last executing test programs: 8.2784355s ago: executing program 4 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) getpid() r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x1) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) 6.87857805s ago: executing program 0 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000000000000100000001800018014000200776c616e3000000000000000000000000800060008070000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.875337828s ago: executing program 4 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 6.719932172s ago: executing program 0 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./dev/kmsg\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)={0x150, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x132, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @random="277c0b9ba697"}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x1, 0x5, 0x7, 0x3}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x80ccb59f6a528d3b}}, @void, [{0xdd, 0xeb, "74739fc79fda4603e2219d0d7d97f29691f35a505688e960367d76423ccf376ed476db3849b27bd738a7107273aea106f53a731d00459081bca3af545e48377fc687ac0161076820fa08557f4abeda0c5d5fe4e31df6da450704d06bbc5213a746c044ac06a216dc8b39c040e220414b15a8601586f9964a70a6a822fc5e72f16ff318963ae10af09b7b6dcee9b0763c9ad86994b1afe19b486d6367345cd807f05e2e3ec6521822d7b94c7e1bc96b1cd09652f92d2e09f18a42e13f9d4185ee805f1c8fd114321a6bd32749c328eae6e65a1abef33cc1671af108988b3bb30f7260ac279a34e382759e69"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 6.621516156s ago: executing program 1 (id=310): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xfffd, 0x5, 0x1, 0x46, 0x2}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@remote, 0x1, 0x713, 0x4e22, 0x5, 0x2, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffff9, 0x4}, {0x1000000000000d, 0xfffffffffffffffe, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'pcbc(aes-aesni)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8010}, 0x484c) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x10042, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f0000001240)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x195) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000bc0)='\x00', 0x1, 0x1000000000003}]) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000225bd7000fcdbdf3a1d010000050000050000005405badbac547b8f620000000000"], 0x1c}}, 0x0) 6.539338238s ago: executing program 0 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x111801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x9, 0x8, 0x0, 0x9, 0x20, 0xff}], 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x10002, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r4, &(0x7f0000000040)="a9", 0x1) 6.185692312s ago: executing program 0 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x1a9502, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2000c8c0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 5.535697921s ago: executing program 0 (id=313): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x1, 0x200c085, &(0x7f00000001c0)={0x11, 0x3, r7, 0x1, 0xfc, 0x6, @multicast}, 0x14) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 5.409772942s ago: executing program 2 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x111801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x10002, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r5, &(0x7f0000000040)="a9", 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 5.226851863s ago: executing program 1 (id=317): ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 5.01003099s ago: executing program 4 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x1000003, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x1, 0x1, 0x0}) 4.443117081s ago: executing program 3 (id=320): socket$inet(0x2, 0x2, 0x1) r0 = getpid() r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000380)=ANY=[], 0x4000) close(r1) syz_pidfd_open(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200000426bd7000fcdbdf25022020080000030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8824}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17e) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='psmouse\x00', 0x8) 4.440604781s ago: executing program 2 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) 4.398519553s ago: executing program 4 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./dev/kmsg\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)={0x150, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x132, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @random="277c0b9ba697"}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x1, 0x5, 0x7, 0x3}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x80ccb59f6a528d3b}}, @void, [{0xdd, 0xeb, "74739fc79fda4603e2219d0d7d97f29691f35a505688e960367d76423ccf376ed476db3849b27bd738a7107273aea106f53a731d00459081bca3af545e48377fc687ac0161076820fa08557f4abeda0c5d5fe4e31df6da450704d06bbc5213a746c044ac06a216dc8b39c040e220414b15a8601586f9964a70a6a822fc5e72f16ff318963ae10af09b7b6dcee9b0763c9ad86994b1afe19b486d6367345cd807f05e2e3ec6521822d7b94c7e1bc96b1cd09652f92d2e09f18a42e13f9d4185ee805f1c8fd114321a6bd32749c328eae6e65a1abef33cc1671af108988b3bb30f7260ac279a34e382759e69"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 4.349607919s ago: executing program 2 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x1a9502, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2000c8c0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 4.296366936s ago: executing program 1 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600f5ff0700000600b500c902000006004e0b495b1201a500"/40], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 4.243199445s ago: executing program 3 (id=325): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = getpid() setfsgid(0xee00) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000640)={0x20, r9, 0xfffffffffffffe88, 0x0, 0xfffffffffffffffe}) 3.436522858s ago: executing program 1 (id=326): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3e, "", [{{0x9, 0x4, 0x0, 0x9, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) setuid(0xee01) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000700)={0x8, &(0x7f0000000480)=[{0x46, '\x00', @st={0x4, [{0x1, @uvalue=0xffff}, {0x3, @uvalue=0x6}, {0x2, @uvalue=0x5}, {0x3, @svalue=0x2}]}, 0x800}, {0x45, '\x00', @buffer={"e335248d5b1bb6dca065b8dd6984c16af6017f9f9a7668286a9bf3d5e473ab03", 0x20}, 0x7fffffff}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002325000000251383efa930f015c3f4478b00009aa54607eb6dd5151211e600"/43], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x20c000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) 3.283541707s ago: executing program 2 (id=327): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 2.620900623s ago: executing program 3 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1, 0x921, 0xfff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0xc100092e) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000540)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2b, 0x5, 0x2, 0x7, [{0xe, 0x1, "227034c9693f"}]}}}}}}}, 0x52) keyctl$reject(0x13, 0x0, 0x349, 0x202, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000300)="ea8c82f9e77f8604d4a97969c432697451", 0x11}], 0x1, 0x3815, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x80, 0x5f, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}}, 0x840) 2.620551444s ago: executing program 1 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 2.490532878s ago: executing program 2 (id=330): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x22, 0x6, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0xbe, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x5, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0xe0ffffff00000000}, 0x7}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMP(r3, 0x80108907, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000180)={r5, r6+60000000}, 0x0) 1.674284286s ago: executing program 0 (id=331): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffea8, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @fwd={0xc}]}}, 0x0, 0xfffffffffffffd0e, 0x0, 0x8}, 0x28) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket$kcm(0x10, 0x2, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) 1.626761252s ago: executing program 4 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x111801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x10002, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r5, &(0x7f0000000040)="a9", 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 1.626495235s ago: executing program 3 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) 1.537499351s ago: executing program 3 (id=334): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) syz_usbip_server_init(0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x2000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x48500000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) 1.51297773s ago: executing program 4 (id=335): socket$inet(0x2, 0x2, 0x1) r0 = getpid() r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x4000) close(r1) syz_pidfd_open(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200000426bd7000fcdbdf25022020080000030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8824}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17e) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='psmouse\x00', 0x8) 786.725338ms ago: executing program 2 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) r3 = getpid() r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x1) syz_pidfd_open(r3, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) 738.187787ms ago: executing program 1 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x1a9502, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2000c8c0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 0s ago: executing program 3 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) getpid() r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x1) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): e software MII access [ 71.407609][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.420119][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.433540][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.448396][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.459894][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.473252][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.484405][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.496270][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.508191][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.521094][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.532350][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.543299][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 71.543336][ T31] audit: type=1400 audit(1788462401.340:214): avc: denied { create } for pid=5860 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.546453][ T31] audit: type=1400 audit(1788462401.350:215): avc: denied { bind } for pid=5860 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.588516][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.602788][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.615306][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.627332][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.639902][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.651854][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.665307][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.676454][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.690511][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.702703][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.714549][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.727010][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.758772][ T31] audit: type=1400 audit(1788462401.560:216): avc: denied { write } for pid=5869 comm="syz.4.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.792131][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.807567][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.822576][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 71.838840][ T5859] ip6erspan0: entered allmulticast mode [ 71.845145][ T5859] Zero length message leads to an empty skb [ 71.845356][ T31] audit: type=1400 audit(1788462401.650:217): avc: denied { relabelfrom } for pid=5860 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.845555][ T31] audit: type=1400 audit(1788462401.650:218): avc: denied { relabelto } for pid=5860 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.852585][ T31] audit: type=1400 audit(1788462401.660:219): avc: denied { create } for pid=5860 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.859436][ T31] audit: type=1400 audit(1788462401.660:220): avc: denied { create } for pid=5869 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.870906][ T31] audit: type=1400 audit(1788462401.660:221): avc: denied { write } for pid=5869 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.870944][ T31] audit: type=1400 audit(1788462401.660:222): avc: denied { nlmsg_write } for pid=5869 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.893434][ T31] audit: type=1400 audit(1788462401.690:223): avc: denied { read } for pid=5869 comm="syz.4.19" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.918273][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 71.929254][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 71.940185][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.022032][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.054508][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.066992][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.081254][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.094146][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.111451][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.122992][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.137705][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.149276][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.165397][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.178522][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.192073][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.203871][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.215686][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.229174][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.282265][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.294269][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.306579][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.318719][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.332208][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.345269][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.357923][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.370324][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.383732][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.396231][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.411995][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.433669][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.447610][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.465265][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.470403][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.501794][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.503447][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.533205][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.566743][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.581378][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.594912][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.608319][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.623416][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.643722][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.658315][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.662299][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.666610][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.738013][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.745747][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.778932][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.801993][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.821133][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.835519][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.866884][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.878707][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.885856][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.890025][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.916329][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 72.973075][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 72.999811][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.006445][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.050558][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.054941][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.065552][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.104010][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.106798][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.181658][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.203638][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.219556][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.224362][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.226175][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.229144][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.237763][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.242631][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.245366][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.249874][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.253814][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.263137][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.266846][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.269581][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.275336][ T5718] usb 1-1: USB disconnect, device number 2 [ 73.282823][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.291426][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.294021][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.296191][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.299617][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.306633][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.310399][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.313658][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.318664][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.327985][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.332585][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.337145][ T5718] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 73.340726][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.342859][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.348939][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.351948][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.353855][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.360882][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.367137][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.375229][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.377502][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.383493][ T5718] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 73.386010][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.389445][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.393837][ T5718] ti_usb_3410_5052 1-1:2.0: device disconnected [ 73.395539][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.404371][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.405661][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.410861][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.416182][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.421216][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.427029][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.430360][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.442398][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.448749][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.454266][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.464178][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.466846][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.471628][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.481198][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.486391][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.489857][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.492148][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.495463][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.503386][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.506605][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.513379][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.517946][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.610380][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.626622][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.629028][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.635768][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.642510][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.644560][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.650256][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.653403][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.658887][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.667176][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.671305][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.673289][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.676068][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.681252][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.683337][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.688835][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.690382][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 73.878548][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 73.880792][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.165942][ T5888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.221992][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.222212][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 74.222791][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.224169][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.224794][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.226089][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.226712][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.234244][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.235242][ T25] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 74.235263][ T25] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 74.235409][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.236712][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.237401][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.238730][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.239355][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.240586][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 74.240604][ T25] usb 5-1: Product: syz [ 74.240617][ T25] usb 5-1: Manufacturer: syz [ 74.240742][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.241314][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.242595][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.243872][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.248751][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.250113][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.252545][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.253150][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.253431][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.254007][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.254293][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 74.254941][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 74.255222][ T5698] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 74.255535][ T5698] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 74.260777][ T5698] usb 2-1: USB disconnect, device number 2 [ 74.669264][ T5885] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 74.927264][ T5891] syzkaller0: entered promiscuous mode [ 74.927290][ T5891] syzkaller0: entered allmulticast mode [ 74.963435][ T5891] tipc: Started in network mode [ 74.963480][ T5891] tipc: Node identity 5aa03e5f92b4, cluster identity 4711 [ 74.964011][ T5891] tipc: Enabled bearer , priority 0 [ 74.987726][ T5891] FAULT_INJECTION: forcing a failure. [ 74.987726][ T5891] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.987769][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 74.987790][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 74.987801][ T5891] Call Trace: [ 74.987808][ T5891] [ 74.987815][ T5891] dump_stack_lvl+0x100/0x190 [ 74.987848][ T5891] should_fail_ex.cold+0x5/0xa [ 74.987874][ T5891] get_futex_key+0x1d0/0x14f0 [ 74.987896][ T5891] ? __pfx_get_futex_key+0x10/0x10 [ 74.987912][ T5891] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 74.987938][ T5891] futex_wait_setup+0x91/0x540 [ 74.987970][ T5891] __futex_wait+0x19f/0x300 [ 74.987995][ T5891] ? __pfx___futex_wait+0x10/0x10 [ 74.988019][ T5891] ? __pfx_try_to_wake_up+0x10/0x10 [ 74.988036][ T5891] ? futex_hash+0x311/0x400 [ 74.988056][ T5891] ? __pfx_futex_wake_mark+0x10/0x10 [ 74.988091][ T5891] ? find_held_lock+0x2b/0x80 [ 74.988111][ T5891] ? futex_wake+0x4ea/0x5e0 [ 74.988138][ T5891] futex_wait+0xe6/0x370 [ 74.988160][ T5891] ? __pfx_futex_wait+0x10/0x10 [ 74.988192][ T5891] ? lock_acquire+0x1d1/0x380 [ 74.988211][ T5891] do_futex+0x265/0x440 [ 74.988232][ T5891] ? __pfx_do_futex+0x10/0x10 [ 74.988255][ T5891] ? __fget_files+0x21f/0x3d0 [ 74.988279][ T5891] __x64_sys_futex+0x34f/0x4d0 [ 74.988305][ T5891] ? __pfx___x64_sys_futex+0x10/0x10 [ 74.988340][ T5891] do_syscall_64+0x123/0x790 [ 74.988368][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.988388][ T5891] RIP: 0033:0x7fd8bd39e159 [ 74.988404][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.988424][ T5891] RSP: 002b:00007fd8be2630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.988443][ T5891] RAX: ffffffffffffffda RBX: 00007fd8bd625fa8 RCX: 00007fd8bd39e159 [ 74.988455][ T5891] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8bd625fa8 [ 74.988466][ T5891] RBP: 00007fd8bd625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.988478][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.988489][ T5891] R13: 00007fd8bd626038 R14: 00007fffbfdec200 R15: 00007fffbfdec2e8 [ 74.988514][ T5891] [ 75.038290][ T5889] tipc: Resetting bearer [ 75.092703][ T5807] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.128185][ T5889] tipc: Disabling bearer [ 76.103387][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 76.104545][ T5807] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.132499][ T5807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.141533][ T5807] usb 1-1: config 0 has no interface number 0 [ 76.144805][ T5905] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.144967][ T5905] CIFS: Attempting to mount //127.0.0.1/share [ 76.149628][ T5698] tipc: Node number set to 3356769887 [ 76.175196][ T5807] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.175238][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.197904][ T5907] CIFS: VFS: Invalid response size 0 for command 0 [ 76.203230][ T5898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25'. [ 76.203689][ T5905] CIFS: VFS: cifs_mount failed w/return code = -5 [ 76.238804][ T5807] usb 1-1: config 0 descriptor?? [ 76.246234][ T1558] cfg80211: failed to load regulatory.db [ 76.264920][ T5807] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.415489][ T5910] FAULT_INJECTION: forcing a failure. [ 76.415489][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 76.415543][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 76.415561][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 76.415570][ T5910] Call Trace: [ 76.415576][ T5910] [ 76.415582][ T5910] dump_stack_lvl+0x100/0x190 [ 76.415607][ T5910] should_fail_ex.cold+0x5/0xa [ 76.415630][ T5910] should_failslab+0xc2/0x120 [ 76.415649][ T5910] __kmalloc_noprof+0xfc/0x840 [ 76.415667][ T5910] ? cgroup_mkdir+0x270/0x1330 [ 76.415688][ T5910] cgroup_mkdir+0x270/0x1330 [ 76.415712][ T5910] ? __pfx_cgroup_mkdir+0x10/0x10 [ 76.415729][ T5910] kernfs_iop_mkdir+0x111/0x190 [ 76.415751][ T5910] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 76.415769][ T5910] vfs_mkdir+0x364/0x850 [ 76.415794][ T5910] filename_mkdirat+0x48b/0x5e0 [ 76.415816][ T5910] ? __pfx_filename_mkdirat+0x10/0x10 [ 76.415835][ T5910] ? strncpy_from_user+0x19d/0x2d0 [ 76.415863][ T5910] ? do_getname+0x191/0x390 [ 76.415886][ T5910] __x64_sys_mkdirat+0x89/0xc0 [ 76.415906][ T5910] do_syscall_64+0x123/0x790 [ 76.415926][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.415943][ T5910] RIP: 0033:0x7f4f2ab9e159 [ 76.415956][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.415970][ T5910] RSP: 002b:00007f4f2bb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 76.415986][ T5910] RAX: ffffffffffffffda RBX: 00007f4f2ae25fa0 RCX: 00007f4f2ab9e159 [ 76.415996][ T5910] RDX: 00000000000001ff RSI: 0000200000000300 RDI: 0000000000000003 [ 76.416005][ T5910] RBP: 00007f4f2bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 76.416014][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.416024][ T5910] R13: 00007f4f2ae26038 R14: 00007f4f2ae25fa0 R15: 00007ffd6f2f6548 [ 76.416046][ T5910] [ 76.532932][ T5919] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure [ 76.854714][ T5922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.854744][ T5922] IPv6: NLM_F_CREATE should be set when creating new route [ 77.025881][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 77.025925][ T31] audit: type=1400 audit(1788462406.830:251): avc: denied { write } for pid=5926 comm="syz.1.32" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.062129][ T31] audit: type=1400 audit(1788462406.870:252): avc: denied { mount } for pid=5926 comm="syz.1.32" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 77.089199][ T31] audit: type=1400 audit(1788462406.890:253): avc: denied { search } for pid=5926 comm="syz.1.32" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.116034][ T31] audit: type=1400 audit(1788462406.920:255): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 77.118218][ T31] audit: type=1400 audit(1788462406.890:254): avc: denied { search } for pid=5926 comm="syz.1.32" name="events" dev="tracefs" ino=3770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.118259][ T31] audit: type=1400 audit(1788462406.920:256): avc: denied { search } for pid=5926 comm="syz.1.32" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.118291][ T31] audit: type=1400 audit(1788462406.920:257): avc: denied { search } for pid=5926 comm="syz.1.32" name="events" dev="tracefs" ino=3770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.135353][ T31] audit: type=1400 audit(1788462406.940:258): avc: denied { search } for pid=5926 comm="syz.1.32" name="mac80211" dev="tracefs" ino=9341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.147416][ T31] audit: type=1400 audit(1788462406.950:259): avc: denied { write } for pid=5926 comm="syz.1.32" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 77.148871][ T31] audit: type=1400 audit(1788462406.950:260): avc: denied { open } for pid=5926 comm="syz.1.32" path="/6/trace/events/mac80211/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 77.232769][ T984] usb 1-1: USB disconnect, device number 3 [ 77.336456][ T5807] usb 5-1: USB disconnect, device number 3 [ 77.977358][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 77.984616][ T984] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.483003][ T984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.483058][ T984] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 78.505779][ T984] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 78.505826][ T984] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.505881][ T984] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 78.505906][ T984] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x89 has invalid maxpacket 33002, setting to 1024 [ 78.604823][ T5604] Bluetooth: hci3: status 0x01 [ 78.745040][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.745083][ T984] usb 3-1: Product: syz [ 78.745097][ T984] usb 3-1: Manufacturer: syz [ 78.745109][ T984] usb 3-1: SerialNumber: syz [ 79.123699][ T5945] Cannot find add_set index 0 as target [ 79.488531][ T5956] nvme_fabrics: missing parameter 'transport=%s' [ 79.507707][ T5956] nvme_fabrics: missing parameter 'nqn=%s' [ 79.852030][ T5962] FAULT_INJECTION: forcing a failure. [ 79.852030][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.866787][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) [ 79.866812][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 79.866822][ T5962] Call Trace: [ 79.866829][ T5962] [ 79.866835][ T5962] dump_stack_lvl+0x100/0x190 [ 79.866866][ T5962] should_fail_ex.cold+0x5/0xa [ 79.866889][ T5962] _copy_to_iter+0x1f3/0x1720 [ 79.866921][ T5962] ? __pfx__copy_to_iter+0x10/0x10 [ 79.866945][ T5962] ? unwind_get_return_address+0x59/0xa0 [ 79.866971][ T5962] ? folio_mark_accessed+0xf3/0x1040 [ 79.866999][ T5962] ? __pfx_folio_mark_accessed+0x10/0x10 [ 79.867029][ T5962] copy_page_to_iter+0x285/0x370 [ 79.867057][ T5962] filemap_read+0x7a9/0x10a0 [ 79.867093][ T5962] ? __pfx_filemap_read+0x10/0x10 [ 79.867132][ T5962] ? __pfx_down_read+0x10/0x10 [ 79.867156][ T5962] ? get_pid_task+0x106/0x250 [ 79.867177][ T5962] ? avc_policy_seqno+0x9/0x20 [ 79.867197][ T5962] ? selinux_file_permission+0x8f/0x6d0 [ 79.867229][ T5962] blkdev_read_iter+0x2c4/0x4f0 [ 79.867257][ T5962] ? __pfx_blkdev_read_iter+0x10/0x10 [ 79.867283][ T5962] vfs_read+0x82e/0xb40 [ 79.867311][ T5962] ? __pfx_vfs_read+0x10/0x10 [ 79.867334][ T5962] ? find_held_lock+0x2b/0x80 [ 79.867371][ T5962] ksys_read+0x12a/0x250 [ 79.867386][ T5962] ? __pfx_ksys_read+0x10/0x10 [ 79.867409][ T5962] do_syscall_64+0x123/0x790 [ 79.867431][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.867449][ T5962] RIP: 0033:0x7f6f5619e159 [ 79.867465][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.867480][ T5962] RSP: 002b:00007f6f543d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.867498][ T5962] RAX: ffffffffffffffda RBX: 00007f6f56426090 RCX: 00007f6f5619e159 [ 79.867510][ T5962] RDX: 0000000000011b21 RSI: 0000200000000340 RDI: 0000000000000005 [ 79.867521][ T5962] RBP: 00007f6f543d5090 R08: 0000000000000000 R09: 0000000000000000 [ 79.867531][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.867547][ T5962] R13: 00007f6f56426128 R14: 00007f6f56426090 R15: 00007ffe9bd22688 [ 79.867571][ T5962] [ 79.961481][ T5967] FAULT_INJECTION: forcing a failure. [ 79.961481][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 79.961507][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 79.961524][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 79.961533][ T5967] Call Trace: [ 79.961538][ T5967] [ 79.961544][ T5967] dump_stack_lvl+0x100/0x190 [ 79.961571][ T5967] should_fail_ex.cold+0x5/0xa [ 79.961595][ T5967] should_failslab+0xc2/0x120 [ 79.961613][ T5967] __kmalloc_noprof+0xfc/0x840 [ 79.961630][ T5967] ? fib_nl2rule.constprop.0+0x315/0x1c50 [ 79.961653][ T5967] fib_nl2rule.constprop.0+0x315/0x1c50 [ 79.961675][ T5967] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 79.961700][ T5967] ? __nla_parse+0x40/0x60 [ 79.961722][ T5967] fib_newrule+0x246/0x1e50 [ 79.961743][ T5967] ? find_held_lock+0x2b/0x80 [ 79.961765][ T5967] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.961784][ T5967] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 79.961804][ T5967] ? __pfx_fib_newrule+0x10/0x10 [ 79.961822][ T5967] ? avc_has_perm_noaudit+0x130/0x3b0 [ 79.961856][ T5967] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 79.961873][ T5967] ? find_held_lock+0x2b/0x80 [ 79.961893][ T5967] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 79.961908][ T5967] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 79.961926][ T5967] ? __pfx_fib_nl_newrule+0x10/0x10 [ 79.961945][ T5967] rtnetlink_rcv_msg+0x95e/0xe90 [ 79.961964][ T5967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.961986][ T5967] ? ref_tracker_free+0x37e/0x6c0 [ 79.962006][ T5967] netlink_rcv_skb+0x159/0x420 [ 79.962029][ T5967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.962051][ T5967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.962081][ T5967] ? netlink_deliver_tap+0x1ae/0xcc0 [ 79.962106][ T5967] netlink_unicast+0x585/0x850 [ 79.962131][ T5967] ? __pfx_netlink_unicast+0x10/0x10 [ 79.962159][ T5967] netlink_sendmsg+0x8b0/0xda0 [ 79.962185][ T5967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.962209][ T5967] ? selinux_socket_sendmsg+0x198/0x2f0 [ 79.962235][ T5967] ____sys_sendmsg+0xa4d/0xbe0 [ 79.962253][ T5967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.962277][ T5967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.962301][ T5967] ? lock_acquire+0x1d1/0x380 [ 79.962316][ T5967] ? get_pid_task+0x2a/0x250 [ 79.962338][ T5967] ___sys_sendmsg+0x190/0x1e0 [ 79.962359][ T5967] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.962378][ T5967] ? get_pid_task+0x106/0x250 [ 79.962406][ T5967] ? find_held_lock+0x2b/0x80 [ 79.962439][ T5967] __sys_sendmsg+0x160/0x210 [ 79.962456][ T5967] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.962481][ T5967] do_syscall_64+0x123/0x790 [ 79.962502][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.962518][ T5967] RIP: 0033:0x7f681e59e159 [ 79.962531][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.962545][ T5967] RSP: 002b:00007f681f53d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.962560][ T5967] RAX: ffffffffffffffda RBX: 00007f681e825fa0 RCX: 00007f681e59e159 [ 79.962571][ T5967] RDX: 0000000004005850 RSI: 0000200000000140 RDI: 0000000000000003 [ 79.962580][ T5967] RBP: 00007f681f53d090 R08: 0000000000000000 R09: 0000000000000000 [ 79.962589][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.962598][ T5967] R13: 00007f681e826038 R14: 00007f681e825fa0 R15: 00007ffe4f5718f8 [ 79.962619][ T5967] [ 80.224512][ T5969] netlink: zone id is out of range [ 80.224526][ T5969] netlink: zone id is out of range [ 80.224534][ T5969] netlink: zone id is out of range [ 80.224540][ T5969] netlink: zone id is out of range [ 80.224545][ T5969] netlink: zone id is out of range [ 82.559940][ T984] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.589512][ T984] usb 3-1: USB disconnect, device number 3 [ 82.869119][ T5985] jffs2: notice: (5985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.011891][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 83.055106][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.166844][ T5991] sctp_transport_update_pmtu: 163 callbacks suppressed [ 83.166876][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.167126][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.167331][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.167550][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.170090][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.171443][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.172483][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.182923][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.184272][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.187616][ T5991] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.408421][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 83.408465][ T31] audit: type=1400 audit(1788462413.150:283): avc: denied { write } for pid=5982 comm="syz.1.47" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.408627][ T31] audit: type=1400 audit(1788462413.190:284): avc: denied { add_name } for pid=5982 comm="syz.1.47" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.415455][ T31] audit: type=1400 audit(1788462413.210:285): avc: denied { create } for pid=5982 comm="syz.1.47" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.701767][ T31] audit: type=1400 audit(1788462413.500:286): avc: denied { write } for pid=5982 comm="syz.1.47" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.701821][ T31] audit: type=1400 audit(1788462413.510:287): avc: denied { create } for pid=5982 comm="syz.1.47" name="dev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.807938][ T31] audit: type=1400 audit(1788462413.610:288): avc: denied { create } for pid=5983 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.827871][ T31] audit: type=1400 audit(1788462413.610:289): avc: denied { write } for pid=5983 comm="syz.2.48" path="socket:[9121]" dev="sockfs" ino=9121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.004077][ T31] audit: type=1400 audit(1788462413.810:290): avc: denied { create } for pid=5995 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.026629][ T31] audit: type=1400 audit(1788462413.830:291): avc: denied { write } for pid=5995 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.079711][ T31] audit: type=1400 audit(1788462413.880:292): avc: denied { read } for pid=5995 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.234809][ T6003] fuse: Unknown parameter 'gr00000000000000000000' [ 84.277969][ T6006] tipc: Enabling of bearer rejected, failed to enable media [ 84.343229][ T5999] evm: overlay not supported [ 84.372874][ T6003] macsec1: entered promiscuous mode [ 84.378606][ T6003] dummy0: entered promiscuous mode [ 84.384838][ T6003] macsec1: entered allmulticast mode [ 84.387191][ T6003] dummy0: entered allmulticast mode [ 84.398034][ T6003] dummy0: left allmulticast mode [ 84.409217][ T5807] dummy0: left promiscuous mode [ 84.530119][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.222580][ T1558] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.250546][ T25] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 85.260733][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.271956][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 85.272005][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.304485][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.304522][ T25] usb 1-1: Product: syz [ 85.304546][ T25] usb 1-1: Manufacturer: syz [ 85.304563][ T25] usb 1-1: SerialNumber: syz [ 85.328583][ T6006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.328699][ T6006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.344684][ T25] oti6858 1-1:1.0: oti6858 converter detected [ 85.372882][ T25] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 85.393359][ T1558] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.396098][ T1558] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.396133][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.396153][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.396170][ T1558] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.399429][ T1558] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.399451][ T1558] usb 3-1: Manufacturer: syz [ 85.412934][ T1558] usb 3-1: config 0 descriptor?? [ 85.555644][ T6030] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 85.555671][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.557859][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 86.379987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.505264][ T6032] vhci_hcd: connection closed [ 86.546831][ T5980] vhci_hcd vhci_hcd.4: stop threads [ 86.575080][ T5980] vhci_hcd vhci_hcd.4: release socket [ 86.583269][ T5980] vhci_hcd vhci_hcd.4: disconnect device [ 86.634868][ T10] usb 1-1: USB disconnect, device number 4 [ 86.643050][ T5807] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 86.668960][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 86.669505][ T6037] 9p: Bad value for 'rfdno' [ 86.688048][ T10] oti6858 1-1:1.0: device disconnected [ 86.768219][ T1558] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 86.777179][ T1558] appleir 0003:05AC:8243.0001: parse failed [ 86.786295][ T1558] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22 [ 86.966507][ T5698] usb 3-1: USB disconnect, device number 4 [ 87.306617][ T1377] IPVS: starting estimator thread 0... [ 87.461719][ T6047] IPVS: using max 40 ests per chain, 96000 per kthread [ 87.649160][ T6051] fuse: Unknown parameter 'gr00000000000000000000' [ 87.710350][ T6051] macsec1: entered promiscuous mode [ 87.710385][ T6051] dummy0: entered promiscuous mode [ 87.710527][ T6051] macsec1: entered allmulticast mode [ 87.710539][ T6051] dummy0: entered allmulticast mode [ 87.728056][ T6051] dummy0: left allmulticast mode [ 87.819232][ T5698] dummy0: left promiscuous mode [ 88.813970][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 88.814013][ T31] audit: type=1400 audit(1788462418.040:325): avc: denied { ioctl } for pid=6060 comm="syz.3.68" path="socket:[9623]" dev="sockfs" ino=9623 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.977660][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 88.986906][ T31] audit: type=1400 audit(1788462418.780:326): avc: denied { bind } for pid=6071 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.019480][ T31] audit: type=1400 audit(1788462418.820:327): avc: denied { map } for pid=6071 comm="syz.3.71" path="socket:[10308]" dev="sockfs" ino=10308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.019543][ T31] audit: type=1400 audit(1788462418.820:328): avc: denied { read } for pid=6071 comm="syz.3.71" path="socket:[10308]" dev="sockfs" ino=10308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.132547][ T31] audit: type=1400 audit(1788462418.940:329): avc: denied { name_bind } for pid=6074 comm="syz.4.63" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.183484][ T31] audit: type=1400 audit(1788462418.990:330): avc: denied { create } for pid=6076 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.282244][ T6080] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 89.282272][ T6080] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.282481][ T6080] vhci_hcd vhci_hcd.0: Device attached [ 89.904254][ T6081] vhci_hcd: connection closed [ 89.905037][ T1415] vhci_hcd vhci_hcd.3: stop threads [ 89.918062][ T1415] vhci_hcd vhci_hcd.3: release socket [ 89.926517][ T1415] vhci_hcd vhci_hcd.3: disconnect device [ 89.961321][ T5807] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 90.063305][ T6089] FAULT_INJECTION: forcing a failure. [ 90.063305][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 90.064679][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.4.76 Not tainted syzkaller #0 PREEMPT(full) [ 90.064702][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 90.064712][ T6089] Call Trace: [ 90.064718][ T6089] [ 90.064724][ T6089] dump_stack_lvl+0x100/0x190 [ 90.064753][ T6089] should_fail_ex.cold+0x5/0xa [ 90.064777][ T6089] should_failslab+0xc2/0x120 [ 90.064800][ T6089] kmem_cache_alloc_noprof+0x92/0x6a0 [ 90.064832][ T6089] ? create_new_namespaces+0x30/0xac0 [ 90.064856][ T6089] create_new_namespaces+0x30/0xac0 [ 90.064876][ T6089] ? bpf_lsm_capable+0x9/0x10 [ 90.064899][ T6089] ? security_capable+0x80/0x260 [ 90.064930][ T6089] unshare_nsproxy_namespaces+0xf2/0x220 [ 90.064958][ T6089] ksys_unshare+0x4a2/0xa70 [ 90.064978][ T6089] ? __pfx_ksys_unshare+0x10/0x10 [ 90.065004][ T6089] __x64_sys_unshare+0x31/0x40 [ 90.065030][ T6089] do_syscall_64+0x123/0x790 [ 90.065051][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.065078][ T6089] RIP: 0033:0x7f380b79e159 [ 90.065093][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.065109][ T6089] RSP: 002b:00007f380c64b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 90.065127][ T6089] RAX: ffffffffffffffda RBX: 00007f380ba25fa0 RCX: 00007f380b79e159 [ 90.065139][ T6089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 90.065150][ T6089] RBP: 00007f380b835024 R08: 0000000000000000 R09: 0000000000000000 [ 90.065159][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.065168][ T6089] R13: 00007f380ba26038 R14: 00007f380ba25fa0 R15: 00007ffd2cf1ff98 [ 90.065190][ T6089] [ 90.079443][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 90.270405][ T31] audit: type=1400 audit(1788462420.080:331): avc: denied { read } for pid=6092 comm="syz.4.77" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.270468][ T31] audit: type=1400 audit(1788462420.080:332): avc: denied { open } for pid=6092 comm="syz.4.77" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.317925][ T31] audit: type=1400 audit(1788462420.120:333): avc: denied { ioctl } for pid=6092 comm="syz.4.77" path="/dev/input/mice" dev="devtmpfs" ino=915 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.373733][ T31] audit: type=1400 audit(1788462420.180:334): avc: denied { mmap_zero } for pid=6096 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 90.458942][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 90.549704][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.81'. [ 90.549897][ T6100] fuse: Unknown parameter 'gr00000000000000000000' [ 90.592164][ T6100] macsec1: entered promiscuous mode [ 90.592206][ T6100] dummy0: entered promiscuous mode [ 90.592391][ T6100] macsec1: entered allmulticast mode [ 90.592403][ T6100] dummy0: entered allmulticast mode [ 90.614299][ T6100] dummy0: left allmulticast mode [ 90.704229][ T1558] dummy0: left promiscuous mode [ 90.769058][ T6106] fuse: Unknown parameter 'fd0x0000000000000006' [ 90.791048][ T6106] macsec1: entered promiscuous mode [ 90.796434][ T6106] dummy0: entered promiscuous mode [ 90.804002][ T6106] macsec1: entered allmulticast mode [ 90.809577][ T6106] dummy0: entered allmulticast mode [ 90.818754][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.830224][ T6106] dummy0: left allmulticast mode [ 90.891578][ T5698] dummy0: left promiscuous mode [ 91.124425][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 91.210482][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.223263][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.223423][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.223447][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 91.223466][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.223497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.234550][ T10] usb 5-1: config 0 descriptor?? [ 91.390043][ T10] rc_core: IR keymap rc-hauppauge not found [ 91.390073][ T10] Registered IR keymap rc-empty [ 91.397972][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.410774][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.434888][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 91.444660][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 91.488968][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.504592][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.523794][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.540651][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.560616][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.581859][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.585519][ T6125] 9p: Bad value for 'rfdno' [ 91.600940][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.630281][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.651831][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.670559][ T10] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 91.699260][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 91.699301][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.716139][ T10] usb 5-1: USB disconnect, device number 4 [ 92.487750][ T6136] loop0: detected capacity change from 0 to 32768 [ 92.869231][ T6148] fuse: Unknown parameter 'gr00000000000000000000' [ 92.926574][ T6148] macsec1: entered promiscuous mode [ 92.926611][ T6148] dummy0: entered promiscuous mode [ 92.926812][ T6148] macsec1: entered allmulticast mode [ 92.926824][ T6148] dummy0: entered allmulticast mode [ 92.932270][ T6148] dummy0: left allmulticast mode [ 92.993167][ T10] dummy0: left promiscuous mode [ 93.830150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.866255][ T6150] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 93.866282][ T6150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.866351][ T6150] vhci_hcd vhci_hcd.0: Device attached [ 93.866953][ T6152] vhci_hcd: connection closed [ 93.884171][ T13] vhci_hcd vhci_hcd.2: stop threads [ 93.889685][ T13] vhci_hcd vhci_hcd.2: release socket [ 93.889729][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 94.880539][ T6167] ======================================================= [ 94.880539][ T6167] WARNING: The mand mount option has been deprecated and [ 94.880539][ T6167] and is ignored by this kernel. Remove the mand [ 94.880539][ T6167] option from the mount to silence this warning. [ 94.880539][ T6167] ======================================================= [ 95.323588][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 95.323619][ T31] audit: type=1400 audit(1788462424.680:349): avc: denied { write } for pid=6161 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.323656][ T31] audit: type=1400 audit(1788462424.690:350): avc: denied { remount } for pid=6161 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.440653][ T31] audit: type=1400 audit(1788462425.230:351): avc: denied { mount } for pid=6164 comm="syz.4.96" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.513119][ T31] audit: type=1400 audit(1788462425.320:352): avc: denied { ioctl } for pid=6169 comm="syz.3.89" path="socket:[10608]" dev="sockfs" ino=10608 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.555744][ T31] audit: type=1400 audit(1788462425.360:353): avc: denied { ioctl } for pid=6164 comm="syz.4.96" path="socket:[10617]" dev="sockfs" ino=10617 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.165712][ T31] audit: type=1400 audit(1788462425.970:354): avc: denied { mounton } for pid=6164 comm="syz.4.96" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 96.203778][ T6168] Mount JFS Failure: -5 [ 97.064010][ T31] audit: type=1400 audit(1788462426.330:355): avc: denied { ioctl } for pid=6178 comm="syz.0.99" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.212562][ T1558] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.228718][ T31] audit: type=1400 audit(1788462427.030:356): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 97.360773][ T1558] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.361632][ T1558] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.361651][ T1558] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.361665][ T1558] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.361681][ T1558] usb 2-1: config 1 has no interface number 1 [ 97.361708][ T1558] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.361736][ T1558] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.363362][ T1558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.363380][ T1558] usb 2-1: Product: syz [ 97.363392][ T1558] usb 2-1: Manufacturer: syz [ 97.363405][ T1558] usb 2-1: SerialNumber: syz [ 97.367402][ T6187] 9p: Bad value for 'rfdno' [ 97.628750][ T1558] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 97.628803][ T1558] usb 2-1: MIDIStreaming interface descriptor not found [ 97.720635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.662446][ T6198] fuse: Bad value for 'fd' [ 98.718669][ T6198] macsec1: entered promiscuous mode [ 98.718708][ T6198] dummy0: entered promiscuous mode [ 98.731740][ T6198] macsec1: entered allmulticast mode [ 98.731774][ T6198] dummy0: entered allmulticast mode [ 98.765984][ T1558] usb 2-1: USB disconnect, device number 3 [ 98.778438][ T6198] dummy0: left allmulticast mode [ 98.801801][ T10] dummy0: left promiscuous mode [ 98.816607][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.817310][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.849717][ T31] audit: type=1400 audit(1788462428.650:357): avc: denied { read } for pid=6196 comm="syz.2.100" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.873364][ T31] audit: type=1400 audit(1788462428.650:358): avc: denied { open } for pid=6196 comm="syz.2.100" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.894454][ T6199] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 98.936359][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.106122][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 99.194197][ T6213] loop2: detected capacity change from 0 to 7 [ 99.207897][ T6213] Dev loop2: unable to read RDB block 7 [ 99.216052][ T6213] loop2: unable to read partition table [ 99.223488][ T6213] loop2: partition table beyond EOD, truncated [ 99.230704][ T6213] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.260246][ T6213] Bluetooth: MGMT ver 1.23 [ 99.371942][ T5698] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.537711][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 99.546500][ T5698] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.557923][ T6217] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 99.557947][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.561975][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.562009][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.562030][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.562052][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.562081][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.576094][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 99.588198][ T5698] usb 3-1: config 0 descriptor?? [ 100.470163][ T6219] vhci_hcd: connection closed [ 100.472411][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 100.472449][ T31] audit: type=1400 audit(1788462429.950:365): avc: denied { create } for pid=6216 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.472488][ T31] audit: type=1400 audit(1788462429.970:366): avc: denied { ioctl } for pid=6216 comm="syz.0.110" path="socket:[10710]" dev="sockfs" ino=10710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.472523][ T31] audit: type=1400 audit(1788462429.970:367): avc: denied { connect } for pid=6216 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.494778][ T1377] vhci_hcd vhci_hcd.0: stop threads [ 100.494799][ T1377] vhci_hcd vhci_hcd.0: release socket [ 100.494814][ T1377] vhci_hcd vhci_hcd.0: disconnect device [ 100.639604][ T31] audit: type=1400 audit(1788462430.440:368): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 100.660126][ T5698] rc_core: IR keymap rc-hauppauge not found [ 100.660144][ T5698] Registered IR keymap rc-empty [ 100.660517][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.327961][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.376669][ T5698] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 101.451757][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 101.486164][ T5698] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 101.648205][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.671622][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.700691][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.731762][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.766049][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.781979][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.802150][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.832866][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.841101][ T31] audit: type=1400 audit(1788462431.640:369): avc: denied { read } for pid=6238 comm="syz.2.116" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.841153][ T31] audit: type=1400 audit(1788462431.640:370): avc: denied { open } for pid=6238 comm="syz.2.116" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.875762][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.890360][ T5698] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.917067][ T5698] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 101.917109][ T5698] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.931737][ T5698] usb 3-1: USB disconnect, device number 5 [ 102.008655][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 102.713214][ T6252] fuse: Unknown parameter 'gr00000000000000000000' [ 102.742464][ T6252] macsec1: entered promiscuous mode [ 102.742485][ T6252] dummy0: entered promiscuous mode [ 102.742663][ T6252] macsec1: entered allmulticast mode [ 102.742676][ T6252] dummy0: entered allmulticast mode [ 102.907489][ T6252] dummy0: left allmulticast mode [ 102.943721][ T5737] dummy0: left promiscuous mode [ 103.080146][ T31] audit: type=1400 audit(1788462432.850:371): avc: denied { accept } for pid=6254 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.598384][ T31] audit: type=1400 audit(1788462433.400:372): avc: denied { read } for pid=6260 comm="syz.4.121" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.622456][ T31] audit: type=1400 audit(1788462433.410:373): avc: denied { ioctl } for pid=6260 comm="syz.4.121" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.630321][ T31] audit: type=1400 audit(1788462433.420:374): avc: denied { allowed } for pid=6260 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.831040][ T6268] FAULT_INJECTION: forcing a failure. [ 103.831040][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 103.831084][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 103.831109][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 103.831121][ T6268] Call Trace: [ 103.831128][ T6268] [ 103.831136][ T6268] dump_stack_lvl+0x100/0x190 [ 103.831169][ T6268] should_fail_ex.cold+0x5/0xa [ 103.831197][ T6268] should_failslab+0xc2/0x120 [ 103.831221][ T6268] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 103.831244][ T6268] ? key_alloc+0xc6d/0x1310 [ 103.831267][ T6268] kmemdup_noprof+0x29/0x60 [ 103.831299][ T6268] key_alloc+0xc6d/0x1310 [ 103.831322][ T6268] ? lock_acquire+0x1d1/0x380 [ 103.831342][ T6268] ? keyctl_get_persistent+0x536/0x8b0 [ 103.831372][ T6268] ? __pfx_key_alloc+0x10/0x10 [ 103.831389][ T6268] ? __asan_memcpy+0x3c/0x60 [ 103.831424][ T6268] keyring_alloc+0x44/0xc0 [ 103.831450][ T6268] keyctl_get_persistent+0x779/0x8b0 [ 103.831475][ T6268] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 103.831503][ T6268] ? __x64_sys_futex+0x34f/0x4d0 [ 103.831528][ T6268] ? __x64_sys_futex+0x358/0x4d0 [ 103.831556][ T6268] ? xfd_validate_state+0x129/0x190 [ 103.831582][ T6268] __do_sys_keyctl+0x3b2/0x5a0 [ 103.831611][ T6268] do_syscall_64+0x123/0x790 [ 103.831636][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.831657][ T6268] RIP: 0033:0x7f4f2ab9e159 [ 103.831673][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.831692][ T6268] RSP: 002b:00007f4f2bb42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 103.831710][ T6268] RAX: ffffffffffffffda RBX: 00007f4f2ae25fa0 RCX: 00007f4f2ab9e159 [ 103.831723][ T6268] RDX: 000000003be5b9a0 RSI: 000000000000ee00 RDI: 0000000000000016 [ 103.831735][ T6268] RBP: 00007f4f2ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 103.831746][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.831757][ T6268] R13: 00007f4f2ae26038 R14: 00007f4f2ae25fa0 R15: 00007ffd6f2f6548 [ 103.831784][ T6268] [ 105.789176][ T6285] Illegal XDP return value 6285 on prog (id 18) dev syz_tun, expect packet loss! [ 105.979246][ T5604] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 106.520078][ T6297] bond1: option arp_validate: invalid value (18446744073709551615) [ 106.544181][ T6297] bond1 (unregistering): Released all slaves [ 106.571229][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 106.571274][ T31] audit: type=1400 audit(1788462436.380:381): avc: denied { mounton } for pid=6296 comm="syz.4.128" path="/25/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 107.089674][ T6304] fuse: Unknown parameter 'gr00000000000000000000' [ 107.120200][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.134008][ T6304] macsec1: entered promiscuous mode [ 107.134038][ T6304] dummy0: entered promiscuous mode [ 107.134410][ T6304] macsec1: entered allmulticast mode [ 107.134423][ T6304] dummy0: entered allmulticast mode [ 107.158244][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 107.173974][ T6304] dummy0: left allmulticast mode [ 107.196281][ T31] audit: type=1400 audit(1788462437.000:382): avc: denied { shutdown } for pid=6305 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.224704][ T31] audit: type=1400 audit(1788462437.030:383): avc: denied { mounton } for pid=6305 comm="syz.1.131" path="/32/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 107.249077][ T9] dummy0: left promiscuous mode [ 107.349538][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.365495][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.578107][ T31] audit: type=1400 audit(1788462438.380:384): avc: denied { write } for pid=6322 comm="syz.3.135" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 108.728299][ T1558] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.880669][ T1558] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.883208][ T1558] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 108.883228][ T1558] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 108.884471][ T1558] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 108.884487][ T1558] usb 5-1: Product: syz [ 108.884516][ T1558] usb 5-1: Manufacturer: syz [ 109.220037][ T5698] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.377741][ T5698] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 109.388018][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.388094][ T5698] usb 3-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.413982][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.425992][ T5698] usb 3-1: Product: syz [ 109.430455][ T5698] usb 3-1: Manufacturer: syz [ 109.430487][ T5698] usb 3-1: SerialNumber: syz [ 109.599983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.789976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.399978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.499978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.604923][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.604976][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=f5.40 [ 110.626246][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 110.626310][ T10] usb 1-1: can't read configurations, error -71 [ 110.904581][ T31] audit: type=1400 audit(1788462440.710:385): avc: denied { read } for pid=6341 comm="syz.3.140" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 110.904635][ T31] audit: type=1400 audit(1788462440.710:386): avc: denied { open } for pid=6341 comm="syz.3.140" path="/27/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 111.077531][ T31] audit: type=1400 audit(1788462440.880:387): avc: denied { node_bind } for pid=6343 comm="syz.1.138" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.193011][ T31] audit: type=1400 audit(1788462441.000:388): avc: denied { mount } for pid=6346 comm="syz.3.141" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 111.376042][ T31] audit: type=1400 audit(1788462441.180:389): avc: denied { mounton } for pid=6354 comm="syz.0.142" path="/proc/79/task" dev="proc" ino=10222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 111.409043][ T6358] fuse: Bad value for 'fd' [ 111.420989][ T31] audit: type=1400 audit(1788462441.230:390): avc: denied { name_connect } for pid=6357 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 111.452961][ T6358] macsec1: entered promiscuous mode [ 111.463044][ T6358] dummy0: entered promiscuous mode [ 111.469486][ T6358] macsec1: entered allmulticast mode [ 111.475200][ T6358] dummy0: entered allmulticast mode [ 111.491679][ T6358] dummy0: left allmulticast mode [ 111.614117][ T5737] dummy0: left promiscuous mode [ 112.167750][ T5718] usb 5-1: USB disconnect, device number 5 [ 112.425678][ T5698] usb 3-1: 1:2 : no or invalid class specific endpoint descriptor [ 112.631623][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 112.636408][ T5698] usb 3-1: USB disconnect, device number 6 [ 112.979318][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.105420][ T31] audit: type=1400 audit(1788462442.910:391): avc: denied { create } for pid=6378 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.147545][ T6379] FAULT_INJECTION: forcing a failure. [ 113.147545][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.147580][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) [ 113.147600][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 113.147610][ T6379] Call Trace: [ 113.147616][ T6379] [ 113.147621][ T6379] dump_stack_lvl+0x100/0x190 [ 113.147648][ T6379] should_fail_ex.cold+0x5/0xa [ 113.147671][ T6379] _copy_to_user+0x32/0xd0 [ 113.147696][ T6379] simple_read_from_buffer+0xcb/0x170 [ 113.147716][ T6379] proc_fail_nth_read+0x1af/0x230 [ 113.147736][ T6379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.147755][ T6379] ? rw_verify_area+0xce/0x6d0 [ 113.147777][ T6379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.147795][ T6379] vfs_read+0x1e4/0xb40 [ 113.147819][ T6379] ? lock_acquire+0x1d1/0x380 [ 113.147834][ T6379] ? __fget_files+0x34/0x3d0 [ 113.147852][ T6379] ? __pfx_vfs_read+0x10/0x10 [ 113.147873][ T6379] ? find_held_lock+0x2b/0x80 [ 113.147895][ T6379] ? __fget_files+0x215/0x3d0 [ 113.147915][ T6379] ? __fget_files+0x21f/0x3d0 [ 113.147939][ T6379] ksys_read+0x12a/0x250 [ 113.147952][ T6379] ? __pfx_ksys_read+0x10/0x10 [ 113.147973][ T6379] do_syscall_64+0x123/0x790 [ 113.147994][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.148011][ T6379] RIP: 0033:0x7f6f5615e98e [ 113.148024][ T6379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.148038][ T6379] RSP: 002b:00007f6f543f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.148053][ T6379] RAX: ffffffffffffffda RBX: 00007f6f543f66c0 RCX: 00007f6f5615e98e [ 113.148063][ T6379] RDX: 000000000000000f RSI: 00007f6f543f60a0 RDI: 0000000000000003 [ 113.148072][ T6379] RBP: 00007f6f543f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.148081][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.148090][ T6379] R13: 00007f6f56426038 R14: 00007f6f56425fa0 R15: 00007ffe9bd22688 [ 113.148112][ T6379] [ 113.314960][ T31] audit: type=1400 audit(1788462443.100:392): avc: denied { bind } for pid=6373 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.314998][ T31] audit: type=1400 audit(1788462443.100:393): avc: denied { read } for pid=6373 comm="syz.0.150" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 113.315037][ T31] audit: type=1400 audit(1788462443.100:394): avc: denied { open } for pid=6373 comm="syz.0.150" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 113.320265][ T5698] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 113.501807][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 113.507528][ T5698] usb 3-1: New USB device found, idVendor=038d, idProduct=db1a, bcdDevice=61.23 [ 113.510712][ T5698] usb 3-1: config 16 has an invalid descriptor of length 160, skipping remainder of the config [ 113.510751][ T5698] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.510769][ T5698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.510789][ T5698] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.510820][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.534202][ T5698] usbtmc 3-1:16.0: bulk endpoints not found [ 113.709893][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 115.506033][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 115.602319][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.614803][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.672332][ T6415] sctp_transport_update_pmtu: 47 callbacks suppressed [ 115.672413][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.673771][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.675059][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.675951][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.728200][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.729797][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.744200][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.745689][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.746786][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 115.747918][ T6415] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.101721][ T6418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 116.101749][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.126642][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 116.402166][ T5698] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 117.161420][ T31] audit: type=1400 audit(1788462446.970:395): avc: denied { create } for pid=6399 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.189385][ T31] audit: type=1400 audit(1788462446.990:396): avc: denied { connect } for pid=6399 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.217621][ T31] audit: type=1400 audit(1788462447.020:397): avc: denied { write } for pid=6399 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.599414][ T6419] vhci_hcd: connection reset by peer [ 117.606355][ T5980] vhci_hcd vhci_hcd.2: stop threads [ 117.606385][ T5980] vhci_hcd vhci_hcd.2: release socket [ 117.606439][ T5980] vhci_hcd vhci_hcd.2: disconnect device [ 117.633379][ T5718] usb 3-1: USB disconnect, device number 7 [ 117.725274][ T31] audit: type=1400 audit(1788462447.530:398): avc: denied { read write } for pid=6441 comm="syz.4.162" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.725342][ T31] audit: type=1400 audit(1788462447.530:399): avc: denied { open } for pid=6441 comm="syz.4.162" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.972470][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 117.974230][ T6444] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.052450][ T31] audit: type=1400 audit(1788462447.810:400): avc: denied { write } for pid=6441 comm="syz.4.162" name="subsystems" dev="configfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.113771][ T6444] nvmet: adding nsid 1 to subsystem testsubsys [ 118.124475][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 118.124523][ T31] audit: type=1400 audit(1788462447.890:402): avc: denied { open } for pid=6441 comm="syz.4.162" path="/31/config/nvmet/subsystems/testsubsys/attr_allow_any_host" dev="configfs" ino=11140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 118.124776][ T31] audit: type=1400 audit(1788462447.910:403): avc: denied { write } for pid=6441 comm="syz.4.162" name="namespaces" dev="configfs" ino=11138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.237547][ T31] audit: type=1400 audit(1788462448.020:404): avc: denied { append } for pid=6441 comm="syz.4.162" name="device_path" dev="configfs" ino=11143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 119.630418][ T31] audit: type=1400 audit(1788462449.440:405): avc: denied { connect } for pid=6454 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.705850][ T31] audit: type=1400 audit(1788462449.490:406): avc: denied { shutdown } for pid=6454 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.705908][ T31] audit: type=1400 audit(1788462449.490:407): avc: denied { read } for pid=6454 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.806009][ T6459] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 119.806052][ T6459] audit: out of memory in audit_log_start [ 119.922836][ T31] audit: type=1400 audit(1788462449.730:408): avc: denied { create } for pid=6458 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.966363][ T31] audit: type=1400 audit(1788462449.770:409): avc: denied { write } for pid=6458 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.110078][ T5698] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 122.279351][ T6479] sctp_transport_update_pmtu: 47 callbacks suppressed [ 122.279385][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.279587][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.279750][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.404068][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.450014][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.451636][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.451981][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.452302][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.452606][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.452937][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.453243][ T6479] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.625346][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 122.639482][ T25] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 122.639542][ T25] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 122.639674][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.652946][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.652969][ T25] usb 3-1: Product: syz [ 122.652982][ T25] usb 3-1: Manufacturer: syz [ 122.652994][ T25] usb 3-1: SerialNumber: syz [ 122.719007][ T25] rtl8150 3-1:1.0: couldn't find required endpoints [ 122.719184][ T25] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 122.892687][ T1558] usb 3-1: USB disconnect, device number 8 [ 123.251186][ T31] audit: type=1400 audit(1788462453.060:410): avc: denied { getopt } for pid=6482 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.312661][ T31] audit: type=1400 audit(1788462453.120:411): avc: denied { ioctl } for pid=6482 comm="syz.1.174" path="socket:[11536]" dev="sockfs" ino=11536 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.348268][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 123.355259][ T31] audit: type=1400 audit(1788462453.150:412): avc: denied { mounton } for pid=6482 comm="syz.1.174" path="/46/file0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.714113][ T6491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.747449][ T6494] netlink: 112 bytes leftover after parsing attributes in process `syz.1.179'. [ 123.783411][ T31] audit: type=1400 audit(1788462453.590:413): avc: denied { getopt } for pid=6492 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.797092][ T31] audit: type=1400 audit(1788462453.590:414): avc: denied { setopt } for pid=6490 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.807503][ T6494] netlink: 'syz.1.179': attribute type 11 has an invalid length. [ 123.807520][ T6494] netlink: 220 bytes leftover after parsing attributes in process `syz.1.179'. [ 123.841881][ T31] audit: type=1400 audit(1788462453.650:415): avc: denied { write } for pid=6490 comm="syz.0.176" path="socket:[11629]" dev="sockfs" ino=11629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.936848][ T31] audit: type=1400 audit(1788462453.740:416): avc: denied { setopt } for pid=6496 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.012381][ T31] audit: type=1400 audit(1788462453.820:417): avc: denied { getopt } for pid=6498 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.109535][ T31] audit: type=1400 audit(1788462453.910:418): avc: denied { bind } for pid=6496 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.213146][ T31] audit: type=1400 audit(1788462454.010:419): avc: denied { create } for pid=6502 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.326037][ T6533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6533 comm=syz.2.178 [ 126.804693][ T6552] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 126.804720][ T6552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.821125][ T6552] vhci_hcd vhci_hcd.0: Device attached [ 127.437409][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.437470][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.462414][ T6553] vhci_hcd: connection closed [ 127.464950][ T1463] vhci_hcd vhci_hcd.3: stop threads [ 127.464981][ T1463] vhci_hcd vhci_hcd.3: release socket [ 127.466057][ T1463] vhci_hcd vhci_hcd.3: disconnect device [ 127.530056][ T25] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 127.809770][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 129.031634][ T6582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.080346][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.129129][ T6586] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.230650][ T25] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 129.240861][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 129.240908][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 129.240936][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.275217][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.298859][ T25] usb 3-1: Product: syz [ 129.298881][ T25] usb 3-1: Manufacturer: syz [ 129.298898][ T25] usb 3-1: SerialNumber: syz [ 129.321524][ T6576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.321613][ T6576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.342335][ T25] oti6858 3-1:1.0: oti6858 converter detected [ 129.357654][ T25] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 129.597807][ T6593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 129.597833][ T6593] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.597912][ T6593] vhci_hcd vhci_hcd.0: Device attached [ 129.797740][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 129.797782][ T31] audit: type=1400 audit(1788462459.600:425): avc: denied { read write } for pid=6599 comm="syz.0.208" name="sg0" dev="devtmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.797826][ T31] audit: type=1400 audit(1788462459.600:426): avc: denied { open } for pid=6599 comm="syz.0.208" path="/dev/sg0" dev="devtmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.841598][ T10] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 129.859586][ T5737] usb 3-1: USB disconnect, device number 9 [ 129.867790][ T5737] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 129.868275][ T5737] oti6858 3-1:1.0: device disconnected [ 129.930093][ T6597] vhci_hcd: connection reset by peer [ 129.930851][ T1498] vhci_hcd vhci_hcd.3: stop threads [ 129.930869][ T1498] vhci_hcd vhci_hcd.3: release socket [ 129.933479][ T1498] vhci_hcd vhci_hcd.3: disconnect device [ 130.072406][ T31] audit: type=1400 audit(1788462459.880:427): avc: denied { ioctl } for pid=6605 comm="syz.4.210" path="socket:[12342]" dev="sockfs" ino=12342 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.305342][ T31] audit: type=1400 audit(1788462460.110:428): avc: denied { read write } for pid=6611 comm="syz.0.212" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 130.330625][ T31] audit: type=1400 audit(1788462460.130:429): avc: denied { open } for pid=6611 comm="syz.0.212" path="/36/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 130.357504][ T31] audit: type=1400 audit(1788462460.160:430): avc: denied { ioctl } for pid=6611 comm="syz.0.212" path="/36/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 131.575004][ T6622] lo: entered allmulticast mode [ 131.589742][ T6622] tunl0: entered allmulticast mode [ 131.602730][ T6622] gre0: entered allmulticast mode [ 131.655894][ T6622] gretap0: entered allmulticast mode [ 131.687671][ T6622] erspan0: entered allmulticast mode [ 131.698329][ T6630] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 131.708166][ T31] audit: type=1400 audit(1788462461.510:431): avc: denied { relabelto } for pid=6627 comm="syz.1.219" name="58" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 131.713319][ T6622] ip_vti0: entered allmulticast mode [ 131.744453][ T31] audit: type=1400 audit(1788462461.550:432): avc: denied { associate } for pid=6627 comm="syz.1.219" name="58" dev="tmpfs" ino=362 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 131.782127][ T31] audit: type=1400 audit(1788462461.590:433): avc: denied { write } for pid=6627 comm="syz.1.219" name="58" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 131.788391][ T6622] ip6_vti0: entered allmulticast mode [ 131.802392][ T31] audit: type=1400 audit(1788462461.590:434): avc: denied { add_name } for pid=6627 comm="syz.1.219" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 131.807910][ T6622] sit0: entered allmulticast mode [ 131.835984][ T6622] ip6tnl0: entered allmulticast mode [ 131.857935][ T6622] ip6gre0: entered allmulticast mode [ 131.881331][ T6622] syz_tun: entered allmulticast mode [ 131.903365][ T6622] ip6gretap0: entered allmulticast mode [ 131.920801][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.921815][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.945346][ T6622] bridge0: entered allmulticast mode [ 131.972265][ T6636] devpts: Bad value for 'max' [ 131.974628][ T6622] vcan0: entered allmulticast mode [ 131.999624][ T6622] bond0: entered allmulticast mode [ 131.999648][ T6622] bond_slave_0: entered allmulticast mode [ 131.999674][ T6622] bond_slave_1: entered allmulticast mode [ 132.021171][ T6622] team0: entered allmulticast mode [ 132.021206][ T6622] team_slave_0: entered allmulticast mode [ 132.028230][ T6622] team_slave_1: entered allmulticast mode [ 132.046830][ T6622] dummy0: entered allmulticast mode [ 132.092110][ T6622] nlmon0: entered allmulticast mode [ 132.093605][ T6622] batadv0: entered allmulticast mode [ 132.109171][ T6622] vxcan0: entered allmulticast mode [ 132.128320][ T6622] vxcan1: entered allmulticast mode [ 132.133225][ T6622] veth0: entered allmulticast mode [ 132.267577][ T6622] veth1: entered allmulticast mode [ 132.292624][ T6622] wg0: entered allmulticast mode [ 132.314542][ T6622] wg1: entered allmulticast mode [ 132.333430][ T6622] wg2: entered allmulticast mode [ 132.346415][ T6622] veth0_to_bridge: entered allmulticast mode [ 132.378758][ T6622] veth1_to_bridge: entered allmulticast mode [ 132.446405][ T6622] veth0_to_bond: entered allmulticast mode [ 132.531985][ T6622] veth1_to_bond: entered allmulticast mode [ 133.070614][ T6622] veth0_to_team: entered allmulticast mode [ 133.101034][ T6622] veth1_to_team: entered allmulticast mode [ 133.123442][ T6622] veth0_to_batadv: entered allmulticast mode [ 133.138274][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.138324][ T6622] batadv_slave_0: entered allmulticast mode [ 133.166996][ T6622] veth1_to_batadv: entered allmulticast mode [ 133.182402][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.182456][ T6622] batadv_slave_1: entered allmulticast mode [ 133.266032][ T6622] xfrm0: entered allmulticast mode [ 133.286999][ T6622] veth0_to_hsr: entered allmulticast mode [ 133.296516][ T6622] hsr_slave_0: entered allmulticast mode [ 133.307764][ T6622] veth1_to_hsr: entered allmulticast mode [ 133.318304][ T6622] hsr_slave_1: entered allmulticast mode [ 133.338983][ T6622] hsr0: entered allmulticast mode [ 133.348122][ T6622] veth1_virt_wifi: entered allmulticast mode [ 133.358562][ T6622] veth0_virt_wifi: entered allmulticast mode [ 133.375871][ T6622] virt_wifi0: entered allmulticast mode [ 133.376105][ T6622] veth1_vlan: entered allmulticast mode [ 133.387658][ T6622] veth0_vlan: entered allmulticast mode [ 133.401405][ T6622] vlan0: entered allmulticast mode [ 133.416051][ T6622] vlan1: entered allmulticast mode [ 133.461329][ T6622] macvlan0: entered allmulticast mode [ 133.480207][ T6622] macvlan1: entered allmulticast mode [ 133.489659][ T6622] ipvlan0: entered allmulticast mode [ 133.497794][ T6622] ipvlan1: entered allmulticast mode [ 133.505843][ T6622] veth1_macvtap: entered allmulticast mode [ 133.517219][ T6622] veth0_macvtap: entered allmulticast mode [ 133.542067][ T6622] macvtap0: entered allmulticast mode [ 133.555116][ T6622] macsec0: entered allmulticast mode [ 133.567301][ T6622] geneve0: entered allmulticast mode [ 133.578477][ T6622] geneve1: entered allmulticast mode [ 133.609407][ T6622] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 133.718300][ T6622] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 133.752496][ T6622] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 133.798349][ T6622] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 133.863140][ T6622] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 133.964555][ T6622] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 133.974731][ T6622] vxlan0: entered allmulticast mode [ 133.974845][ T6622] vrf0: entered allmulticast mode [ 133.974945][ T6622] vrf1: entered allmulticast mode [ 133.975040][ T6622] veth2: entered allmulticast mode [ 133.975137][ T6622] veth3: entered allmulticast mode [ 133.975292][ T6622] sit1: entered allmulticast mode [ 134.194182][ T1463] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.197191][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.197223][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.197250][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.428158][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.442851][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.488536][ T6663] veth1_to_bond: entered allmulticast mode [ 134.503238][ T6659] veth1_to_bond: left allmulticast mode [ 134.633922][ T6676] netlink: 2 bytes leftover after parsing attributes in process `syz.1.229'. [ 135.253378][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 135.253428][ T31] audit: type=1400 audit(1788462464.620:448): avc: denied { setattr } for pid=6673 comm="syz.2.228" name="NETLINK" dev="sockfs" ino=12647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.304141][ T6680] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6680 comm=syz.1.229 [ 135.321291][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 135.372538][ T6677] syzkaller0: entered promiscuous mode [ 135.372571][ T6677] syzkaller0: entered allmulticast mode [ 135.899180][ T6692] 9p: Bad value for 'rfdno' [ 136.191720][ T31] audit: type=1400 audit(1788462466.000:449): avc: denied { create } for pid=6701 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 136.344382][ T31] audit: type=1400 audit(1788462466.150:450): avc: denied { bind } for pid=6710 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.372330][ T31] audit: type=1400 audit(1788462466.180:451): avc: denied { write } for pid=6710 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.372392][ T31] audit: type=1400 audit(1788462466.180:452): avc: denied { read } for pid=6710 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.494453][ T31] audit: type=1400 audit(1788462466.300:453): avc: denied { create } for pid=6716 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.597822][ T31] audit: type=1400 audit(1788462466.400:454): avc: denied { write } for pid=6697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.711029][ T31] audit: type=1400 audit(1788462466.510:455): avc: denied { write } for pid=6729 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.755479][ T31] audit: type=1400 audit(1788462466.560:456): avc: denied { write } for pid=6716 comm="syz.4.239" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.758436][ T31] audit: type=1400 audit(1788462466.560:457): avc: denied { ioctl } for pid=6716 comm="syz.4.239" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.196912][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 137.376538][ T6752] 9p: Bad value for 'rfdno' [ 137.900000][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 138.718126][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 139.205739][ T6785] netlink: 'syz.3.251': attribute type 11 has an invalid length. [ 139.205780][ T6785] netlink: 'syz.3.251': attribute type 5 has an invalid length. [ 139.207497][ T6785] FAULT_INJECTION: forcing a failure. [ 139.207497][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 139.207521][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.3.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.207542][ T6785] Tainted: [L]=SOFTLOCKUP [ 139.207548][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 139.207557][ T6785] Call Trace: [ 139.207563][ T6785] [ 139.207569][ T6785] dump_stack_lvl+0x100/0x190 [ 139.207597][ T6785] should_fail_ex.cold+0x5/0xa [ 139.207620][ T6785] should_failslab+0xc2/0x120 [ 139.207640][ T6785] __kmalloc_noprof+0xfc/0x840 [ 139.207656][ T6785] ? fib_trie_table+0xf3/0x2a0 [ 139.207683][ T6785] fib_trie_table+0xf3/0x2a0 [ 139.207707][ T6785] fib_new_table+0x1bf/0x5d0 [ 139.207728][ T6785] inet_rtm_newroute+0x154/0x210 [ 139.207746][ T6785] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 139.207772][ T6785] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 139.207789][ T6785] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 139.207807][ T6785] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 139.207826][ T6785] rtnetlink_rcv_msg+0x95e/0xe90 [ 139.207845][ T6785] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.207865][ T6785] ? __lock_acquire+0x4c5/0x1ec0 [ 139.207883][ T6785] ? __netlink_lookup+0xa9/0x900 [ 139.207908][ T6785] netlink_rcv_skb+0x159/0x420 [ 139.207930][ T6785] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.207948][ T6785] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.207979][ T6785] ? netlink_deliver_tap+0x1ae/0xcc0 [ 139.208005][ T6785] netlink_unicast+0x585/0x850 [ 139.208031][ T6785] ? __pfx_netlink_unicast+0x10/0x10 [ 139.208060][ T6785] netlink_sendmsg+0x8b0/0xda0 [ 139.208086][ T6785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.208111][ T6785] ? selinux_socket_sendmsg+0x198/0x2f0 [ 139.208139][ T6785] ____sys_sendmsg+0xa4d/0xbe0 [ 139.208156][ T6785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.208180][ T6785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.208209][ T6785] ? lock_acquire+0x1d1/0x380 [ 139.208225][ T6785] ? get_pid_task+0x2a/0x250 [ 139.208247][ T6785] ___sys_sendmsg+0x190/0x1e0 [ 139.208269][ T6785] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.208288][ T6785] ? get_pid_task+0x106/0x250 [ 139.208320][ T6785] ? find_held_lock+0x2b/0x80 [ 139.208355][ T6785] __sys_sendmsg+0x160/0x210 [ 139.208371][ T6785] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.208399][ T6785] do_syscall_64+0x123/0x790 [ 139.208419][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.208435][ T6785] RIP: 0033:0x7f4f2ab9e159 [ 139.208449][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.208464][ T6785] RSP: 002b:00007f4f2bb42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.208480][ T6785] RAX: ffffffffffffffda RBX: 00007f4f2ae25fa0 RCX: 00007f4f2ab9e159 [ 139.208490][ T6785] RDX: 0000000024040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 139.208500][ T6785] RBP: 00007f4f2bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 139.208510][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.208519][ T6785] R13: 00007f4f2ae26038 R14: 00007f4f2ae25fa0 R15: 00007ffd6f2f6548 [ 139.208541][ T6785] [ 139.453635][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 139.632591][ T25] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 139.643854][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.643897][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.643943][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.680375][ T25] usb 5-1: config 0 descriptor?? [ 140.174862][ T6804] 9p: Bad value for 'rfdno' [ 140.257218][ T25] hid (null): global environment stack underflow [ 140.279715][ T25] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 140.289017][ T25] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 140.297541][ T25] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 140.304663][ T25] hid-led 0003:1294:1320.0002: global environment stack underflow [ 140.304697][ T25] hid-led 0003:1294:1320.0002: item 0 4 1 11 parsing failed [ 140.305146][ T25] hid-led 0003:1294:1320.0002: probe with driver hid-led failed with error -22 [ 140.996637][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.011855][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.041490][ T5604] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 141.043453][ T5604] Bluetooth: hci3: Injecting HCI hardware error event [ 141.045743][ T4924] Bluetooth: hci3: hardware error 0x00 [ 141.098917][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 141.098963][ T31] audit: type=1400 audit(1788462470.900:465): avc: denied { write } for pid=6813 comm="syz.2.264" name="core" dev="configfs" ino=3445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.106848][ T31] audit: type=1400 audit(1788462470.910:466): avc: denied { write } for pid=6813 comm="syz.2.264" name="rd_mcp_0" dev="configfs" ino=12855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.164828][ T31] audit: type=1400 audit(1788462470.970:467): avc: denied { write } for pid=6813 comm="syz.2.264" name="target" dev="configfs" ino=3444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.164896][ T31] audit: type=1400 audit(1788462470.970:468): avc: denied { write } for pid=6813 comm="syz.2.264" name="usb_gadget" dev="configfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.394747][ T31] audit: type=1326 audit(1788462471.200:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.266" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5619e159 code=0x0 [ 141.491437][ T31] audit: type=1400 audit(1788462471.300:470): avc: denied { name_bind } for pid=6827 comm="syz.1.266" src=17185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 141.504328][ T31] audit: type=1400 audit(1788462471.310:471): avc: denied { connect } for pid=6827 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.506837][ T31] audit: type=1400 audit(1788462471.310:472): avc: denied { write } for pid=6827 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.765648][ T6832] input: syz0 as /devices/virtual/input/input8 [ 141.912410][ T31] audit: type=1400 audit(1788462471.680:473): avc: denied { read } for pid=4958 comm="acpid" name="event4" dev="devtmpfs" ino=2902 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.912472][ T31] audit: type=1400 audit(1788462471.680:474): avc: denied { open } for pid=4958 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2902 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.133434][ T6837] netlink: 'syz.3.263': attribute type 11 has an invalid length. [ 142.133469][ T6837] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 142.363365][ T1558] usb 5-1: USB disconnect, device number 6 [ 143.120840][ T4924] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 146.121166][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 146.121223][ T31] audit: type=1400 audit(1788462475.920:479): avc: denied { write } for pid=6900 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.221445][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 146.221488][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 146.367482][ T5604] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 146.391391][ T6901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.397452][ T31] audit: type=1400 audit(1788462476.200:480): avc: denied { write } for pid=6908 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.507413][ T6911] 9p: Bad value for 'rfdno' [ 146.914341][ T984] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.233698][ T984] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 147.247998][ T984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.271972][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.280135][ T984] usb 3-1: Product: syz [ 147.280169][ T984] usb 3-1: Manufacturer: syz [ 147.280185][ T984] usb 3-1: SerialNumber: syz [ 147.655727][ T984] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 147.687822][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 147.694811][ T31] audit: type=1400 audit(1788462477.490:481): avc: denied { write } for pid=6917 comm="syz.3.283" name="nullb" dev="configfs" ino=3436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.694876][ T31] audit: type=1400 audit(1788462477.500:482): avc: denied { read } for pid=6917 comm="syz.3.283" name="zone_nr_conv" dev="configfs" ino=13641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 147.694921][ T31] audit: type=1800 audit(1788462477.500:483): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.283" name="zone_nr_conv" dev="configfs" ino=13641 res=0 errno=0 [ 148.332743][ T6938] ALSA: mixer_oss: invalid OSS volume '' [ 148.387113][ T31] audit: type=1400 audit(1788462478.190:484): avc: denied { create } for pid=6939 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 148.836876][ T984] gspca_mr97310a: reg write [21] error -71 [ 148.848181][ T984] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 148.887648][ T6946] FAULT_INJECTION: forcing a failure. [ 148.887648][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.887691][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.3.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.887724][ T6946] Tainted: [L]=SOFTLOCKUP [ 148.887731][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 148.887742][ T6946] Call Trace: [ 148.887749][ T6946] [ 148.887756][ T6946] dump_stack_lvl+0x100/0x190 [ 148.887786][ T6946] should_fail_ex.cold+0x5/0xa [ 148.887812][ T6946] _copy_from_user+0x2e/0xd0 [ 148.887842][ T6946] wext_handle_ioctl+0xc9/0x1b0 [ 148.887864][ T6946] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 148.887886][ T6946] ? do_vfs_ioctl+0x226/0x13e0 [ 148.887914][ T6946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.887940][ T6946] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 148.887972][ T6946] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 148.888006][ T6946] sock_ioctl+0x2d4/0x6b0 [ 148.888031][ T6946] ? __pfx_sock_ioctl+0x10/0x10 [ 148.888060][ T6946] ? selinux_file_ioctl+0x13b/0x290 [ 148.888087][ T6946] ? selinux_file_ioctl+0xb6/0x290 [ 148.888116][ T6946] ? __pfx_sock_ioctl+0x10/0x10 [ 148.888141][ T6946] __x64_sys_ioctl+0x18e/0x210 [ 148.888170][ T6946] do_syscall_64+0x123/0x790 [ 148.888194][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.888212][ T6946] RIP: 0033:0x7f4f2ab9e159 [ 148.888232][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.888249][ T6946] RSP: 002b:00007f4f2bb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.888268][ T6946] RAX: ffffffffffffffda RBX: 00007f4f2ae25fa0 RCX: 00007f4f2ab9e159 [ 148.888280][ T6946] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000006 [ 148.888291][ T6946] RBP: 00007f4f2bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 148.888302][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.888313][ T6946] R13: 00007f4f2ae26038 R14: 00007f4f2ae25fa0 R15: 00007ffd6f2f6548 [ 148.888338][ T6946] [ 149.137761][ T984] usb 3-1: USB disconnect, device number 10 [ 149.300349][ T6952] 9p: Bad value for 'rfdno' [ 149.531744][ T6954] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.786970][ T6956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.300'. [ 149.822907][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 149.825462][ T31] audit: type=1800 audit(1788462479.630:485): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.301" name="zone_nr_conv" dev="configfs" ino=14347 res=0 errno=0 [ 149.947395][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 151.164953][ T6976] ALSA: mixer_oss: invalid OSS volume '' [ 151.255516][ T6984] 9p: Bad value for 'rfdno' [ 151.401487][ T31] audit: type=1326 audit(1788462481.210:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5619e159 code=0x0 [ 151.414509][ T6989] ip_tables: iptables: counters copy to user failed while replacing table [ 151.515461][ T6992] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 151.547789][ T6992] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.724619][ T351] IPVS: starting estimator thread 0... [ 151.820009][ T6997] IPVS: using max 77 ests per chain, 184800 per kthread [ 152.661548][ T7012] tipc: Enabling of bearer rejected, failed to enable media [ 152.676502][ T31] audit: type=1400 audit(1788462482.480:487): avc: denied { setopt } for pid=7008 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 153.467138][ T7025] ALSA: mixer_oss: invalid OSS volume '' [ 154.306526][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 154.458030][ T7041] 9p: Bad value for 'rfdno' [ 154.582468][ T31] audit: type=1400 audit(1788462484.370:488): avc: denied { create } for pid=7037 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 154.602135][ T31] audit: type=1400 audit(1788462484.380:489): avc: denied { sys_admin } for pid=7037 comm="syz.3.325" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 154.688538][ T7047] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.325'. [ 154.688576][ T7047] ksmbd: Unknown IPC event: 4, ignore. [ 155.347227][ T31] audit: type=1400 audit(1788462485.150:490): avc: denied { watch watch_reads } for pid=7048 comm="syz.3.328" path="/71/file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 155.443829][ T7053] syz.3.328 (7053): drop_caches: 0 [ 155.607704][ T31] audit: type=1400 audit(1788462485.410:491): avc: denied { setopt } for pid=7055 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.732643][ T270] IPVS: starting estimator thread 0... [ 155.787567][ T31] audit: type=1400 audit(1788462485.580:492): avc: denied { create } for pid=7055 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 155.830030][ T7062] IPVS: using max 39 ests per chain, 93600 per kthread [ 156.008930][ T31] audit: type=1400 audit(1788462485.810:493): avc: denied { read } for pid=7055 comm="syz.2.330" lport=36974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.380583][ T7075] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 156.380609][ T7075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.396058][ T7075] vhci_hcd vhci_hcd.0: Device attached [ 156.977419][ T7076] vhci_hcd: connection closed [ 156.981604][ T1520] vhci_hcd vhci_hcd.3: stop threads [ 156.981646][ T1520] vhci_hcd vhci_hcd.3: release socket [ 156.981747][ T1520] vhci_hcd vhci_hcd.3: disconnect device [ 157.017743][ T7081] ALSA: mixer_oss: invalid OSS volume '' [ 157.033610][ T7081] misc userio: Invalid payload size [ 157.050416][ T984] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 157.130025][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 157.229322][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 158.144003][ T7080] [ 158.146380][ T7080] ====================================================== [ 158.153390][ T7080] WARNING: possible circular locking dependency detected [ 158.160386][ T7080] syzkaller #0 Tainted: G L [ 158.166343][ T7080] ------------------------------------------------------ [ 158.173342][ T7080] syz.4.335/7080 is trying to acquire lock: [ 158.179224][ T7080] ffff8880746744b8 (kn->active#69){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 158.188290][ T7080] [ 158.188290][ T7080] but task is already holding lock: [ 158.195647][ T7080] ffffffff904df980 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 158.204861][ T7080] [ 158.204861][ T7080] which lock already depends on the new lock. [ 158.204861][ T7080] [ 158.215245][ T7080] [ 158.215245][ T7080] the existing dependency chain (in reverse order) is: [ 158.224245][ T7080] [ 158.224245][ T7080] -> #1 (serio_mutex){+.+.}-{4:4}: [ 158.231521][ T7080] lock_acquire+0x1d1/0x380 [ 158.236531][ T7080] __mutex_lock+0x1a4/0x1bd0 [ 158.241626][ T7080] drvctl_store+0x3c/0x350 [ 158.246551][ T7080] dev_attr_store+0x58/0x80 [ 158.251558][ T7080] sysfs_kf_write+0xf2/0x150 [ 158.256653][ T7080] kernfs_fop_write_iter+0x3e0/0x5f0 [ 158.262449][ T7080] vfs_write+0x6af/0x1050 [ 158.267287][ T7080] ksys_write+0x12a/0x250 [ 158.272115][ T7080] do_syscall_64+0x123/0x790 [ 158.277210][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.283615][ T7080] [ 158.283615][ T7080] -> #0 (kn->active#69){++++}-{0:0}: [ 158.291083][ T7080] check_prev_add+0xeb/0xe60 [ 158.296175][ T7080] __lock_acquire+0x1492/0x1ec0 [ 158.301527][ T7080] lock_acquire+0x1d1/0x380 [ 158.306539][ T7080] kernfs_drain+0x4f0/0x600 [ 158.311557][ T7080] __kernfs_remove+0x34c/0xb80 [ 158.316838][ T7080] kernfs_remove_by_name_ns+0x7c/0x120 [ 158.322807][ T7080] remove_files+0x96/0x1c0 [ 158.327727][ T7080] sysfs_remove_group+0x8b/0x1b0 [ 158.333171][ T7080] sysfs_remove_groups+0x60/0xb0 [ 158.338613][ T7080] device_remove_attrs+0x192/0x290 [ 158.344232][ T7080] device_del+0x36e/0x9b0 [ 158.349071][ T7080] serio_destroy_port+0x47f/0x590 [ 158.354610][ T7080] serio_unregister_port+0x2b/0x40 [ 158.360237][ T7080] userio_char_release+0x91/0xe0 [ 158.365692][ T7080] __fput+0x3ff/0xb50 [ 158.370177][ T7080] task_work_run+0x150/0x240 [ 158.375274][ T7080] exit_to_user_mode_loop+0x1d8/0x700 [ 158.381153][ T7080] do_syscall_64+0x661/0x790 [ 158.386245][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.392639][ T7080] [ 158.392639][ T7080] other info that might help us debug this: [ 158.392639][ T7080] [ 158.402844][ T7080] Possible unsafe locking scenario: [ 158.402844][ T7080] [ 158.410284][ T7080] CPU0 CPU1 [ 158.415627][ T7080] ---- ---- [ 158.420968][ T7080] lock(serio_mutex); [ 158.425018][ T7080] lock(kn->active#69); [ 158.431773][ T7080] lock(serio_mutex); [ 158.438353][ T7080] lock(kn->active#69); [ 158.442578][ T7080] [ 158.442578][ T7080] *** DEADLOCK *** [ 158.442578][ T7080] [ 158.450714][ T7080] locks held by syz.4.335/7080: 1, last CPU#1: [ 158.456863][ T7080] #0: ffffffff904df980 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 158.466500][ T7080] [ 158.466500][ T7080] stack backtrace: [ 158.472370][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.4.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.483112][ T7080] Tainted: [L]=SOFTLOCKUP [ 158.487418][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 158.497451][ T7080] Call Trace: [ 158.500710][ T7080] [ 158.503623][ T7080] dump_stack_lvl+0x100/0x190 [ 158.508374][ T7080] print_circular_bug.cold+0x178/0x1be [ 158.513822][ T7080] check_noncircular+0x146/0x160 [ 158.518752][ T7080] check_prev_add+0xeb/0xe60 [ 158.523322][ T7080] __lock_acquire+0x1492/0x1ec0 [ 158.528161][ T7080] lock_acquire+0x1d1/0x380 [ 158.532657][ T7080] ? __kernfs_remove+0x34c/0xb80 [ 158.537580][ T7080] ? kernfs_drain+0x4c7/0x600 [ 158.542243][ T7080] kernfs_drain+0x4f0/0x600 [ 158.546731][ T7080] ? __kernfs_remove+0x34c/0xb80 [ 158.551657][ T7080] ? __pfx_kernfs_drain+0x10/0x10 [ 158.556666][ T7080] ? find_held_lock+0x2b/0x80 [ 158.561326][ T7080] ? __kernfs_remove+0x224/0xb80 [ 158.566246][ T7080] ? __kernfs_remove+0x224/0xb80 [ 158.571186][ T7080] ? up_write+0x2dc/0x5b0 [ 158.575498][ T7080] __kernfs_remove+0x34c/0xb80 [ 158.580248][ T7080] kernfs_remove_by_name_ns+0x7c/0x120 [ 158.585695][ T7080] remove_files+0x96/0x1c0 [ 158.590094][ T7080] sysfs_remove_group+0x8b/0x1b0 [ 158.595017][ T7080] sysfs_remove_groups+0x60/0xb0 [ 158.599942][ T7080] device_remove_attrs+0x192/0x290 [ 158.605043][ T7080] ? __pfx_device_remove_attrs+0x10/0x10 [ 158.610664][ T7080] device_del+0x36e/0x9b0 [ 158.614980][ T7080] ? __pfx_device_del+0x10/0x10 [ 158.619819][ T7080] ? mark_held_locks+0x40/0x70 [ 158.624571][ T7080] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 158.630359][ T7080] serio_destroy_port+0x47f/0x590 [ 158.635369][ T7080] serio_unregister_port+0x2b/0x40 [ 158.640462][ T7080] userio_char_release+0x91/0xe0 [ 158.645387][ T7080] ? __pfx_userio_char_release+0x10/0x10 [ 158.651007][ T7080] __fput+0x3ff/0xb50 [ 158.654976][ T7080] task_work_run+0x150/0x240 [ 158.659565][ T7080] ? __pfx_task_work_run+0x10/0x10 [ 158.664666][ T7080] exit_to_user_mode_loop+0x1d8/0x700 [ 158.670021][ T7080] ? rcu_is_watching+0x13/0xc0 [ 158.674770][ T7080] do_syscall_64+0x661/0x790 [ 158.679343][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.685217][ T7080] RIP: 0033:0x7f380b79e159 [ 158.689618][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.709209][ T7080] RSP: 002b:00007ffd2cf200f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 158.717613][ T7080] RAX: 0000000000000000 RBX: 00007f380ba27da0 RCX: 00007f380b79e159 [ 158.725602][ T7080] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 158.733555][ T7080] RBP: 00007f380ba27da0 R08: 0000000000000006 R09: 0000000000000000 [ 158.741519][ T7080] R10: 00007f380ba27cb0 R11: 0000000000000246 R12: 0000000000026877 [ 158.749471][ T7080] R13: 00007f380ba25fac R14: 0000000000026583 R15: 00007ffd2cf20200 [ 158.757439][ T7080] [ 158.790369][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.800309][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.800373][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.800393][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.800427][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.834931][ T10] usb 1-1: config 0 descriptor?? [ 159.159311][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 159.387295][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 159.552479][ T4924] Bluetooth: to_multiplier 0 < 10 [ 161.321108][ T5726] usb 1-1: USB disconnect, device number 7 [ 161.600018][ T4924] Bluetooth: hci2: command 0x0401 tx timeout