [ 757.028683][ C1] irq event stamp: 8798950 [ 757.028690][ C1] hardirqs last enabled at (8798949): [] irqentry_exit+0x3b/0x90 [ 757.028722][ C1] hardirqs last disabled at (8798950): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 757.028746][ C1] softirqs last enabled at (8798938): [] handle_softirqs+0x5be/0x8e0 [ 757.028770][ C1] softirqs last disabled at (8798873): [] __irq_exit_rcu+0x109/0x170 [ 757.028796][ C1] CPU: 1 UID: 0 PID: 5809 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 757.028816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.028826][ C1] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 757.028847][ C1] Code: 89 ee e8 de 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 7d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 757.028864][ C1] RSP: 0018:ffffc9000436f8b8 EFLAGS: 00000293 [ 757.028877][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af2e99 [ 757.028888][ C1] RDX: ffff888028138000 RSI: ffffffff81af2e73 RDI: 0000000000000005 [ 757.028898][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 757.028908][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 757.028919][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 757.028930][ C1] FS: 0000555582b2f500(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 757.028947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.028958][ C1] CR2: 00007fbfd6ae56c0 CR3: 0000000061519000 CR4: 00000000003526f0 [ 757.028970][ C1] DR0: 0100000100000000 DR1: 0000000000000006 DR2: 0000000000000005 [ 757.028980][ C1] DR3: 0000000000000011 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 757.028991][ C1] Call Trace: [ 757.028996][ C1] [ 757.029014][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 757.029041][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 757.029062][ C1] flush_tlb_mm_range+0x322/0x1780 [ 757.029086][ C1] ? find_held_lock+0x2b/0x80 [ 757.029107][ C1] ? copy_process+0x793d/0x91b0 [ 757.029137][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 757.029163][ C1] ? up_write+0x1b2/0x520 [ 757.029183][ C1] copy_process+0x7957/0x91b0 [ 757.029223][ C1] ? __pfx_copy_process+0x10/0x10 [ 757.029255][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 757.029286][ C1] kernel_clone+0xfc/0x960 [ 757.029310][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 757.029341][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 757.029368][ C1] __do_sys_clone+0xce/0x120 [ 757.029390][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 757.029426][ C1] ? do_user_addr_fault+0x843/0x1370 [ 757.029451][ C1] do_syscall_64+0xcd/0x260 [ 757.029477][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.029494][ C1] RIP: 0033:0x7fbfd5d851d3 [ 757.029509][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 757.029525][ C1] RSP: 002b:00007fff95e23c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 757.029540][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfd5d851d3 [ 757.029551][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 757.029560][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 757.029570][ C1] R10: 0000555582b2f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 757.029581][ C1] R13: 00000000000927c0 R14: 000000000007776e R15: 00007fff95e23da0 [ 757.029604][ C1] [ 757.029611][ C1] Sending NMI from CPU 1 to CPUs 0: [ 757.029635][ C0] NMI backtrace for cpu 0 [ 757.029645][ C0] CPU: 0 UID: 0 PID: 1219 Comm: kworker/0:3 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 757.029662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.029672][ C0] Workqueue: usb_hub_wq hub_event [ 757.029691][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 757.029713][ C0] Code: 48 8b 05 cb 20 e9 11 48 8b 80 30 16 00 00 e9 87 d9 b4 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 97 20 e9 11 65 8b 05 a8 20 [ 757.029726][ C0] RSP: 0000:ffffc90000007c68 EFLAGS: 00000046 [ 757.029737][ C0] RAX: 0000000000000000 RBX: ffff8880581f3340 RCX: ffffffff81a86e17 [ 757.029746][ C0] RDX: 0000000000000001 RSI: 000000000000001f RDI: 0000000000000005 [ 757.029755][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 757.029764][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 757.029772][ C0] R13: 0000000000000000 R14: ffff8880b8427840 R15: 0000000000000000 [ 757.029781][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 757.029796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.029805][ C0] CR2: 000000110c2a6cdf CR3: 00000000330ac000 CR4: 00000000003526f0 [ 757.029814][ C0] DR0: 0100000100000000 DR1: 0000000000000006 DR2: 0000000000000005 [ 757.029823][ C0] DR3: 0000000000000011 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 757.029832][ C0] Call Trace: [ 757.029836][ C0] [ 757.029841][ C0] __remove_hrtimer+0xe7/0x290 [ 757.029857][ C0] __hrtimer_run_queues+0x4f9/0xad0 [ 757.029875][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 757.029894][ C0] ? read_tsc+0x9/0x20 [ 757.029915][ C0] hrtimer_interrupt+0x397/0x8e0 [ 757.029935][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 757.029952][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 757.029970][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 757.029984][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 757.030000][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 a0 89 8b 8b e8 68 6e f0 09 65 66 c7 05 d6 91 27 12 00 00 e8 19 3c 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 757.030014][ C0] RSP: 0000:ffffc90000007f28 EFLAGS: 00000202 [ 757.030024][ C0] RAX: 0000000000144dea RBX: 00000000ffffffff RCX: 0000000000000002 [ 757.030033][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2e0 [ 757.030042][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 757.030051][ C0] R10: ffffffff90852e17 R11: 0000000000000000 R12: 0000000000000100 [ 757.030060][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed10050db000 [ 757.030074][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 757.030090][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 757.030109][ C0] ? rcu_is_watching+0x12/0xc0 [ 757.030125][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 757.030144][ C0] __irq_exit_rcu+0x109/0x170 [ 757.030159][ C0] irq_exit_rcu+0x9/0x30 [ 757.030174][ C0] sysvec_call_function_single+0xa4/0xc0 [ 757.030192][ C0] [ 757.030196][ C0] [ 757.030201][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 757.030216][ C0] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 757.030232][ C0] Code: 00 e8 b2 12 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 80 49 20 00 48 85 db 0f 85 55 01 00 00 e8 02 4e 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 37 ce 85 [ 757.030244][ C0] RSP: 0000:ffffc9000451f428 EFLAGS: 00000287 [ 757.030255][ C0] RAX: ffffffff8f0cdb78 RBX: 0000000000000000 RCX: ffffc900199cc000 [ 757.030264][ C0] RDX: 0000000000100000 RSI: ffffffff819af7ee RDI: 0000000000000007 [ 757.030273][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 757.030281][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f0cdb78 [ 757.030290][ C0] R13: ffffffff8f0cdb20 R14: ffffc9000451f4b8 R15: dffffc0000000000 [ 757.030302][ C0] ? console_flush_all+0x99e/0xc60 [ 757.030319][ C0] ? console_flush_all+0x99e/0xc60 [ 757.030336][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 757.030354][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 757.030373][ C0] console_unlock+0xd8/0x210 [ 757.030387][ C0] ? __pfx_console_unlock+0x10/0x10 [ 757.030403][ C0] ? dev_printk_emit+0xfa/0x140 [ 757.030416][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 757.030431][ C0] vprintk_emit+0x418/0x6d0 [ 757.030447][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 757.030466][ C0] dev_printk_emit+0xfa/0x140 [ 757.030478][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 757.030507][ C0] __dev_printk+0xf5/0x270 [ 757.030521][ C0] _dev_info+0xe4/0x120 [ 757.030534][ C0] ? __pfx__dev_info+0x10/0x10 [ 757.030547][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 757.030564][ C0] ? usb_match_device+0xd5/0x570 [ 757.030583][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 757.030599][ C0] ? usb_cache_string+0xf2/0x150 [ 757.030614][ C0] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 757.030635][ C0] usb_new_device+0x94c/0x1a20 [ 757.030654][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 757.030668][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 757.030684][ C0] ? mark_held_locks+0x49/0x80 [ 757.030704][ C0] hub_event+0x2eb7/0x4fa0 [ 757.030731][ C0] ? __pfx_hub_event+0x10/0x10 [ 757.030746][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 757.030766][ C0] ? rcu_is_watching+0x12/0xc0 [ 757.030782][ C0] process_one_work+0x9cf/0x1b70 [ 757.030802][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 757.030820][ C0] ? __pfx_process_one_work+0x10/0x10 [ 757.030837][ C0] ? assign_work+0x1a0/0x250 [ 757.030851][ C0] worker_thread+0x6c8/0xf10 [ 757.030868][ C0] ? __kthread_parkme+0x19e/0x250 [ 757.030892][ C0] ? __pfx_worker_thread+0x10/0x10 [ 757.030907][ C0] kthread+0x3c2/0x780 [ 757.030920][ C0] ? __pfx_kthread+0x10/0x10 [ 757.030932][ C0] ? __pfx_kthread+0x10/0x10 [ 757.030944][ C0] ? __pfx_kthread+0x10/0x10 [ 757.030957][ C0] ? __pfx_kthread+0x10/0x10 [ 757.030969][ C0] ? rcu_is_watching+0x12/0xc0 [ 757.030984][ C0] ? __pfx_kthread+0x10/0x10 [ 757.030997][ C0] ret_from_fork+0x45/0x80 [ 757.031011][ C0] ? __pfx_kthread+0x10/0x10 [ 757.031024][ C0] ret_from_fork_asm+0x1a/0x30 [ 757.031048][ C0] [ 757.031631][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 757.031644][ C1] CPU: 1 UID: 0 PID: 5809 Comm: syz-executor Tainted: G L 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 757.031670][ C1] Tainted: [L]=SOFTLOCKUP [ 757.031677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.031687][ C1] Call Trace: [ 757.031694][ C1] [ 757.031702][ C1] dump_stack_lvl+0x3d/0x1f0 [ 757.031727][ C1] panic+0x71c/0x800 [ 757.031752][ C1] ? __pfx_panic+0x10/0x10 [ 757.031776][ C1] ? __pfx__printk+0x10/0x10 [ 757.031804][ C1] ? nmi_backtrace_stall_check+0x6e/0x540 [ 757.031825][ C1] ? irq_work_queue+0xce/0x100 [ 757.031846][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 757.031864][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 757.031885][ C1] watchdog_timer_fn+0x603/0x7d0 [ 757.031906][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 757.031923][ C1] __hrtimer_run_queues+0x5ea/0xad0 [ 757.031949][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 757.031967][ C1] ? read_tsc+0x9/0x20 [ 757.031997][ C1] hrtimer_interrupt+0x397/0x8e0 [ 757.032027][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 757.032050][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 757.032072][ C1] [ 757.032078][ C1] [ 757.032086][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 757.032104][ C1] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 757.032124][ C1] Code: 89 ee e8 de 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 7d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 757.032145][ C1] RSP: 0018:ffffc9000436f8b8 EFLAGS: 00000293 [ 757.032160][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af2e99 [ 757.032171][ C1] RDX: ffff888028138000 RSI: ffffffff81af2e73 RDI: 0000000000000005 [ 757.032183][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 757.032194][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 757.032205][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 757.032224][ C1] ? smp_call_function_many_cond+0x4c9/0x1290 [ 757.032243][ C1] ? smp_call_function_many_cond+0x4a3/0x1290 [ 757.032266][ C1] ? smp_call_function_many_cond+0x4a3/0x1290 [ 757.032295][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 757.032321][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 757.032342][ C1] flush_tlb_mm_range+0x322/0x1780 [ 757.032368][ C1] ? find_held_lock+0x2b/0x80 [ 757.032389][ C1] ? copy_process+0x793d/0x91b0 [ 757.032414][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 757.032439][ C1] ? up_write+0x1b2/0x520 [ 757.032460][ C1] copy_process+0x7957/0x91b0 [ 757.032500][ C1] ? __pfx_copy_process+0x10/0x10 [ 757.032532][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 757.032563][ C1] kernel_clone+0xfc/0x960 [ 757.032588][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 757.032618][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 757.032644][ C1] __do_sys_clone+0xce/0x120 [ 757.032667][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 757.032703][ C1] ? do_user_addr_fault+0x843/0x1370 [ 757.032728][ C1] do_syscall_64+0xcd/0x260 [ 757.032754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.032771][ C1] RIP: 0033:0x7fbfd5d851d3 [ 757.032784][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 757.032800][ C1] RSP: 002b:00007fff95e23c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 757.032816][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfd5d851d3 [ 757.032827][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 757.032837][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 757.032848][ C1] R10: 0000555582b2f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 757.032859][ C1] R13: 00000000000927c0 R14: 000000000007776e R15: 00007fff95e23da0 [ 757.032882][ C1] [ 758.113859][ C1] Shutting down cpus with NMI [ 758.114079][ C1] Kernel Offset: disabled