last executing test programs: 13.675930679s ago: executing program 1 (id=1040): openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f", 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x24008800) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffffff, 0x0, 0x50200, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000a2000000", @ANYRES32, @ANYBLOB="0600"/18, @ANYRES32=0x0, @ANYRES32], 0x50) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5fb5, 0x0, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) inotify_init() syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = open(0x0, 0x1c1242, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000200)={0x7, 'vlan1\x00', {0x1}, 0x100a}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x10}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) 12.132184829s ago: executing program 3 (id=1047): syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a700030100"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x800, 0x0) 9.80285141s ago: executing program 2 (id=1052): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0xe2, 0xb0e, 0x7, 0x9, 0x32, 0x9, 0x6}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x102c34, 0x566, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000240)={0xf0f000, 0x6}) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, &(0x7f0000001c80)=""/4096, 0x1000) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000000)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x400}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0}, {0x0, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 9.23795446s ago: executing program 3 (id=1055): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r5, 0x301, 0x0, 0x0, {0x17}}, 0x14}}, 0x44094) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) 9.150937664s ago: executing program 2 (id=1056): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8.226421152s ago: executing program 0 (id=1057): mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x81, "fca7bc543e19a74a1da0108120d39a78faf816f1c8688c383c0f595cf47f07a7", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}}}], 0x20}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="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", 0xfc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.214491237s ago: executing program 3 (id=1058): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5], 0x1d8}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x15) ppoll(&(0x7f0000000340)=[{r1, 0x2100}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105507262600000000000109022400010000a000090400000503000000092100020000004500090581030002000200"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7080030c686377369efa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x337}, {0x4}}}]}, 0x38}}, 0x0) 6.814848712s ago: executing program 4 (id=1060): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) semctl$GETPID(0x0, 0x7, 0xb, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x53ca}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) fgetxattr(r6, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) inotify_init1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.794914553s ago: executing program 0 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01040000000000000000010000010c00024000000000000000010900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 6.67762423s ago: executing program 2 (id=1062): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000019080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1000c080) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRES16=r1]) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 6.589523665s ago: executing program 0 (id=1063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x20, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 6.583478674s ago: executing program 1 (id=1064): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, 0x0, 0x0) mremap(&(0x7f000023d000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d3f0006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 5.866294596s ago: executing program 0 (id=1065): syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a700030100"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x800, 0x0) 5.675562348s ago: executing program 4 (id=1066): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000200000000e0ffffff07ffffff000000000000061edf87adb217c63d6414e2d5683322c4203cd56739bef7612edf1e446cf1ddf72d4c60ccbe38dfb1917b89852687a563c2a2a5a2128084a392bf449013f8555e9fe556c4f6efe71ddf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r4, 0x7, 0x0, 0x0, 0x0, [], [0xfd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='memory.swap.high\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), &(0x7f0000000280)) 5.619103192s ago: executing program 2 (id=1067): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x101, 0x10000099}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setpgid(r2, r1) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000014000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="1400f70300000000000000000000ec000000000000db46"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/251, 0xfe}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000680)=""/174, 0xae}], 0x6}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c21b98212be213b0bffff01453ed984d23bc1158e82756c3e9bddafff758bc6e405c5d899dce50d4d2cce8993a5b9caa72aebf018991f0a73eb67b4697822e5b97b843d89110f3c8d746b72ba09725daddae0fde8b04865c8c109baec68ca716b80670755aea5cf929e04bfb02dbeb9892dbc9a20b5184b44f7437bc5585f68ba0e07b3bd94708b6c9931f84197764b6b3152bb1bd19b30d07345229a971cbcfc0876f39c6c833e71a9df1dabbb5e66c8644890dd83fd20616847b9d283d673e0bff01b1b6914869dd7d98605acab3f6b734cec59dbd98d6d39011b7757bb8069bd5c3022fa107d149db9b732c4ccba97a6529b4b19d134d5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.28620979s ago: executing program 1 (id=1068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000600000000000000000200"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000640)={{0x0, 0xffff, 0x9, 0xc14}, 'syz0\x00', 0x37}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0xffffff7f, 0x2) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000580)=0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x3b63, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9000300"], 0xe) 4.808738522s ago: executing program 1 (id=1069): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f3400f221c450f01c266b85c008ec8c4217a12550b66baf80cb8f24eff86ef66bafc0c66b8cf0466ef0f01c2420f211848b88000c0fe000000000f23d00f21f835100000060f23f80f005d00f3470fc7b6d5000000", 0x55}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fe87000000000000fdfffffb9500000000000000dbefbbac560afd94acbda22474d8a6e938d77c98b5b56df5a6159db0a2d5cc47b75746af775f16d4eba090401893e5cb3dbeb66f7a413f4ce94546e6921f49fe38d2eef5de6fb339d6979167eb425bc02493f7b6d909a8efd8174feef3f4ae29be514db411922cb41e17475ac41dcbccb5377486fc25459c20209c6940dd4443dcaf34554ed2d7cb95038981f0a9ce7247bd77356e39f35e53c2ba0d3e005d8450"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20}, 0xfdef) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) read$FUSE(r7, &(0x7f0000001f40)={0x2020}, 0x2020) splice(r5, 0x0, r7, 0x0, 0xffffffe1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="b9800000c00f3235010000000f3066ba610066b800b066ef440f08c4e17573fc00c744240027fa0000c744240200000100c7442406000000000f01142466420f3880a702000000640f01cbc744240000700000c7442402c0776baac7442406000000000f011424490fc71864653e460f09", 0x71}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010005000000a9d3e4ff238aecb3df8c1e2060bda56bd1ba0f5ebd15be9354be681209266b6ab0ace23a4cc8881d72e4fd7ef1247bca314036e0d50c4e8c30f5dc1edcbcaee1a2138730835afc9f5706e7bdb2df76b11caad59545cb240ac4378213ad0abb40f283c27f3c4ffb566b65c733c031f1fba801ecb0d5e381ebd9d8950e5a83a1a644316987a1111dfb262c52e200000000000000"], 0x3c}}, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.106605242s ago: executing program 3 (id=1070): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x7a883, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40186f40, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) sendfile(r3, r2, &(0x7f0000000480)=0xe0000000, 0x401) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) 4.105924531s ago: executing program 1 (id=1071): mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x81, "fca7bc543e19a74a1da0108120d39a78faf816f1c8688c383c0f595cf47f07a7", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}}}], 0x20}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="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", 0xfc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.42684021s ago: executing program 0 (id=1072): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e5", 0x2000, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0xf500}) 3.349366294s ago: executing program 4 (id=1073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000840) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x90) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socket$inet(0x2, 0x2, 0x0) 3.227099569s ago: executing program 3 (id=1074): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300), &(0x7f0000000180)=0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='fscache_access\x00', r6, 0x0, 0x5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 2.290348658s ago: executing program 3 (id=1075): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x5a7, 0x212001) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x400dc05) close(0xffffffffffffffff) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="f3000208"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 2.115141907s ago: executing program 0 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000280)=0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9, 0x2f, &(0x7f0000000480)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c58510d0c0ee650d231da45a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e04000000da03a03fe9b4a6bcfa7d04594e4f6da127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb9644e8186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55dd156d57bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528390862bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b76ae3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000066ac9b9800000000000000000000001600"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='5', @ANYRES32=r0], 0x118) 2.108972916s ago: executing program 2 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="0f2062b9790a0000b886000000ba000000000f3066ba210066b80e0066eff0802b03f086a80f0000000f017f03e45e2e0f21cb0f01da66bad00466b83e2066ef", 0x40}], 0x1, 0x30, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x15, 0xa, 0x0, 0x2, 0x7, 0xe, 0x1, 0x81, 0xe5, 0xb0, 0x3, 0x0, 0x78, 0xfffffffd, 0x4, 0x17, 0xff, 0x2, '\x00', 0x2, 0xae}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000280)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{}, "ecb9d06d2d6e459d", "9ab7e8da5fbd3fc91d33e32cd9f5bddb", "6973ca9e", "e80ebfa5ac114dfa"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ae52252fd7000000000004891d1325c0eb5bd678aff5cb154ccc98f6e029470cef2e7aaba6d0397534f0fba29b6f87cb103003d14cee6391cf43a1d26992905b35674d94ccf70c9a0001aa1453438b2fd6caf435ac31cbc138ef662d47f4b0143ac3e0b1962d5ca6de9abeece5ce1f15c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r8, r9, 0x3, 0x0) 2.018405462s ago: executing program 4 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000002000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 524.74159ms ago: executing program 4 (id=1079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000600000000000000000200"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000640)={{0x0, 0xffff, 0x9, 0xc14}, 'syz0\x00', 0x37}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0xffffff7f, 0x2) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000580)=0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x3b63, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0b06c9000300"], 0xe) 418.268602ms ago: executing program 1 (id=1080): syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/46, 0x2e}], 0x6, 0x7, 0x4) 277.943147ms ago: executing program 4 (id=1081): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="0e", 0x1, 0x2404084c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12005387928d4ecf168e00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200), 0x20000000}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0xf6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) close(r7) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000240)='N>2', 0x3, 0x4001, 0x0, 0x0) 0s ago: executing program 2 (id=1082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x50, 0x0, &(0x7f0000000440)="e5c0ca304a2a7b53a10a2beba492b547df36c0926c71357304fb53ff71c4381e3c952221a37fd23596966b13d4b104fa4b53ec30653382d39d2a7688b4b0b6a647f7b5234ae93f414418636de2e52987"}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0) kernel console output (not intermixed with test programs): s=chr_file permissive=1 [ 239.874488][ T29] audit: type=1400 audit(1732146896.176:469): avc: denied { create } for pid=7808 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.059764][ T29] audit: type=1326 audit(1732146896.406:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.4.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x0 [ 240.374290][ T29] audit: type=1326 audit(1732146896.706:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619217e819 code=0x7fc00000 [ 240.400429][ T7807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.401532][ T29] audit: type=1326 audit(1732146896.746:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f619217e819 code=0x7fc00000 [ 240.429826][ T7807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.439507][ T7807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.445593][ T7807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.487372][ T29] audit: type=1326 audit(1732146896.836:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619217e819 code=0x7fc00000 [ 241.632010][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.669480][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 242.506931][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.514451][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.525717][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.532841][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 242.819478][ T7836] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 244.235218][ T7862] FAULT_INJECTION: forcing a failure. [ 244.235218][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.270176][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.1.541 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 244.280453][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 244.290497][ T7862] Call Trace: [ 244.293756][ T7862] [ 244.296664][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 244.301334][ T7862] should_fail_ex+0x497/0x5b0 [ 244.306003][ T7862] _copy_to_user+0x32/0xd0 [ 244.310403][ T7862] video_usercopy+0xf37/0x1600 [ 244.315189][ T7862] ? __pfx___video_do_ioctl+0x10/0x10 [ 244.320547][ T7862] ? __pfx_video_usercopy+0x10/0x10 [ 244.325742][ T7862] ? __pfx___video_do_ioctl+0x10/0x10 [ 244.331106][ T7862] v4l2_ioctl+0x1ba/0x250 [ 244.335426][ T7862] ? __pfx_v4l2_ioctl+0x10/0x10 [ 244.340272][ T7862] __x64_sys_ioctl+0x190/0x200 [ 244.345044][ T7862] do_syscall_64+0xcd/0x250 [ 244.349526][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.355407][ T7862] RIP: 0033:0x7f6bc757e819 [ 244.359798][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.379387][ T7862] RSP: 002b:00007f6bc82d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.387785][ T7862] RAX: ffffffffffffffda RBX: 00007f6bc7735fa0 RCX: 00007f6bc757e819 [ 244.395745][ T7862] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 244.403715][ T7862] RBP: 00007f6bc82d4090 R08: 0000000000000000 R09: 0000000000000000 [ 244.411664][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.419611][ T7862] R13: 0000000000000000 R14: 00007f6bc7735fa0 R15: 00007ffd6fedfa98 [ 244.427578][ T7862] [ 244.430592][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.484027][ T5879] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 245.490045][ T964] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 245.531711][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 245.546361][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 245.620605][ T5879] usb 4-1: device descriptor read/64, error -71 [ 245.972036][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 245.997085][ T5879] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 246.184018][ T5879] usb 4-1: device descriptor read/64, error -71 [ 246.207224][ T964] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.662729][ T5879] usb usb4-port1: attempt power cycle [ 246.839198][ T964] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.847447][ T964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.856443][ T964] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.867428][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 246.877497][ T964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 247.056629][ T964] usb 5-1: string descriptor 0 read error: -22 [ 247.067362][ T964] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 247.113035][ T964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.166965][ T964] usb 5-1: config 0 descriptor?? [ 247.174612][ T7874] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 247.189761][ T964] hub 5-1:0.0: bad descriptor, ignoring hub [ 247.196658][ T964] hub 5-1:0.0: probe with driver hub failed with error -5 [ 247.206415][ T964] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 247.245626][ T7898] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.397254][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 247.397275][ T29] audit: type=1400 audit(1732146903.746:476): avc: denied { append } for pid=7872 comm="syz.4.546" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 247.436808][ T29] audit: type=1400 audit(1732146903.746:477): avc: denied { ioctl } for pid=7872 comm="syz.4.546" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 247.438744][ T964] usb 5-1: USB disconnect, device number 16 [ 247.460950][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 248.320136][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 248.736790][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.981554][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 249.080609][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.089524][ T8] usb 2-1: config 1 has no interface number 0 [ 249.096228][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.112724][ T8] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 249.126818][ T8] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6A, changing to 0xA [ 249.170043][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0xA has invalid maxpacket 27928, setting to 1024 [ 249.191057][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 249.197011][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 249.204841][ T5879] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.212222][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.219977][ T5879] usb 4-1: config 0 has no interface number 0 [ 249.229728][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.240710][ T5879] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.252240][ T5879] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.259592][ T8] usb 2-1: Product: syz [ 249.262968][ T5879] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 249.269541][ T8] usb 2-1: Manufacturer: syz [ 249.281587][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.285967][ T8] usb 2-1: SerialNumber: syz [ 249.310378][ T5879] usb 4-1: config 0 descriptor?? [ 249.530939][ T7905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.709735][ T7936] binder: BINDER_SET_CONTEXT_MGR already set [ 249.716750][ T7936] binder: 7935:7936 ioctl 4018620d 200001c0 returned -16 [ 249.962680][ T7905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.041196][ T8] cdc_ncm 2-1:1.1: bind() failure [ 250.217424][ T5879] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 250.237724][ T5879] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 250.239924][ T8] usb 2-1: USB disconnect, device number 6 [ 250.254633][ T5879] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 250.273531][ T5879] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 250.298922][ T5879] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 250.335477][ T5879] usb 4-1: USB disconnect, device number 19 [ 250.522921][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 250.533548][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 252.030094][ T29] audit: type=1400 audit(1732146908.376:478): avc: denied { write } for pid=7958 comm="syz.0.576" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 252.359660][ T7972] netlink: 'syz.3.578': attribute type 21 has an invalid length. [ 252.732908][ T29] audit: type=1400 audit(1732146909.086:479): avc: denied { bind } for pid=7984 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.274140][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 254.344837][ T8006] netlink: 732 bytes leftover after parsing attributes in process `syz.1.590'. [ 254.354063][ T8006] netlink: 732 bytes leftover after parsing attributes in process `syz.1.590'. [ 254.925411][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'. [ 255.486086][ T8014] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.581687][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 256.650080][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 257.661714][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.668008][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.932887][ T8055] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.983303][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 258.154689][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 258.364712][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.375015][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.411825][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.438164][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.468776][ T5878] usb 2-1: Product: syz [ 258.475456][ T5878] usb 2-1: Manufacturer: syz [ 258.483220][ T5878] usb 2-1: SerialNumber: syz [ 258.777104][ T8065] syz.4.603 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.921680][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.080042][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 259.086717][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.097919][ T5879] usb 3-1: config 0 has no interface number 0 [ 259.117768][ T5878] usb 2-1: 0:2 : does not exist [ 259.123013][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.156514][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.193112][ T5879] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 259.328366][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.344690][ T5879] usb 3-1: config 0 descriptor?? [ 259.380850][ T5878] usb 2-1: USB disconnect, device number 7 [ 260.261196][ T5879] uclogic 0003:28BD:0071.0006: failed retrieving string descriptor #100: -71 [ 260.278839][ T5879] uclogic 0003:28BD:0071.0006: failed retrieving pen parameters: -71 [ 260.279293][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.287041][ T5879] uclogic 0003:28BD:0071.0006: pen probing failed: -71 [ 260.287089][ T5879] uclogic 0003:28BD:0071.0006: failed probing parameters: -71 [ 260.287172][ T5879] uclogic 0003:28BD:0071.0006: probe with driver uclogic failed with error -71 [ 260.295821][ T5879] usb 3-1: USB disconnect, device number 11 [ 262.320779][ T8102] netlink: 732 bytes leftover after parsing attributes in process `syz.1.619'. [ 262.329904][ T8102] netlink: 732 bytes leftover after parsing attributes in process `syz.1.619'. [ 262.990358][ T8107] netlink: 'syz.3.616': attribute type 21 has an invalid length. [ 263.670337][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 263.867784][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 263.915327][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 264.028834][ T8] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 264.110073][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.163238][ T8] usb 2-1: Product: syz [ 264.199861][ T8] usb 2-1: Manufacturer: syz [ 264.208381][ T8] usb 2-1: SerialNumber: syz [ 264.226449][ T8] usb 2-1: config 0 descriptor?? [ 264.241298][ T8118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.252474][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 264.266831][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 264.281776][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 264.647780][ T5878] usb 2-1: USB disconnect, device number 8 [ 264.653871][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 270.543450][ T29] audit: type=1400 audit(1732146926.896:480): avc: denied { ioctl } for pid=8197 comm="syz.1.650" path="socket:[16009]" dev="sockfs" ino=16009 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 270.576061][ T29] audit: type=1400 audit(1732146926.926:481): avc: denied { ioctl } for pid=8197 comm="syz.1.650" path="socket:[16011]" dev="sockfs" ino=16011 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.742855][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.259976][ C0] hrtimer: interrupt took 49429 ns [ 272.536137][ T29] audit: type=1326 audit(1732146928.886:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.0.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a337e819 code=0x0 [ 272.946803][ T8221] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 274.590792][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.711804][ T8247] netlink: 732 bytes leftover after parsing attributes in process `syz.2.662'. [ 274.721070][ T8247] netlink: 732 bytes leftover after parsing attributes in process `syz.2.662'. [ 275.217840][ T8246] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.458425][ T29] audit: type=1400 audit(1732146931.606:483): avc: denied { rename } for pid=8245 comm="syz.3.663" name="bus" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.488462][ T29] audit: type=1400 audit(1732146931.636:484): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 275.684177][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 275.693544][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 276.276759][ T29] audit: type=1400 audit(1732146932.626:485): avc: denied { map } for pid=8254 comm="syz.3.666" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 277.345595][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 277.376136][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 278.982244][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 279.437417][ T8290] netlink: 732 bytes leftover after parsing attributes in process `syz.4.677'. [ 279.447610][ T8290] netlink: 732 bytes leftover after parsing attributes in process `syz.4.677'. [ 279.645629][ T8291] bond0: entered promiscuous mode [ 279.651687][ T8291] bond_slave_0: entered promiscuous mode [ 279.658961][ T8291] bond_slave_1: entered promiscuous mode [ 279.667464][ T8291] macvlan2: entered promiscuous mode [ 279.678306][ T8291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.372600][ T29] audit: type=1326 audit(1732146937.726:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a337e819 code=0x0 [ 281.586361][ T8316] FAULT_INJECTION: forcing a failure. [ 281.586361][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 281.599429][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.4.684 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 281.609659][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 281.619700][ T8316] Call Trace: [ 281.622971][ T8316] [ 281.625888][ T8316] dump_stack_lvl+0x16c/0x1f0 [ 281.630562][ T8316] should_fail_ex+0x497/0x5b0 [ 281.635227][ T8316] should_failslab+0xc2/0x120 [ 281.639925][ T8316] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 281.645310][ T8316] ? skb_clone+0x190/0x3f0 [ 281.649725][ T8316] skb_clone+0x190/0x3f0 [ 281.653985][ T8316] dev_queue_xmit_nit+0x38f/0xba0 [ 281.659046][ T8316] dev_hard_start_xmit+0x56/0x790 [ 281.664092][ T8316] ? __dev_queue_xmit+0x252/0x4350 [ 281.669215][ T8316] __dev_queue_xmit+0x7c7/0x4350 [ 281.674187][ T8316] ? __pfx___dev_queue_xmit+0x10/0x10 [ 281.679586][ T8316] ? __asan_memcpy+0x3c/0x60 [ 281.684205][ T8316] ? __asan_memcpy+0x3c/0x60 [ 281.688791][ T8316] ? __skb_clone+0x570/0x760 [ 281.693378][ T8316] netlink_deliver_tap+0xa7d/0xd90 [ 281.698530][ T8316] netlink_unicast+0x5e1/0x7f0 [ 281.703338][ T8316] ? __pfx_netlink_unicast+0x10/0x10 [ 281.708649][ T8316] netlink_sendmsg+0x8b8/0xd70 [ 281.713427][ T8316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.718722][ T8316] __sys_sendto+0x488/0x4f0 [ 281.723225][ T8316] ? __pfx___sys_sendto+0x10/0x10 [ 281.728242][ T8316] ? reacquire_held_locks+0x20b/0x4c0 [ 281.733602][ T8316] ? do_user_addr_fault+0xdc7/0x13f0 [ 281.738893][ T8316] __x64_sys_sendto+0xe0/0x1c0 [ 281.743649][ T8316] ? do_syscall_64+0x91/0x250 [ 281.748312][ T8316] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.753528][ T8316] do_syscall_64+0xcd/0x250 [ 281.758040][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.763979][ T8316] RIP: 0033:0x7f1ee57806ac [ 281.768386][ T8316] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 281.787993][ T8316] RSP: 002b:00007f1ee6585ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 281.796412][ T8316] RAX: ffffffffffffffda RBX: 00007f1ee6585fc0 RCX: 00007f1ee57806ac [ 281.804413][ T8316] RDX: 0000000000000024 RSI: 00007f1ee6586010 RDI: 0000000000000007 [ 281.812405][ T8316] RBP: 0000000000000000 R08: 00007f1ee6585f14 R09: 000000000000000c [ 281.820386][ T8316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 281.828356][ T8316] R13: 00007f1ee6585f68 R14: 00007f1ee6586010 R15: 0000000000000000 [ 281.836350][ T8316] [ 282.210683][ T5879] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.410256][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 282.535999][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.558944][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 282.577301][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 282.580056][ T5879] usb 5-1: can't read configurations, error -71 [ 284.383368][ T8347] netlink: 732 bytes leftover after parsing attributes in process `syz.1.693'. [ 284.392466][ T8347] netlink: 732 bytes leftover after parsing attributes in process `syz.1.693'. [ 285.152067][ T8350] netlink: 732 bytes leftover after parsing attributes in process `syz.2.694'. [ 285.161222][ T8350] netlink: 732 bytes leftover after parsing attributes in process `syz.2.694'. [ 286.333774][ T8349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.340828][ T8349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.346841][ T8349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.352874][ T8349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.698852][ T29] audit: type=1326 audit(1732146943.046:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.4.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x0 [ 287.650219][ T964] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 287.833537][ T964] usb 4-1: Using ep0 maxpacket: 32 [ 287.860265][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 288.004005][ T964] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 288.062954][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.075970][ T964] usb 4-1: Product: syz [ 288.099211][ T964] usb 4-1: Manufacturer: syz [ 288.106181][ T964] usb 4-1: SerialNumber: syz [ 288.122087][ T964] usb 4-1: config 0 descriptor?? [ 288.133093][ T964] hub 4-1:0.0: bad descriptor, ignoring hub [ 288.147541][ T964] hub 4-1:0.0: probe with driver hub failed with error -5 [ 288.169199][ T964] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 288.326692][ T964] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 288.370918][ T8382] binder: 8381:8382 ioctl 4018620d 0 returned -22 [ 288.385223][ T964] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 288.420230][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.426409][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.432880][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.438996][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.005557][ T964] usb 4-1: USB disconnect, device number 20 [ 290.549226][ T8403] netlink: 'syz.1.711': attribute type 11 has an invalid length. [ 290.588976][ T8405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.798684][ T8411] block nbd1: shutting down sockets [ 291.073797][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 291.340182][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 291.355369][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 291.723859][ T8] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 291.733906][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.742024][ T8] usb 3-1: Product: syz [ 291.746206][ T8] usb 3-1: Manufacturer: syz [ 291.750913][ T8] usb 3-1: SerialNumber: syz [ 291.757873][ T8] usb 3-1: config 0 descriptor?? [ 291.828078][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 291.834676][ T8] hub 3-1:0.0: probe with driver hub failed with error -5 [ 291.901738][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 292.123687][ T8] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 292.140659][ T8] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 293.131601][ T8] usb 3-1: USB disconnect, device number 12 [ 294.823386][ T29] audit: type=1400 audit(1732146950.946:488): avc: denied { execute_no_trans } for pid=8444 comm="syz.0.724" path="/164/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 294.846650][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.357533][ T5838] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 296.497249][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 297.150306][ T964] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.178117][ T5878] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 297.199873][ T5878] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 297.295839][ T5878] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 297.341383][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.362493][ T5878] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 297.372533][ T964] usb 4-1: Using ep0 maxpacket: 8 [ 297.401041][ T964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 298.112975][ T29] audit: type=1400 audit(1732146954.466:489): avc: denied { setopt } for pid=8486 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.124517][ T5878] gspca_sn9c2028: read1 error -110 [ 298.138562][ T5878] gspca_sn9c2028: read1 error -32 [ 298.145380][ T5878] gspca_sn9c2028: read1 error -32 [ 298.150777][ T5878] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -32 [ 298.159999][ T964] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 298.169073][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.190131][ T964] usb 4-1: Product: syz [ 298.194356][ T964] usb 4-1: Manufacturer: syz [ 298.198983][ T964] usb 4-1: SerialNumber: syz [ 298.226829][ T964] usb 4-1: config 0 descriptor?? [ 298.236377][ T964] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 298.346927][ T8495] Bluetooth: MGMT ver 1.23 [ 298.476912][ T8499] netlink: 'syz.4.738': attribute type 16 has an invalid length. [ 298.485556][ T8499] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.738'. [ 298.893349][ T5880] usb 3-1: USB disconnect, device number 13 [ 299.496613][ T964] gspca_zc3xx: reg_w_i err -71 [ 299.901354][ T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.138435][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 300.185080][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 300.300202][ T964] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 300.302619][ T51] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 300.306536][ T964] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 300.335330][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.340207][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 300.349163][ T51] usb 3-1: Product: syz [ 300.357334][ T51] usb 3-1: Manufacturer: syz [ 300.383188][ T51] usb 3-1: SerialNumber: syz [ 300.420523][ T964] usb 4-1: USB disconnect, device number 21 [ 300.521734][ T51] usb 3-1: config 0 descriptor?? [ 300.577857][ T51] hub 3-1:0.0: bad descriptor, ignoring hub [ 300.638046][ T51] hub 3-1:0.0: probe with driver hub failed with error -5 [ 300.870533][ T8528] netlink: 732 bytes leftover after parsing attributes in process `syz.3.747'. [ 300.879544][ T8528] netlink: 732 bytes leftover after parsing attributes in process `syz.3.747'. [ 301.022872][ T8530] netlink: 'syz.0.746': attribute type 8 has an invalid length. [ 301.568778][ T51] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 301.645420][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 302.329742][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.368079][ T5878] usb 2-1: config 1 interface 0 altsetting 11 endpoint 0x1 has invalid maxpacket 34836, setting to 1024 [ 302.380052][ T51] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 302.403241][ T5878] usb 2-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 1024 [ 302.457387][ T51] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 302.464768][ T5878] usb 2-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 8 [ 302.495739][ T5878] usb 2-1: config 1 interface 0 has no altsetting 0 [ 302.516118][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 302.784965][ T8531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.791101][ T8531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.797598][ T8531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.803685][ T8531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.001956][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.010086][ T5878] usb 2-1: Product: ъ [ 303.014174][ T5878] usb 2-1: Manufacturer: Ѕ [ 303.018664][ T5878] usb 2-1: SerialNumber:  [ 303.113764][ T51] usb 3-1: USB disconnect, device number 14 [ 303.180499][ T5878] usb 2-1: can't set config #1, error -71 [ 303.229072][ T5878] usb 2-1: USB disconnect, device number 9 [ 303.670501][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 304.500370][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.786297][ T8566] ALSA: mixer_oss: invalid OSS volume 'u' [ 305.580251][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.587416][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.593964][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.602130][ T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 305.930198][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 305.936952][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.959647][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.022377][ T51] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.044110][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.053203][ T51] usb 1-1: Product: syz [ 306.058517][ T51] usb 1-1: Manufacturer: syz [ 306.078579][ T51] usb 1-1: SerialNumber: syz [ 306.185497][ T29] audit: type=1400 audit(1732146962.536:490): avc: denied { ioctl } for pid=8580 comm="syz.3.763" path="socket:[18757]" dev="sockfs" ino=18757 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 306.410185][ T5879] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 306.587007][ T51] usb 1-1: 0:2 : does not exist [ 306.613749][ T5879] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50 [ 306.658653][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.724370][ T51] usb 1-1: USB disconnect, device number 12 [ 306.770458][ T5879] usb 2-1: Product: syz [ 306.774668][ T5879] usb 2-1: Manufacturer: syz [ 306.779274][ T5879] usb 2-1: SerialNumber: syz [ 306.850082][ T5879] usb 2-1: config 0 descriptor?? [ 306.866742][ T5879] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 306.993518][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.089148][ T51] usb 2-1: USB disconnect, device number 10 [ 308.390233][ T29] audit: type=1400 audit(1732146964.676:491): avc: denied { read } for pid=8593 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.577659][ T5831] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 310.140983][ T8619] netlink: 'syz.0.771': attribute type 21 has an invalid length. [ 310.237809][ T8622] netlink: 'syz.4.773': attribute type 21 has an invalid length. [ 310.420694][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.464467][ T964] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 310.621510][ T964] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 310.632532][ T964] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 310.653127][ T964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.247527][ T964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 311.259892][ T964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 311.392043][ T964] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.440061][ T964] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.448129][ T964] usb 4-1: Product: syz [ 311.452443][ T964] usb 4-1: Manufacturer: syz [ 311.503516][ T964] cdc_wdm 4-1:1.0: skipping garbage [ 311.508741][ T964] cdc_wdm 4-1:1.0: skipping garbage [ 311.514270][ T964] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 311.660162][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 311.810295][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 311.819538][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.827968][ T5878] usb 3-1: config 0 has no interface number 0 [ 311.835465][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.846645][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.857549][ T5878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 311.867088][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.886892][ T5878] usb 3-1: config 0 descriptor?? [ 313.447049][ T5878] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0007/input/input22 [ 313.506443][ T5878] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0007/input/input23 [ 313.523717][ T5878] uclogic 0003:28BD:0071.0007: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 313.767971][ T8648] netlink: 732 bytes leftover after parsing attributes in process `syz.1.780'. [ 313.777227][ T8648] netlink: 732 bytes leftover after parsing attributes in process `syz.1.780'. [ 314.252266][ T5878] usb 3-1: USB disconnect, device number 15 [ 314.435650][ T29] audit: type=1400 audit(1732146970.786:492): avc: denied { write } for pid=8652 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.692045][ T51] usb 4-1: USB disconnect, device number 22 [ 314.816262][ T8649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.822523][ T8649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.828613][ T8649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.834790][ T8649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.000275][ T51] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 316.177254][ T8673] netlink: 'syz.3.788': attribute type 21 has an invalid length. [ 316.185137][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.230733][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.280140][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 316.289252][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 316.301604][ T51] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 316.316729][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.348702][ T51] usb 1-1: Product: syz [ 316.366611][ T51] usb 1-1: Manufacturer: syz [ 316.379007][ T51] usb 1-1: SerialNumber: syz [ 316.380065][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 316.401061][ T51] usb 1-1: config 0 descriptor?? [ 316.419666][ T51] hub 1-1:0.0: bad descriptor, ignoring hub [ 316.432604][ T51] hub 1-1:0.0: probe with driver hub failed with error -5 [ 316.459906][ T5878] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.472421][ T5878] usb 5-1: config 0 has no interface number 0 [ 316.476038][ T51] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 316.483070][ T5878] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.535635][ T51] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 316.570083][ T5878] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.574851][ T51] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 316.685858][ T51] usb 1-1: USB disconnect, device number 13 [ 316.693325][ T29] audit: type=1400 audit(1732146973.046:493): avc: denied { ioctl } for pid=8678 comm="syz.1.789" path="socket:[18193]" dev="sockfs" ino=18193 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.717771][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.729273][ T5878] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 316.796293][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.901008][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.901032][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 316.901121][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.280709][ T5878] usb 5-1: config 0 descriptor?? [ 318.172208][ T5878] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0008/input/input25 [ 318.245723][ T5878] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0008/input/input26 [ 318.289459][ T5878] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 318.398661][ T5878] usb 5-1: USB disconnect, device number 19 [ 318.517076][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.523596][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.019069][ T8702] lo speed is unknown, defaulting to 1000 [ 319.025812][ T8702] lo speed is unknown, defaulting to 1000 [ 319.038956][ T8702] lo speed is unknown, defaulting to 1000 [ 319.061736][ T8702] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 319.099440][ T8702] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 319.166969][ T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 319.217534][ T8702] lo speed is unknown, defaulting to 1000 [ 319.232246][ T8702] lo speed is unknown, defaulting to 1000 [ 319.244440][ T8702] lo speed is unknown, defaulting to 1000 [ 319.256605][ T8702] lo speed is unknown, defaulting to 1000 [ 319.268810][ T8702] lo speed is unknown, defaulting to 1000 [ 319.279456][ T8702] lo speed is unknown, defaulting to 1000 [ 319.460072][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.537544][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 319.544830][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.604841][ T29] audit: type=1400 audit(1732146975.936:494): avc: denied { read } for pid=8703 comm="syz.4.797" path="socket:[18252]" dev="sockfs" ino=18252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.641089][ T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.665985][ T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.675940][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.685363][ T51] usb 2-1: Product: syz [ 319.710378][ T51] usb 2-1: Manufacturer: syz [ 319.730616][ T51] usb 2-1: SerialNumber: syz [ 319.818177][ T8712] lo speed is unknown, defaulting to 1000 [ 320.077920][ T5879] IPVS: starting estimator thread 0... [ 320.193227][ T8720] IPVS: using max 25 ests per chain, 60000 per kthread [ 320.514935][ T51] usb 2-1: 0:2 : does not exist [ 320.520144][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 320.582893][ T51] usb 2-1: USB disconnect, device number 11 [ 320.680736][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 320.729178][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.737739][ T5878] usb 3-1: config 0 has no interface number 0 [ 320.744481][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.755682][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.765722][ T5878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 320.775087][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.797556][ T5878] usb 3-1: config 0 descriptor?? [ 320.890152][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.935900][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 320.959360][ T8731] netlink: 'syz.4.806': attribute type 21 has an invalid length. [ 321.140088][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 321.163802][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 321.198844][ T5906] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 321.210136][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.218508][ T5906] usb 4-1: Product: syz [ 321.223212][ T5906] usb 4-1: Manufacturer: syz [ 321.230090][ T5906] usb 4-1: SerialNumber: syz [ 321.244337][ T5906] usb 4-1: config 0 descriptor?? [ 321.287954][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub [ 321.294729][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5 [ 321.309032][ T5906] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 321.340396][ T5906] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 321.367747][ T5906] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 321.591258][ T5878] uclogic 0003:28BD:0071.0009: failed retrieving string descriptor #100: -71 [ 321.602282][ T5878] uclogic 0003:28BD:0071.0009: failed retrieving pen parameters: -71 [ 321.612232][ T5906] usb 4-1: USB disconnect, device number 23 [ 321.653140][ T5878] uclogic 0003:28BD:0071.0009: pen probing failed: -71 [ 321.667134][ T5878] uclogic 0003:28BD:0071.0009: failed probing parameters: -71 [ 321.675392][ T5878] uclogic 0003:28BD:0071.0009: probe with driver uclogic failed with error -71 [ 321.870374][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 321.891532][ T5878] usb 3-1: USB disconnect, device number 16 [ 322.066263][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 322.170534][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.255745][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.287981][ T5843] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.346352][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.355845][ T5843] usb 1-1: Product: syz [ 322.361496][ T5843] usb 1-1: Manufacturer: syz [ 322.366244][ T5843] usb 1-1: SerialNumber: syz [ 322.493974][ T8746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.812'. [ 322.527155][ T29] audit: type=1400 audit(1732146978.876:495): avc: denied { read } for pid=8745 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.594770][ T5843] usb 1-1: 0:2 : does not exist [ 322.740275][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 322.761981][ T5843] usb 1-1: USB disconnect, device number 14 [ 322.920443][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 323.363523][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.388592][ T8754] lo speed is unknown, defaulting to 1000 [ 323.393841][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.402816][ T5881] usb 2-1: config 0 has no interface number 0 [ 323.412523][ T5881] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.423779][ T5881] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.434536][ T5881] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 323.520872][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.541928][ T5881] usb 2-1: config 0 descriptor?? [ 323.883095][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 323.893770][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 324.265156][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 324.309829][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'. [ 324.367672][ T5881] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000A/input/input28 [ 325.157229][ T5881] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000A/input/input29 [ 325.226914][ T29] audit: type=1400 audit(1732146981.566:496): avc: denied { mount } for pid=8775 comm="syz.4.821" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 325.461322][ T29] audit: type=1400 audit(1732146981.656:497): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 325.604923][ T5881] uclogic 0003:28BD:0071.000A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 326.219343][ T5881] usb 2-1: USB disconnect, device number 12 [ 326.480426][ T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 326.632980][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 326.655167][ T51] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.689475][ T51] usb 1-1: config 0 has no interface number 0 [ 326.746256][ T51] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.789111][ T51] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.817563][ T51] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 326.847345][ T8797] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.863958][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.881068][ T51] usb 1-1: config 0 descriptor?? [ 327.332792][ T8807] FAULT_INJECTION: forcing a failure. [ 327.332792][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 327.351313][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.1.831 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 327.361600][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 327.371666][ T8807] Call Trace: [ 327.374946][ T8807] [ 327.377893][ T8807] dump_stack_lvl+0x16c/0x1f0 [ 327.382595][ T8807] should_fail_ex+0x497/0x5b0 [ 327.387292][ T8807] should_failslab+0xc2/0x120 [ 327.391982][ T8807] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 327.397361][ T8807] ? skb_clone+0x190/0x3f0 [ 327.401783][ T8807] skb_clone+0x190/0x3f0 [ 327.406041][ T8807] netlink_deliver_tap+0xab3/0xd90 [ 327.411169][ T8807] netlink_unicast+0x5e1/0x7f0 [ 327.416056][ T8807] ? __pfx_netlink_unicast+0x10/0x10 [ 327.421378][ T8807] netlink_sendmsg+0x8b8/0xd70 [ 327.426167][ T8807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.431483][ T8807] ____sys_sendmsg+0xaaf/0xc90 [ 327.436285][ T8807] ? copy_msghdr_from_user+0x10b/0x160 [ 327.441765][ T8807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.447096][ T8807] ___sys_sendmsg+0x135/0x1e0 [ 327.451803][ T8807] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.457039][ T8807] ? __pfx_lock_release+0x10/0x10 [ 327.462082][ T8807] ? trace_lock_acquire+0x14a/0x1d0 [ 327.467319][ T8807] ? __fget_files+0x206/0x3a0 [ 327.472032][ T8807] __sys_sendmsg+0x16e/0x220 [ 327.476641][ T8807] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.481771][ T8807] do_syscall_64+0xcd/0x250 [ 327.486278][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.492194][ T8807] RIP: 0033:0x7f6bc757e819 [ 327.496619][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.516241][ T8807] RSP: 002b:00007f6bc82d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.524688][ T8807] RAX: ffffffffffffffda RBX: 00007f6bc7735fa0 RCX: 00007f6bc757e819 [ 327.532741][ T8807] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 327.540734][ T8807] RBP: 00007f6bc82d4090 R08: 0000000000000000 R09: 0000000000000000 [ 327.548724][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.556728][ T8807] R13: 0000000000000000 R14: 00007f6bc7735fa0 R15: 00007ffd6fedfa98 [ 327.564737][ T8807] [ 328.312450][ T5831] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 328.398848][ T8807] tipc: Failed to obtain node identity [ 328.439575][ T8807] tipc: Enabling of bearer rejected, failed to enable media [ 328.557426][ T51] uclogic 0003:28BD:0071.000B: pen parameters not found [ 328.564878][ T51] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring [ 328.677358][ T29] audit: type=1326 audit(1732146985.026:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.3.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619217e819 code=0x0 [ 328.715502][ T29] audit: type=1400 audit(1732146985.066:499): avc: denied { write } for pid=8818 comm="syz.1.833" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 328.732671][ T8823] pim6reg527: entered allmulticast mode [ 328.832775][ T5906] usb 1-1: USB disconnect, device number 15 [ 329.532328][ T5906] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 330.160166][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 330.166973][ T5906] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.177315][ T5906] usb 5-1: config 0 has no interface number 0 [ 330.191051][ T5906] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.214128][ T5906] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.229043][ T5906] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 330.246986][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.265155][ T5906] usb 5-1: config 0 descriptor?? [ 330.945898][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.983381][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 331.798287][ T5906] uclogic 0003:28BD:0071.000C: pen parameters not found [ 331.814465][ T5906] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 331.874034][ T5906] usb 5-1: USB disconnect, device number 20 [ 332.058735][ T29] audit: type=1326 audit(1732146988.406:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.0.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a337e819 code=0x0 [ 332.487777][ T8887] netlink: 732 bytes leftover after parsing attributes in process `syz.2.855'. [ 332.498239][ T8887] netlink: 732 bytes leftover after parsing attributes in process `syz.2.855'. [ 332.787051][ T8892] lo speed is unknown, defaulting to 1000 [ 333.585948][ T8887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.592364][ T8887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.599274][ T8887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.606134][ T8887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.873144][ T5843] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 333.881606][ T5881] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.050085][ T5843] usb 1-1: Invalid ep0 maxpacket: 64 [ 334.060197][ T5881] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 334.095530][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.121702][ T5881] usb 5-1: config 0 descriptor?? [ 334.135620][ T5881] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 334.220255][ T5843] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 334.237714][ T8921] Invalid logical block size (3328) [ 334.380142][ T5843] usb 1-1: Invalid ep0 maxpacket: 64 [ 334.394636][ T5843] usb usb1-port1: attempt power cycle [ 334.419593][ T8923] netlink: 'syz.2.867': attribute type 10 has an invalid length. [ 334.506088][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.563303][ T29] audit: type=1400 audit(1732146990.916:501): avc: denied { create } for pid=8924 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.588535][ T8923] team0: Port device batadv0 added [ 334.783534][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.860655][ T5843] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 334.941409][ T29] audit: type=1400 audit(1732146990.936:502): avc: denied { connect } for pid=8924 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.180701][ T5843] usb 1-1: Invalid ep0 maxpacket: 64 [ 335.192552][ T29] audit: type=1400 audit(1732146991.546:503): avc: denied { read write } for pid=8922 comm="syz.2.867" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.224067][ T29] audit: type=1400 audit(1732146991.546:504): avc: denied { open } for pid=8922 comm="syz.2.867" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.532038][ T5843] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 335.571502][ T8923] nbd2: detected capacity change from 0 to 8 [ 335.581422][ T5843] usb 1-1: Invalid ep0 maxpacket: 64 [ 335.588426][ T5843] usb usb1-port1: unable to enumerate USB device [ 335.595823][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.607597][ T8925] block nbd2: shutting down sockets [ 335.620163][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.620344][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.626268][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.633874][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.670403][ T1062] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.679994][ T1062] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.694485][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.705105][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.718905][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.728930][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.738275][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.750187][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.758474][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.770736][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.779092][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.788293][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.797320][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.810351][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.818299][ T6438] ldm_validate_partition_table(): Disk read failed. [ 335.829552][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.839754][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.849230][ T6438] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.858783][ T6438] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.873522][ T6438] Dev nbd2: unable to read RDB block 0 [ 335.879710][ T6438] nbd2: unable to read partition table [ 335.886890][ T6438] nbd2: partition table beyond EOD, truncated [ 335.906844][ T6438] ldm_validate_partition_table(): Disk read failed. [ 335.925492][ T6438] Dev nbd2: unable to read RDB block 0 [ 335.940714][ T6438] nbd2: unable to read partition table [ 335.972718][ T6438] nbd2: partition table beyond EOD, truncated [ 336.075609][ T29] audit: type=1326 audit(1732146992.426:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x0 [ 336.198311][ T8938] lo speed is unknown, defaulting to 1000 [ 336.659395][ T8948] netlink: 732 bytes leftover after parsing attributes in process `syz.3.873'. [ 336.668659][ T8948] netlink: 732 bytes leftover after parsing attributes in process `syz.3.873'. [ 337.131883][ T5906] usb 5-1: USB disconnect, device number 21 [ 337.717451][ T8948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.726425][ T8948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.737591][ T8948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.745122][ T8948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.209109][ T8969] kvm: apic: phys broadcast and lowest prio [ 338.390076][ T5906] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.540140][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 338.547371][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.555996][ T5906] usb 3-1: config 0 has no interface number 0 [ 338.566170][ T8976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65 sclass=netlink_tcpdiag_socket pid=8976 comm=syz.1.882 [ 338.566373][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.590324][ T8976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=8976 comm=syz.1.882 [ 338.595522][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.634618][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 338.644663][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.673927][ T5906] usb 3-1: config 0 descriptor?? [ 338.940356][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.223388][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.261223][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 339.533498][ T29] audit: type=1400 audit(1732146995.726:506): avc: denied { write } for pid=8985 comm="syz.3.885" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 339.535119][ T8989] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 339.812490][ T5906] uclogic 0003:28BD:0071.000D: pen parameters not found [ 339.819540][ T5906] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 339.860447][ T5906] usb 3-1: USB disconnect, device number 17 [ 339.860721][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.873325][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.879326][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.062998][ T8] usb 2-1: config index 0 descriptor too short (expected 8457, got 36) [ 340.072214][ T8] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 340.083209][ T8] usb 2-1: config 0 has no interfaces? [ 340.089669][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 340.099078][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.217891][ T8] usb 2-1: config 0 descriptor?? [ 340.327413][ T8998] netlink: 732 bytes leftover after parsing attributes in process `syz.4.888'. [ 340.336774][ T8998] netlink: 732 bytes leftover after parsing attributes in process `syz.4.888'. [ 340.923116][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 341.090557][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 341.097989][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 341.113594][ T5843] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 341.122748][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.133576][ T5843] usb 4-1: Product: syz [ 341.137853][ T5843] usb 4-1: Manufacturer: syz [ 341.142697][ T5843] usb 4-1: SerialNumber: syz [ 341.168539][ T5843] usb 4-1: config 0 descriptor?? [ 341.176570][ T5843] hub 4-1:0.0: bad descriptor, ignoring hub [ 341.182795][ T5843] hub 4-1:0.0: probe with driver hub failed with error -5 [ 341.211268][ T5843] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 341.238822][ T5843] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 341.264791][ T5843] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 341.436781][ T8999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.443255][ T8999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.449315][ T8999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.455711][ T8999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.490438][ T5843] usb 4-1: USB disconnect, device number 24 [ 341.554073][ T9006] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 341.566379][ T9004] IPVS: stopping backup sync thread 9006 ... [ 341.730693][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 341.970660][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 342.023125][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 342.039936][ T5881] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 342.058071][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.060233][ T29] audit: type=1400 audit(1732146998.386:507): avc: denied { read write } for pid=9014 comm="syz.0.892" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 342.069554][ T5881] usb 3-1: Product: syz [ 342.091162][ T29] audit: type=1400 audit(1732146998.386:508): avc: denied { open } for pid=9014 comm="syz.0.892" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 342.120238][ T29] audit: type=1400 audit(1732146998.386:509): avc: denied { ioctl } for pid=9014 comm="syz.0.892" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 342.120787][ T5881] usb 3-1: Manufacturer: syz [ 342.258005][ T5881] usb 3-1: SerialNumber: syz [ 342.267397][ T8] usb 2-1: USB disconnect, device number 13 [ 342.311414][ T5881] usb 3-1: config 0 descriptor?? [ 342.356920][ T29] audit: type=1400 audit(1732146998.706:510): avc: denied { ioctl } for pid=9014 comm="syz.0.892" path="socket:[20078]" dev="sockfs" ino=20078 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 342.357664][ T5881] hub 3-1:0.0: bad descriptor, ignoring hub [ 342.390265][ T5881] hub 3-1:0.0: probe with driver hub failed with error -5 [ 342.401045][ T5881] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 342.413592][ T29] audit: type=1400 audit(1732146998.736:511): avc: denied { write } for pid=9014 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 342.438050][ T29] audit: type=1400 audit(1732146998.786:512): avc: denied { write } for pid=5189 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.463114][ T29] audit: type=1400 audit(1732146998.786:513): avc: denied { remove_name } for pid=5189 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.486748][ T29] audit: type=1400 audit(1732146998.786:514): avc: denied { add_name } for pid=5189 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.524058][ T5881] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 343.004214][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 343.019560][ T5881] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 343.082724][ T5881] usb 3-1: USB disconnect, device number 18 [ 343.600493][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 343.606683][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 343.612816][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 343.638104][ T29] audit: type=1400 audit(1732146999.956:515): avc: denied { mount } for pid=9027 comm="syz.3.895" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 344.000062][ T51] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 344.185689][ T51] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 344.205803][ T51] usb 4-1: config 0 has no interface number 0 [ 344.221444][ T51] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.276448][ T51] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 344.288356][ T51] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 344.299588][ T51] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 344.312660][ T51] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.332238][ T51] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 344.457291][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.477361][ T51] usb 4-1: Product: syz [ 344.482578][ T51] usb 4-1: Manufacturer: syz [ 344.487792][ T51] usb 4-1: SerialNumber: syz [ 345.125143][ T51] usb 4-1: config 0 descriptor?? [ 345.143918][ T9028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.192031][ T51] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 345.650171][ T51] scsi host1: usb-storage 4-1:0.189 [ 346.036562][ T51] usb 4-1: USB disconnect, device number 25 [ 346.710067][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 346.710084][ T29] audit: type=1400 audit(1732147003.036:517): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 346.956784][ T29] audit: type=1400 audit(1732147003.306:518): avc: denied { bind } for pid=9076 comm="syz.0.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.682139][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 347.714417][ T29] audit: type=1326 audit(1732147004.066:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.2.911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x0 [ 347.876007][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 348.140334][ T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 348.184929][ T29] audit: type=1400 audit(1732147004.486:520): avc: denied { ioctl } for pid=9106 comm="syz.0.916" path="socket:[20601]" dev="sockfs" ino=20601 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.814029][ T29] audit: type=1400 audit(1732147004.486:521): avc: denied { bind } for pid=9106 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.847806][ T5145] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 349.060754][ T51] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 349.169600][ T9115] netlink: 732 bytes leftover after parsing attributes in process `syz.2.917'. [ 349.178814][ T9115] netlink: 732 bytes leftover after parsing attributes in process `syz.2.917'. [ 349.643978][ T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.653705][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.661946][ T51] usb 2-1: Product: syz [ 349.666154][ T51] usb 2-1: Manufacturer: syz [ 349.670933][ T51] usb 2-1: SerialNumber: syz [ 349.773108][ T29] audit: type=1400 audit(1732147006.126:522): avc: denied { call } for pid=9117 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 349.791839][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.149448][ T9133] netlink: 'syz.0.921': attribute type 21 has an invalid length. [ 350.683043][ T9137] netlink: 64 bytes leftover after parsing attributes in process `syz.2.923'. [ 350.694850][ T9137] x_tables: duplicate underflow at hook 4 [ 350.701925][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.923'. [ 350.711363][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 351.414855][ T51] cdc_ncm 2-1:1.0: failed to get mac address [ 351.425593][ T51] cdc_ncm 2-1:1.0: bind() failure [ 351.435477][ T51] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 351.447969][ T51] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 351.467350][ T51] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 351.491867][ T51] usb 2-1: USB disconnect, device number 14 [ 352.780198][ T5145] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 352.826922][ T29] audit: type=1400 audit(1732147009.156:523): avc: denied { append } for pid=9164 comm="syz.0.930" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.162345][ T9174] netlink: 68 bytes leftover after parsing attributes in process `syz.3.929'. [ 354.639050][ T9166] syz.2.931: attempt to access beyond end of device [ 354.639050][ T9166] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 354.652619][ T9166] syz.2.931: attempt to access beyond end of device [ 354.652619][ T9166] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 354.665727][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 354.675507][ T9166] syz.2.931: attempt to access beyond end of device [ 354.675507][ T9166] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 354.688454][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 354.699019][ T9166] syz.2.931: attempt to access beyond end of device [ 354.699019][ T9166] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 354.712428][ T9166] syz.2.931: attempt to access beyond end of device [ 354.712428][ T9166] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 354.725344][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 354.735061][ T9166] syz.2.931: attempt to access beyond end of device [ 354.735061][ T9166] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 354.749276][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 354.759052][ T9166] syz.2.931: attempt to access beyond end of device [ 354.759052][ T9166] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 354.771963][ T9166] syz.2.931: attempt to access beyond end of device [ 354.771963][ T9166] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 354.785137][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 354.794780][ T9166] syz.2.931: attempt to access beyond end of device [ 354.794780][ T9166] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 354.807842][ T9166] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 354.817843][ T9166] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 354.962277][ T5881] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.227447][ T9192] netlink: 732 bytes leftover after parsing attributes in process `syz.3.933'. [ 355.236549][ T9192] netlink: 732 bytes leftover after parsing attributes in process `syz.3.933'. [ 356.010141][ T29] audit: type=1400 audit(1732147011.786:524): avc: denied { remount } for pid=9188 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 356.105238][ T5881] usb 2-1: device descriptor read/64, error -71 [ 356.240208][ T51] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 356.350245][ T5881] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 356.496992][ T51] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.509999][ T51] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 356.525373][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.535674][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 356.557036][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 356.572280][ T51] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.590586][ T5881] usb 2-1: device descriptor read/64, error -71 [ 356.617770][ T51] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.637693][ T51] usb 5-1: Product: syz [ 356.644263][ T51] usb 5-1: Manufacturer: syz [ 356.657774][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 356.665834][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 356.690596][ T51] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 356.700558][ T5881] usb usb2-port1: attempt power cycle [ 356.709007][ T51] cdc_wdm 5-1:1.0: Unknown control protocol [ 356.715159][ T5879] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 356.752259][ T9203] mmap: syz.3.940 (9203) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 356.766705][ T5838] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 356.771734][ T29] audit: type=1400 audit(1732147013.126:525): avc: denied { watch watch_reads } for pid=9201 comm="syz.3.940" path="/proc/594" dev="proc" ino=20371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 356.810765][ T5838] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 356.902046][ T5879] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.918887][ T5879] usb 1-1: config 0 has no interface number 0 [ 356.924309][ T5878] usb 5-1: USB disconnect, device number 22 [ 356.931267][ T5879] usb 1-1: config 0 interface 67 has no altsetting 0 [ 356.940009][ T5879] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d [ 356.949149][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.957943][ T5879] usb 1-1: Product: syz [ 356.964770][ T5879] usb 1-1: Manufacturer: syz [ 356.969419][ T5879] usb 1-1: SerialNumber: syz [ 356.982882][ T5879] usb 1-1: config 0 descriptor?? [ 356.993133][ T5879] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 357.006206][ T5879] usb 1-1: setting power ON [ 357.013366][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 357.028324][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 357.041468][ T5881] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 357.058818][ T5879] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 357.079246][ T5881] usb 2-1: device descriptor read/8, error -71 [ 357.086180][ T5879] dvb_usb_cxusb 1-1:0.67: probe with driver dvb_usb_cxusb failed with error -22 [ 357.100412][ T51] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 357.190168][ T5906] usb 1-1: USB disconnect, device number 20 [ 357.270104][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 357.278930][ T51] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.287751][ T51] usb 4-1: config 0 has no interface number 0 [ 357.294169][ T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.305505][ T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.315338][ T51] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 357.324672][ T5881] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 357.332478][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.343199][ T51] usb 4-1: config 0 descriptor?? [ 357.360803][ T5881] usb 2-1: device descriptor read/8, error -71 [ 357.380410][ T5878] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 357.480523][ T5881] usb usb2-port1: unable to enumerate USB device [ 357.530122][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 357.537206][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 357.549185][ T5878] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 357.561897][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.570102][ T5878] usb 5-1: Product: syz [ 357.574329][ T5878] usb 5-1: Manufacturer: syz [ 357.579676][ T5878] usb 5-1: SerialNumber: syz [ 357.587707][ T5878] usb 5-1: config 0 descriptor?? [ 357.595214][ T5878] hub 5-1:0.0: bad descriptor, ignoring hub [ 357.604043][ T5878] hub 5-1:0.0: probe with driver hub failed with error -5 [ 357.615849][ T5878] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 357.641517][ T5878] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 357.663060][ T5878] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 358.237242][ T5878] usb 5-1: USB disconnect, device number 23 [ 358.243859][ T29] audit: type=1400 audit(1732147014.526:526): avc: denied { map } for pid=9211 comm="syz.1.943" path="socket:[20810]" dev="sockfs" ino=20810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 358.486690][ T9218] fuse: Bad value for 'fd' [ 359.460271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.572813][ T51] uclogic 0003:28BD:0071.000E: pen parameters not found [ 359.580044][ T51] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 359.631966][ T9227] netlink: 'syz.1.946': attribute type 3 has an invalid length. [ 359.995448][ T51] usb 4-1: USB disconnect, device number 26 [ 361.166813][ T9234] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 361.881510][ T9250] netlink: 732 bytes leftover after parsing attributes in process `syz.2.951'. [ 361.890817][ T9250] netlink: 732 bytes leftover after parsing attributes in process `syz.2.951'. [ 362.640236][ T5843] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 362.790820][ T29] audit: type=1400 audit(1732147019.136:527): avc: denied { ioctl } for pid=9245 comm="syz.3.952" path="socket:[21548]" dev="sockfs" ino=21548 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 362.826159][ T5843] usb 2-1: device descriptor read/64, error -71 [ 362.957894][ T9251] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.964011][ T9251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.970130][ T9251] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.976141][ T9251] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.217099][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 363.226936][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'. [ 363.360290][ T5843] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 363.670056][ T5843] usb 2-1: device descriptor read/64, error -71 [ 363.780650][ T5843] usb usb2-port1: attempt power cycle [ 363.980083][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 364.000817][ T9265] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.899639][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.932869][ T9272] netlink: 'syz.0.958': attribute type 3 has an invalid length. [ 364.963209][ T5843] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 365.260305][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.273524][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.287978][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.331608][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.341822][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.351179][ T5843] usb 2-1: device descriptor read/8, error -71 [ 365.363307][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.372489][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.400177][ T5879] usb 3-1: SerialNumber: syz [ 365.522618][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.538794][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.554073][ T9283] binder: BINDER_SET_CONTEXT_MGR already set [ 365.561533][ T9283] binder: 9279:9283 ioctl 4018620d 20000200 returned -16 [ 365.615782][ T29] audit: type=1400 audit(1732147021.966:528): avc: denied { map } for pid=9260 comm="syz.2.956" path="pipe:[20883]" dev="pipefs" ino=20883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 365.720119][ T5906] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.720296][ T51] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 365.870204][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 365.879103][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 365.898912][ T5906] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 365.910078][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 365.921608][ T51] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.922555][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.929730][ T51] usb 1-1: config 0 has no interface number 0 [ 365.929783][ T51] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.955979][ T51] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.966828][ T51] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 365.972268][ T5906] usb 4-1: Product: syz [ 365.981056][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.012703][ T9292] netlink: 'syz.4.965': attribute type 21 has an invalid length. [ 366.015269][ T51] usb 1-1: config 0 descriptor?? [ 366.039040][ T5906] usb 4-1: Manufacturer: syz [ 366.286351][ T5906] usb 4-1: SerialNumber: syz [ 366.493074][ T5906] usb 4-1: config 0 descriptor?? [ 366.503398][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub [ 366.510513][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5 [ 366.525254][ T5906] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 366.540808][ T5906] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 366.558479][ T5906] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 366.812078][ T51] usbhid 1-1:0.1: can't add hid device: -71 [ 366.840733][ T9301] netlink: 'syz.4.967': attribute type 21 has an invalid length. [ 366.843395][ T51] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 366.873735][ T5906] usb 4-1: USB disconnect, device number 27 [ 366.975913][ T51] usb 1-1: USB disconnect, device number 21 [ 367.794887][ T29] audit: type=1400 audit(1732147024.146:529): avc: denied { bind } for pid=9303 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.230228][ T29] audit: type=1400 audit(1732147024.176:530): avc: denied { write } for pid=9303 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.249580][ T29] audit: type=1400 audit(1732147024.176:531): avc: denied { audit_write } for pid=9303 comm="syz.4.968" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 369.225034][ T5879] usb 3-1: 0:2 : does not exist [ 369.317391][ T5879] usb 3-1: USB disconnect, device number 19 [ 369.364407][ T51] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.446720][ T9321] fuse: Bad value for 'fd' [ 369.520196][ T51] usb 5-1: device descriptor read/64, error -71 [ 369.710935][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.821196][ T9333] netlink: 732 bytes leftover after parsing attributes in process `syz.3.976'. [ 369.830394][ T9333] netlink: 732 bytes leftover after parsing attributes in process `syz.3.976'. [ 370.316510][ T51] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 370.432673][ T9337] fuse: Bad value for 'fd' [ 370.460356][ T51] usb 5-1: device descriptor read/64, error -71 [ 370.492911][ T29] audit: type=1400 audit(1732147026.846:532): avc: denied { ioctl } for pid=9325 comm="syz.0.977" path="socket:[21054]" dev="sockfs" ino=21054 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.570958][ T51] usb usb5-port1: attempt power cycle [ 370.667540][ T29] audit: type=1400 audit(1732147027.016:533): avc: denied { write } for pid=9338 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 370.910174][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 370.925762][ T9334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.932991][ T9334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.939063][ T9334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.945461][ T9334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.002219][ T51] usb 5-1: device descriptor read/8, error -71 [ 371.054252][ T9342] FAULT_INJECTION: forcing a failure. [ 371.054252][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.069158][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.3.980 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 371.079453][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 371.089526][ T9342] Call Trace: [ 371.092812][ T9342] [ 371.095764][ T9342] dump_stack_lvl+0x16c/0x1f0 [ 371.100473][ T9342] should_fail_ex+0x497/0x5b0 [ 371.105175][ T9342] strncpy_from_user+0x3b/0x2c0 [ 371.110038][ T9342] getname_flags.part.0+0x8f/0x550 [ 371.115173][ T9342] getname_flags+0x93/0xf0 [ 371.119587][ T9342] user_path_at+0x24/0x60 [ 371.123929][ T9342] __x64_sys_mount+0x1fc/0x320 [ 371.128702][ T9342] ? __pfx___x64_sys_mount+0x10/0x10 [ 371.134035][ T9342] do_syscall_64+0xcd/0x250 [ 371.138550][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.144453][ T9342] RIP: 0033:0x7f619217e819 [ 371.148863][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.168502][ T9342] RSP: 002b:00007f6192f5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.176941][ T9342] RAX: ffffffffffffffda RBX: 00007f6192335fa0 RCX: 00007f619217e819 [ 371.184922][ T9342] RDX: 0000000020002100 RSI: 0000000020000000 RDI: 0000000000000000 [ 371.192915][ T9342] RBP: 00007f6192f5d090 R08: 0000000020000440 R09: 0000000000000000 [ 371.200908][ T9342] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 371.209070][ T9342] R13: 0000000000000000 R14: 00007f6192335fa0 R15: 00007ffd82dc3088 [ 371.217064][ T9342] [ 371.294186][ T29] audit: type=1400 audit(1732147027.646:534): avc: denied { create } for pid=9345 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 371.343822][ T29] audit: type=1400 audit(1732147027.646:535): avc: denied { module_request } for pid=9345 comm="syz.0.982" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.388280][ T29] audit: type=1400 audit(1732147027.736:536): avc: denied { read write } for pid=9349 comm="syz.3.983" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 371.390126][ T51] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 371.420111][ T29] audit: type=1400 audit(1732147027.736:537): avc: denied { open } for pid=9349 comm="syz.3.983" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 371.463957][ T5881] hid (null): usage index exceeded [ 371.469480][ T5881] hid (null): report_id 1664812300 is invalid [ 371.483326][ T5881] hid-generic 0000:816C:80000001.000F: ignoring exceeding usage max [ 371.493578][ T5881] hid-generic 0000:816C:80000001.000F: ignoring exceeding usage max [ 371.501690][ T5881] hid-generic 0000:816C:80000001.000F: usage index exceeded [ 371.510039][ T5881] hid-generic 0000:816C:80000001.000F: item 0 0 2 2 parsing failed [ 371.519371][ T5881] hid-generic 0000:816C:80000001.000F: probe with driver hid-generic failed with error -22 [ 371.552668][ T51] usb 5-1: device descriptor read/8, error -71 [ 371.590070][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 371.660434][ T51] usb usb5-port1: unable to enumerate USB device [ 371.745919][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 371.755201][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 371.772705][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 371.915358][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.004369][ T5879] usb 3-1: config 0 has no interface number 0 [ 372.066081][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.169932][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.239519][ T5879] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 372.260520][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.280152][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 372.289809][ T5879] usb 3-1: config 0 descriptor?? [ 372.420556][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.550174][ T964] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 372.580148][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 372.593437][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 372.605238][ T51] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 372.614461][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.622736][ T51] usb 5-1: Product: syz [ 372.627077][ T51] usb 5-1: Manufacturer: syz [ 372.632843][ T51] usb 5-1: SerialNumber: syz [ 373.575086][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.581260][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.582106][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.588773][ T51] usb 5-1: config 0 descriptor?? [ 373.613759][ T51] hub 5-1:0.0: bad descriptor, ignoring hub [ 373.619763][ T51] hub 5-1:0.0: probe with driver hub failed with error -5 [ 373.688157][ T51] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 373.714922][ T51] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 373.735789][ T51] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 373.763067][ T964] usb 4-1: Using ep0 maxpacket: 16 [ 373.772160][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.787571][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 373.804104][ T964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.833043][ T964] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 373.844217][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.881642][ T964] usb 4-1: config 0 descriptor?? [ 373.887436][ T9363] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 373.897596][ T5879] usbhid 3-1:0.1: can't add hid device: -71 [ 373.903664][ T5879] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 373.935959][ T5879] usb 3-1: USB disconnect, device number 20 [ 373.972105][ T964] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 374.070346][ T51] usb 5-1: USB disconnect, device number 29 [ 374.121788][ T29] audit: type=1400 audit(1732147030.476:538): avc: denied { append } for pid=9373 comm="syz.0.991" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.164287][ T51] usb 4-1: USB disconnect, device number 28 [ 374.826158][ T29] audit: type=1400 audit(1732147031.176:539): avc: denied { bind } for pid=9381 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 374.949689][ T9384] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 375.476833][ T9384] team0: Port device wlan1 added [ 375.537445][ T29] audit: type=1400 audit(1732147031.786:540): avc: denied { setopt } for pid=9381 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 375.989908][ T29] audit: type=1400 audit(1732147031.806:541): avc: denied { ioctl } for pid=9387 comm="syz.3.995" path="socket:[21757]" dev="sockfs" ino=21757 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 377.423516][ T9420] trusted_key: syz.3.1003 sent an empty control message without MSG_MORE. [ 377.437349][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 377.539573][ T5879] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 377.680794][ T964] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 377.773751][ T5879] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 377.813746][ T5879] usb 5-1: config 4 has no interface number 0 [ 377.910128][ T964] usb 1-1: Using ep0 maxpacket: 32 [ 377.916649][ T5879] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 377.984544][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.189755][ T964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.190452][ T5879] usb 5-1: Product: syz [ 378.204131][ T5879] usb 5-1: Manufacturer: syz [ 378.208768][ T5879] usb 5-1: SerialNumber: syz [ 378.220091][ T5879] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 378.252639][ T964] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.277422][ T964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.287812][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.299922][ T964] usb 1-1: Product: syz [ 378.306986][ T964] usb 1-1: Manufacturer: syz [ 378.323282][ T964] usb 1-1: SerialNumber: syz [ 378.437809][ T29] audit: type=1400 audit(1732147034.776:542): avc: denied { setopt } for pid=9428 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 378.454272][ T5879] vp7045: USB control message 'out' went wrong. [ 378.464903][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 378.475819][ T5879] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 378.512520][ T5879] usb 5-1: USB disconnect, device number 30 [ 378.651902][ T29] audit: type=1400 audit(1732147034.976:543): avc: denied { bind } for pid=9426 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 378.676549][ T9434] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.686160][ T9434] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 379.078463][ T964] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 379.295812][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1008'. [ 379.929427][ T9454] geneve2: entered promiscuous mode [ 379.934799][ T9454] geneve2: entered allmulticast mode [ 379.945840][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.945938][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.955261][ T9450] can: request_module (can-proto-0) failed. [ 379.961413][ T9454] batman_adv: batadv0: Adding interface: geneve2 [ 379.971712][ T964] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 379.971815][ T9454] batman_adv: batadv0: Interface activated: geneve2 [ 380.106409][ T29] audit: type=1400 audit(1732147036.456:544): avc: denied { mount } for pid=9451 comm="syz.2.1011" name="/" dev="autofs" ino=21872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 380.150338][ T964] usb 4-1: Using ep0 maxpacket: 8 [ 380.163127][ T964] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 380.334097][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.480962][ T29] audit: type=1400 audit(1732147036.706:545): avc: denied { ioctl } for pid=9451 comm="syz.2.1011" path="socket:[21359]" dev="sockfs" ino=21359 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.871014][ T964] usb 4-1: Product: syz [ 380.875300][ T964] usb 4-1: Manufacturer: syz [ 380.880109][ T964] usb 4-1: SerialNumber: syz [ 380.889073][ T964] usb 4-1: config 0 descriptor?? [ 380.974193][ T29] audit: type=1400 audit(1732147037.326:546): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 381.434606][ T964] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 381.561692][ T9466] FAULT_INJECTION: forcing a failure. [ 381.561692][ T9466] name failslab, interval 1, probability 0, space 0, times 0 [ 381.574693][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.4.1015 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 381.585021][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 381.595154][ T9466] Call Trace: [ 381.598465][ T9466] [ 381.601390][ T9466] dump_stack_lvl+0x16c/0x1f0 [ 381.606060][ T9466] should_fail_ex+0x497/0x5b0 [ 381.610723][ T9466] ? fs_reclaim_acquire+0xae/0x150 [ 381.615830][ T9466] should_failslab+0xc2/0x120 [ 381.620509][ T9466] __kmalloc_noprof+0xcb/0x400 [ 381.625298][ T9466] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 381.630955][ T9466] tomoyo_realpath_from_path+0xb9/0x720 [ 381.636541][ T9466] ? tomoyo_path_number_perm+0x235/0x590 [ 381.642206][ T9466] tomoyo_path_number_perm+0x248/0x590 [ 381.647700][ T9466] ? tomoyo_path_number_perm+0x235/0x590 [ 381.653363][ T9466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.659376][ T9466] ? __pfx_lock_release+0x10/0x10 [ 381.664395][ T9466] ? trace_lock_acquire+0x14a/0x1d0 [ 381.669601][ T9466] ? lock_acquire+0x2f/0xb0 [ 381.674089][ T9466] ? __fget_files+0x40/0x3a0 [ 381.678665][ T9466] ? __fget_files+0x206/0x3a0 [ 381.683346][ T9466] security_file_ioctl+0x9b/0x240 [ 381.688431][ T9466] __x64_sys_ioctl+0xb7/0x200 [ 381.693099][ T9466] do_syscall_64+0xcd/0x250 [ 381.697585][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.703471][ T9466] RIP: 0033:0x7f1ee577e819 [ 381.707869][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.727465][ T9466] RSP: 002b:00007f1ee6566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.735896][ T9466] RAX: ffffffffffffffda RBX: 00007f1ee5936080 RCX: 00007f1ee577e819 [ 381.743875][ T9466] RDX: 0000000020000300 RSI: 0000000000003b72 RDI: 0000000000000008 [ 381.751842][ T9466] RBP: 00007f1ee6566090 R08: 0000000000000000 R09: 0000000000000000 [ 381.759799][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.767755][ T9466] R13: 0000000000000000 R14: 00007f1ee5936080 R15: 00007ffea63c2fa8 [ 381.775719][ T9466] [ 381.780822][ T9466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.179532][ T9471] xt_TCPMSS: Only works on TCP SYN packets [ 382.202093][ T9471] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 382.223870][ T5878] usb 1-1: USB disconnect, device number 22 [ 382.252771][ T5878] usblp0: removed [ 382.256787][ T9471] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 382.267196][ T9471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 382.327635][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 382.621831][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 382.852999][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 383.000408][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.008533][ T8] usb 2-1: config 0 has no interface number 0 [ 383.014822][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.025849][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.035827][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 383.045012][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.071670][ T8] usb 2-1: config 0 descriptor?? [ 383.882780][ T9487] ubi0: attaching mtd0 [ 383.947487][ T9487] ubi0: scanning is finished [ 383.966630][ T9487] ubi0: empty MTD device detected [ 384.144561][ T8] uclogic 0003:28BD:0071.0010: pen parameters not found [ 384.151759][ T8] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 384.448021][ T5878] usb 2-1: USB disconnect, device number 23 [ 384.581912][ T9487] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 384.639382][ T29] audit: type=1400 audit(1732147040.986:547): avc: denied { open } for pid=9486 comm="syz.4.1022" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 384.672279][ T9494] 9pnet_fd: Insufficient options for proto=fd [ 384.678624][ T9487] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 384.749927][ T9487] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 384.763522][ T964] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 384.855691][ T9487] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 384.934028][ T9487] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 384.966334][ T9487] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 384.976576][ T9487] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3050837663 [ 384.995309][ T9487] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 385.002170][ T9498] lo speed is unknown, defaulting to 1000 [ 385.009476][ T9496] ubi0: background thread "ubi_bgt0d" started, PID 9496 [ 386.105609][ T5881] usb 4-1: USB disconnect, device number 29 [ 386.224901][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.224901][ T9513] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 386.257116][ T29] audit: type=1400 audit(1732147042.606:548): avc: denied { mount } for pid=9512 comm="syz.3.1027" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 386.285685][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.285685][ T9513] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 386.304177][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 386.326096][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.326096][ T9513] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 386.339978][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 386.359111][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.359111][ T9513] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 386.374877][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.374877][ T9513] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 386.388230][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 386.408123][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.408123][ T9513] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 386.425255][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 386.437157][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.437157][ T9513] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 386.519292][ T9513] syz.1.1024: attempt to access beyond end of device [ 386.519292][ T9513] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 386.548317][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 386.550171][ T9502] nbd1: detected capacity change from 0 to 67108884 [ 386.628994][ T9513] block nbd1: Send control failed (result -89) [ 386.644120][ T9513] block nbd1: Request send failed, requeueing [ 387.102878][ T5831] block nbd1: Receive control failed (result -32) [ 387.117557][ T1062] block nbd1: Dead connection, failed to find a fallback [ 387.126359][ T1062] block nbd1: shutting down sockets [ 387.132209][ T1062] blk_print_req_error: 25 callbacks suppressed [ 387.132220][ T1062] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.152270][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.162388][ T5841] buffer_io_error: 25 callbacks suppressed [ 387.162402][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.214806][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 387.225823][ T9513] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.242421][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.253020][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 387.265212][ T9513] I/O error, dev nbd1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.274966][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.275152][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.275177][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.275322][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.275346][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.333526][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.343052][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.346908][ T9513] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 387.351080][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.369579][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.378547][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.386154][ T9513] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 387.387915][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.404137][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.412154][ T5841] ldm_validate_partition_table(): Disk read failed. [ 387.419134][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.427336][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.518769][ T5841] Dev nbd1: unable to read RDB block 0 [ 387.525078][ T5841] nbd1: unable to read partition table [ 387.589391][ T5841] ldm_validate_partition_table(): Disk read failed. [ 387.600948][ T5841] Dev nbd1: unable to read RDB block 0 [ 387.606710][ T5841] nbd1: unable to read partition table [ 387.703652][ T9540] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1034'. [ 387.712997][ T9540] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1034'. [ 388.384588][ T9539] sctp: [Deprecated]: syz.3.1033 (pid 9539) Use of int in max_burst socket option. [ 388.384588][ T9539] Use struct sctp_assoc_value instead [ 388.734433][ T9541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.740638][ T9541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.746739][ T9541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.753025][ T9541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.889051][ T9553] FAULT_INJECTION: forcing a failure. [ 388.889051][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 388.911936][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.0.1039 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 388.915188][ T9551] SELinux: policydb version 677412989 does not match my version range 15-33 [ 388.922302][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 388.922322][ T9553] Call Trace: [ 388.922330][ T9553] [ 388.922339][ T9553] dump_stack_lvl+0x16c/0x1f0 [ 388.922374][ T9553] should_fail_ex+0x497/0x5b0 [ 388.922398][ T9553] ? fs_reclaim_acquire+0xae/0x150 [ 388.922422][ T9553] should_failslab+0xc2/0x120 [ 388.922449][ T9553] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 388.922477][ T9553] ? getname_flags.part.0+0x4c/0x550 [ 388.922509][ T9553] getname_flags.part.0+0x4c/0x550 [ 388.982656][ T9553] getname+0x8d/0xe0 [ 388.986548][ T9553] path_setxattrat+0x261/0x290 [ 388.991389][ T9553] ? __pfx_path_setxattrat+0x10/0x10 [ 388.996666][ T9553] ? fput+0x67/0x440 [ 389.000556][ T9553] ? ksys_write+0x1ba/0x250 [ 389.005050][ T9553] ? __pfx_ksys_write+0x10/0x10 [ 389.009878][ T9553] __x64_sys_setxattr+0xc6/0x140 [ 389.014812][ T9553] ? do_syscall_64+0x91/0x250 [ 389.019481][ T9553] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.024666][ T9553] do_syscall_64+0xcd/0x250 [ 389.029146][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.035023][ T9553] RIP: 0033:0x7fe0a337e819 [ 389.039415][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.059004][ T9553] RSP: 002b:00007fe0a4171038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 389.067400][ T9553] RAX: ffffffffffffffda RBX: 00007fe0a3535fa0 RCX: 00007fe0a337e819 [ 389.075352][ T9553] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 389.083317][ T9553] RBP: 00007fe0a4171090 R08: 0000000000000000 R09: 0000000000000000 [ 389.091273][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.099237][ T9553] R13: 0000000000000000 R14: 00007fe0a3535fa0 R15: 00007fffc06b66c8 [ 389.107197][ T9553] [ 389.110611][ T29] audit: type=1400 audit(1732147045.266:549): avc: denied { load_policy } for pid=9550 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 389.137563][ T9551] SELinux: failed to load policy [ 389.215016][ T29] audit: type=1400 audit(1732147045.566:550): avc: denied { read } for pid=9550 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.470363][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 389.631829][ T5878] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 389.640452][ T5878] usb 3-1: config 0 has no interface number 0 [ 389.756243][ T5878] usb 3-1: config 0 interface 50 has no altsetting 0 [ 390.285689][ T5878] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=dc.3c [ 390.340169][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.450113][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.596048][ T5878] usb 3-1: config 0 descriptor?? [ 390.650568][ T5878] usb_8dev 3-1:0.50 can0: sending command message failed [ 390.672166][ T5878] usb_8dev 3-1:0.50 can0: can't get firmware version [ 390.849584][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 390.849617][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 390.855677][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 390.869613][ T29] audit: type=1400 audit(1732147047.036:551): avc: denied { read } for pid=9573 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 391.093788][ T9578] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[9578] [ 391.302260][ T5878] usb_8dev 3-1:0.50: probe with driver usb_8dev failed with error -22 [ 391.330306][ T5878] usb 3-1: USB disconnect, device number 21 [ 391.396235][ T5879] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 391.750256][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 391.916105][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.938219][ T5879] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 392.106583][ T5879] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.115804][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.123911][ T5879] usb 4-1: Product: syz [ 392.128161][ T5879] usb 4-1: Manufacturer: syz [ 392.132859][ T5879] usb 4-1: SerialNumber: syz [ 392.324481][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 392.333715][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 392.752418][ T5881] usb 4-1: USB disconnect, device number 30 [ 392.925033][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 392.934505][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 393.634036][ T9598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.646917][ T9621] netlink: 'syz.0.1057': attribute type 3 has an invalid length. [ 394.846029][ T29] audit: type=1400 audit(1732147051.196:552): avc: denied { ioctl } for pid=9616 comm="syz.3.1058" path="socket:[22300]" dev="sockfs" ino=22300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.872513][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.170305][ T964] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 395.805097][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.816367][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 395.839594][ T964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 395.899297][ T964] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 395.938471][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.977670][ T964] usb 4-1: config 0 descriptor?? [ 395.985232][ T9617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.998731][ T964] usbhid 4-1:0.0: can't add hid device: -22 [ 396.379632][ T9637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.416948][ T29] audit: type=1326 audit(1732147052.726:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.469395][ T9634] Invalid logical block size (32) [ 396.544463][ T964] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 396.562809][ T29] audit: type=1326 audit(1732147052.726:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.598549][ T29] audit: type=1326 audit(1732147052.726:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.621865][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.630665][ T29] audit: type=1326 audit(1732147052.726:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.654038][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.667417][ T29] audit: type=1326 audit(1732147052.726:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.692262][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.705005][ T9645] netlink: 'syz.1.1064': attribute type 21 has an invalid length. [ 396.758479][ T29] audit: type=1326 audit(1732147052.726:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 396.968900][ T29] audit: type=1326 audit(1732147052.726:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 397.250794][ T29] audit: type=1326 audit(1732147052.726:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 397.274133][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.293785][ T29] audit: type=1326 audit(1732147052.726:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 397.331671][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 397.334868][ T29] audit: type=1326 audit(1732147052.726:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.4.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee577e819 code=0x7ffc0000 [ 397.530157][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 397.602530][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.635950][ T5881] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 397.686304][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.699813][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.741691][ T5881] usb 1-1: Product: syz [ 397.754668][ T5881] usb 1-1: Manufacturer: syz [ 397.775519][ T5881] usb 1-1: SerialNumber: syz [ 398.144469][ T5881] usb 1-1: USB disconnect, device number 23 [ 398.233128][ T9662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.372507][ T5881] usb 4-1: USB disconnect, device number 31 [ 400.030250][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.327527][ T9678] netlink: 'syz.1.1071': attribute type 3 has an invalid length. [ 400.750248][ T5881] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 402.094081][ T5881] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.102871][ T5881] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 402.130033][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.139107][ T5881] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.153735][ T5881] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.162947][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.171257][ T5881] usb 4-1: Product: syz [ 402.175637][ T5881] usb 4-1: Manufacturer: syz [ 402.220454][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 402.220472][ T29] audit: type=1326 audit(1732147058.546:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.251238][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.263420][ T5881] cdc_wdm 4-1:1.0: skipping garbage [ 402.269229][ T5881] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 402.301899][ T29] audit: type=1326 audit(1732147058.546:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.333291][ T29] audit: type=1326 audit(1732147058.546:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.356900][ T29] audit: type=1326 audit(1732147058.546:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.380797][ T29] audit: type=1326 audit(1732147058.546:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.404356][ T29] audit: type=1326 audit(1732147058.546:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.428129][ T29] audit: type=1326 audit(1732147058.546:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.452039][ T29] audit: type=1326 audit(1732147058.546:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.475987][ T29] audit: type=1326 audit(1732147058.556:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 402.499519][ T29] audit: type=1326 audit(1732147058.556:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9686 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d1d7e819 code=0x7ffc0000 [ 404.340082][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.383607][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.390062][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.831910][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.840132][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.182951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.902304][ T30] INFO: task syz-executor:5819 blocked for more than 143 seconds. [ 548.910551][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 548.917841][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.930342][ T30] task:syz-executor state:D stack:22000 pid:5819 tgid:5819 ppid:5817 flags:0x00004002 [ 548.942819][ T30] Call Trace: [ 548.946153][ T30] [ 548.949065][ T30] __schedule+0xe5a/0x5ae0 [ 548.953823][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 548.959300][ T30] ? __pfx_hlock_class+0x1/0x10 [ 548.965158][ T30] ? mark_lock+0xb5/0xc60 [ 548.969522][ T30] ? __pfx___schedule+0x10/0x10 [ 548.974426][ T30] ? schedule+0x298/0x350 [ 548.978809][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.983994][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 548.989216][ T30] ? lock_acquire+0x2f/0xb0 [ 548.994719][ T30] ? schedule+0x1fd/0x350 [ 548.999075][ T30] schedule+0xe7/0x350 [ 549.004092][ T30] io_schedule+0xbf/0x130 [ 549.008451][ T30] bit_wait_io+0x15/0xe0 [ 549.012837][ T30] __wait_on_bit+0x62/0x180 [ 549.017365][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 549.022389][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 549.027793][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 549.033838][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 549.039387][ T30] do_get_write_access+0x933/0x1270 [ 549.044797][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 549.050855][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 549.057048][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 549.062785][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 549.068873][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 549.073890][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.078762][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 549.084787][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.089591][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 549.095285][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 549.100601][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 549.106364][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 549.112908][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 549.117875][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 549.127454][ T30] ext4_dirty_inode+0xd9/0x130 [ 549.132389][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.137180][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 549.146228][ T30] generic_update_time+0xcf/0xf0 [ 549.151398][ T30] file_update_time+0x17d/0x1c0 [ 549.156373][ T30] ext4_page_mkwrite+0x368/0x1760 [ 549.161706][ T30] ? find_held_lock+0x2d/0x110 [ 549.167136][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 549.172971][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.178030][ T30] ? vm_normal_page+0x13c/0x2b0 [ 549.183337][ T30] do_page_mkwrite+0x177/0x380 [ 549.188129][ T30] do_wp_page+0xcbf/0x49d0 [ 549.192846][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 549.198496][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 549.203458][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 549.208493][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.214100][ T30] ? lock_acquire+0x2f/0xb0 [ 549.218619][ T30] ? __handle_mm_fault+0xdcd/0x2a10 [ 549.224103][ T30] __handle_mm_fault+0x1a93/0x2a10 [ 549.229237][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.234477][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 549.239696][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.245317][ T30] handle_mm_fault+0x3fa/0xaa0 [ 549.250323][ T30] do_user_addr_fault+0x60d/0x13f0 [ 549.255553][ T30] exc_page_fault+0x5c/0xc0 [ 549.260164][ T30] asm_exc_page_fault+0x26/0x30 [ 549.265107][ T30] RIP: 0033:0x7f36cc4678fc [ 549.270300][ T30] RSP: 002b:00007ffee701afc0 EFLAGS: 00010202 [ 549.276478][ T30] RAX: 00007f36ca5b0000 RBX: 0000555584a71db0 RCX: 0000000000000003 [ 549.284638][ T30] RDX: 1ffffffff141becb RSI: 0000555584a7fdb0 RDI: 0000000000000008 [ 549.292819][ T30] RBP: 00007ffee701b4c0 R08: 0000555584a7fe08 R09: 00000000000037d9 [ 549.301044][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffee701b310 [ 549.309018][ T30] R13: 0000000000000005 R14: 00007ffee701b030 R15: 00007ffee701b100 [ 549.317152][ T30] [ 549.320285][ T30] INFO: task syz.3.1075:9683 blocked for more than 143 seconds. [ 549.327905][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 549.335352][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.344077][ T30] task:syz.3.1075 state:D stack:27856 pid:9683 tgid:9683 ppid:5836 flags:0x00000004 [ 549.354435][ T30] Call Trace: [ 549.357744][ T30] [ 549.360739][ T30] __schedule+0xe5a/0x5ae0 [ 549.365202][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 549.370621][ T30] ? __pfx_hlock_class+0x1/0x10 [ 549.376022][ T30] ? mark_lock+0xb5/0xc60 [ 549.380708][ T30] ? __pfx___schedule+0x10/0x10 [ 549.385581][ T30] ? schedule+0x298/0x350 [ 549.389893][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.395170][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 549.400639][ T30] ? lock_acquire+0x2f/0xb0 [ 549.405152][ T30] ? schedule+0x1fd/0x350 [ 549.409470][ T30] schedule+0xe7/0x350 [ 549.415652][ T30] io_schedule+0xbf/0x130 [ 549.420648][ T30] bit_wait_io+0x15/0xe0 [ 549.424933][ T30] __wait_on_bit+0x62/0x180 [ 549.429444][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 549.434574][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 549.440098][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 549.446100][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 549.451633][ T30] do_get_write_access+0x933/0x1270 [ 549.456851][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 549.462916][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 549.468996][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 549.475268][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 549.480858][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 549.485818][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.490623][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 549.496682][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.501770][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 549.507423][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 549.512936][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 549.518598][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 549.524372][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 549.529323][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 549.534751][ T30] ext4_dirty_inode+0xd9/0x130 [ 549.539519][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.544441][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 549.549493][ T30] generic_update_time+0xcf/0xf0 [ 549.554471][ T30] file_update_time+0x17d/0x1c0 [ 549.559310][ T30] ext4_page_mkwrite+0x368/0x1760 [ 549.564418][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 549.569883][ T30] ? pte_alloc_one+0x2a3/0x390 [ 549.574710][ T30] do_page_mkwrite+0x177/0x380 [ 549.580004][ T30] do_pte_missing+0x29e/0x3e70 [ 549.584815][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 549.590470][ T30] __handle_mm_fault+0x100a/0x2a10 [ 549.595600][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.600897][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 549.606104][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.611820][ T30] handle_mm_fault+0x3fa/0xaa0 [ 549.616609][ T30] do_user_addr_fault+0x60d/0x13f0 [ 549.621927][ T30] exc_page_fault+0x5c/0xc0 [ 549.626457][ T30] asm_exc_page_fault+0x26/0x30 [ 549.631526][ T30] RIP: 0033:0x7f619205ccd7 [ 549.635945][ T30] RSP: 002b:00007ffd82dc30e0 EFLAGS: 00010202 [ 549.642272][ T30] RAX: 0000001b30320000 RBX: 00007f6192e65720 RCX: 0000001b2ff20210 [ 549.650448][ T30] RDX: 0000001b3031fffc RSI: 00000000003ffdf0 RDI: 00007f6192e65700 [ 549.658425][ T30] RBP: 0000000000000000 R08: 00007f6192336038 R09: 00007f6192322000 [ 549.666443][ T30] R10: 00007f6192e65700 R11: 0000000000000000 R12: 0000000000000000 [ 549.674464][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000013d30 [ 549.683261][ T30] [ 549.686303][ T30] INFO: task syz.1.1080:9699 blocked for more than 144 seconds. [ 549.694049][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 549.701391][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.710322][ T30] task:syz.1.1080 state:D stack:28384 pid:9699 tgid:9699 ppid:5829 flags:0x00000004 [ 549.721362][ T30] Call Trace: [ 549.724644][ T30] [ 549.727558][ T30] __schedule+0xe5a/0x5ae0 [ 549.732021][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 549.737230][ T30] ? __pfx_hlock_class+0x1/0x10 [ 549.742125][ T30] ? mark_lock+0xb5/0xc60 [ 549.746486][ T30] ? __pfx___schedule+0x10/0x10 [ 549.751402][ T30] ? schedule+0x298/0x350 [ 549.755745][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.760893][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 549.766148][ T30] ? lock_acquire+0x2f/0xb0 [ 549.770713][ T30] ? schedule+0x1fd/0x350 [ 549.775052][ T30] schedule+0xe7/0x350 [ 549.779108][ T30] io_schedule+0xbf/0x130 [ 549.785343][ T30] bit_wait_io+0x15/0xe0 [ 549.789633][ T30] __wait_on_bit+0x62/0x180 [ 549.794419][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 549.799385][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 549.804863][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 549.810896][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 549.816361][ T30] do_get_write_access+0x933/0x1270 [ 549.821609][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 549.827603][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 549.833784][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 549.839347][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 549.844885][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 549.849827][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.854641][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 549.860702][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.865492][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 549.871197][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 549.876447][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 549.882188][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 549.888324][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 549.893375][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 549.898757][ T30] ext4_dirty_inode+0xd9/0x130 [ 549.903561][ T30] ? rcu_is_watching+0x12/0xc0 [ 549.908339][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 549.913423][ T30] generic_update_time+0xcf/0xf0 [ 549.918371][ T30] file_update_time+0x17d/0x1c0 [ 549.923310][ T30] ext4_page_mkwrite+0x368/0x1760 [ 549.928458][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 549.933959][ T30] ? pte_alloc_one+0x2a3/0x390 [ 549.938731][ T30] do_page_mkwrite+0x177/0x380 [ 549.943551][ T30] do_pte_missing+0x29e/0x3e70 [ 549.948321][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 549.953568][ T30] ? __pmd_alloc+0x380/0x860 [ 549.958167][ T30] __handle_mm_fault+0x100a/0x2a10 [ 549.963373][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.968405][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 549.973654][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.979138][ T30] handle_mm_fault+0x3fa/0xaa0 [ 549.984011][ T30] do_user_addr_fault+0x60d/0x13f0 [ 549.990184][ T30] exc_page_fault+0x5c/0xc0 [ 549.994744][ T30] asm_exc_page_fault+0x26/0x30 [ 549.999619][ T30] RIP: 0033:0x7f6bc7451c11 [ 550.004125][ T30] RSP: 002b:00007ffd6fedfc00 EFLAGS: 00010246 [ 550.010387][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 550.018366][ T30] RDX: 0000001b2fd20000 RSI: 0000000000400000 RDI: 00007f6bc7672290 [ 550.026477][ T30] RBP: 00007ffd6fedfe5c R08: 0000000000000004 R09: 0000000000040000 [ 550.034577][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 550.042677][ T30] R13: 0000000000062297 R14: 000000000006170f R15: 00007ffd6fedfeb0 [ 550.051295][ T30] [ 550.054314][ T30] INFO: task syz.4.1081:9702 blocked for more than 144 seconds. [ 550.062049][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 550.069358][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.078290][ T30] task:syz.4.1081 state:D stack:25824 pid:9702 tgid:9702 ppid:5833 flags:0x00000004 [ 550.089155][ T30] Call Trace: [ 550.092672][ T30] [ 550.095617][ T30] __schedule+0xe5a/0x5ae0 [ 550.100127][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 550.105346][ T30] ? __free_zapped_classes+0x320/0x320 [ 550.110974][ T30] ? mark_lock+0xb5/0xc60 [ 550.115336][ T30] ? __pfx___schedule+0x10/0x10 [ 550.120291][ T30] ? schedule+0x298/0x350 [ 550.124623][ T30] ? __pfx_lock_release+0x10/0x10 [ 550.129644][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 550.135056][ T30] ? lock_acquire+0x2f/0xb0 [ 550.139576][ T30] ? schedule+0x1fd/0x350 [ 550.143984][ T30] schedule+0xe7/0x350 [ 550.148065][ T30] io_schedule+0xbf/0x130 [ 550.152596][ T30] bit_wait_io+0x15/0xe0 [ 550.156883][ T30] __wait_on_bit+0x62/0x180 [ 550.161502][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 550.166453][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 550.171969][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 550.177965][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 550.183909][ T30] do_get_write_access+0x933/0x1270 [ 550.189142][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 550.195824][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 550.202061][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 550.207624][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 550.213241][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 550.218204][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.223047][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 550.229033][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.233977][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 550.239639][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 550.244928][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 550.250724][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 550.256364][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 550.261482][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 550.266920][ T30] ext4_dirty_inode+0xd9/0x130 [ 550.271875][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.276648][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 550.281749][ T30] generic_update_time+0xcf/0xf0 [ 550.286697][ T30] file_update_time+0x17d/0x1c0 [ 550.291799][ T30] ext4_page_mkwrite+0x368/0x1760 [ 550.297284][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 550.302861][ T30] ? lock_acquire+0x2f/0xb0 [ 550.307397][ T30] ? __pte_offset_map+0x42/0x540 [ 550.312521][ T30] do_page_mkwrite+0x177/0x380 [ 550.317292][ T30] do_pte_missing+0x29e/0x3e70 [ 550.322136][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 550.327343][ T30] __handle_mm_fault+0x100a/0x2a10 [ 550.332648][ T30] ? __pfx_lock_release+0x10/0x10 [ 550.337677][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 550.342951][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 550.348434][ T30] handle_mm_fault+0x3fa/0xaa0 [ 550.353377][ T30] do_user_addr_fault+0x60d/0x13f0 [ 550.358575][ T30] exc_page_fault+0x5c/0xc0 [ 550.363182][ T30] asm_exc_page_fault+0x26/0x30 [ 550.368048][ T30] RIP: 0033:0x7f1ee564feb9 [ 550.372650][ T30] RSP: 002b:00007ffea63c3070 EFLAGS: 00010202 [ 550.378733][ T30] RAX: 0000001b30060000 RBX: 00007f1ee6465720 RCX: 0000000000000003 [ 550.386849][ T30] RDX: 0000001b3005ffff RSI: 0000000000000008 RDI: 00007f1ee6465720 [ 550.394944][ T30] RBP: 00000000fffffc03 R08: 0000000000000000 R09: 0000000000000000 [ 550.403581][ T30] R10: 00007f1ee6465700 R11: 0000000000000000 R12: 00007f1ee5936118 [ 550.411719][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.419714][ T30] [ 550.423054][ T30] INFO: task syz.2.1082:9705 blocked for more than 144 seconds. [ 550.430901][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 550.438212][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.446969][ T30] task:syz.2.1082 state:D stack:28008 pid:9705 tgid:9705 ppid:5840 flags:0x00000004 [ 550.457270][ T30] Call Trace: [ 550.460623][ T30] [ 550.463566][ T30] __schedule+0xe5a/0x5ae0 [ 550.467996][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 550.473351][ T30] ? __free_zapped_classes+0x320/0x320 [ 550.478842][ T30] ? mark_lock+0xb5/0xc60 [ 550.483323][ T30] ? __pfx___schedule+0x10/0x10 [ 550.488189][ T30] ? schedule+0x298/0x350 [ 550.492659][ T30] ? __pfx_lock_release+0x10/0x10 [ 550.498221][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 550.503530][ T30] ? lock_acquire+0x2f/0xb0 [ 550.508053][ T30] ? schedule+0x1fd/0x350 [ 550.512663][ T30] schedule+0xe7/0x350 [ 550.516772][ T30] io_schedule+0xbf/0x130 [ 550.521250][ T30] bit_wait_io+0x15/0xe0 [ 550.525508][ T30] __wait_on_bit+0x62/0x180 [ 550.530208][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 550.535188][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 550.540657][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 550.546653][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 550.552282][ T30] do_get_write_access+0x933/0x1270 [ 550.557507][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 550.563554][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 550.569626][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 550.575302][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 550.580877][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 550.585842][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.590793][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 550.596781][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.602124][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 550.607778][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 550.613153][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 550.618796][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 550.624659][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 550.629611][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 550.635127][ T30] ext4_dirty_inode+0xd9/0x130 [ 550.639899][ T30] ? rcu_is_watching+0x12/0xc0 [ 550.644757][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 550.649812][ T30] generic_update_time+0xcf/0xf0 [ 550.654941][ T30] file_update_time+0x17d/0x1c0 [ 550.659818][ T30] ext4_page_mkwrite+0x368/0x1760 [ 550.664952][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 550.670604][ T30] ? pte_alloc_one+0x2a3/0x390 [ 550.675391][ T30] do_page_mkwrite+0x177/0x380 [ 550.680245][ T30] do_pte_missing+0x29e/0x3e70 [ 550.685023][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 550.690417][ T30] ? __pmd_alloc+0x380/0x860 [ 550.695024][ T30] __handle_mm_fault+0x100a/0x2a10 [ 550.700291][ T30] ? __pfx_lock_release+0x10/0x10 [ 550.705786][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 550.711183][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 550.716666][ T30] handle_mm_fault+0x3fa/0xaa0 [ 550.721496][ T30] do_user_addr_fault+0x60d/0x13f0 [ 550.726616][ T30] exc_page_fault+0x5c/0xc0 [ 550.731431][ T30] asm_exc_page_fault+0x26/0x30 [ 550.736307][ T30] RIP: 0033:0x7f42d1c51c11 [ 550.740801][ T30] RSP: 002b:00007ffec7d70650 EFLAGS: 00010246 [ 550.746871][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 550.755036][ T30] RDX: 0000001b2fe20000 RSI: 0000000000400000 RDI: 00007f42d1e72290 [ 550.763065][ T30] RBP: 00007ffec7d708ac R08: 0000000000000004 R09: 0000000000040000 [ 550.771195][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 550.779229][ T30] R13: 0000000000062438 R14: 0000000000061c72 R15: 00007ffec7d70900 [ 550.787355][ T30] [ 550.790576][ T30] [ 550.790576][ T30] Showing all locks held in the system: [ 550.798349][ T30] 1 lock held by khungtaskd/30: [ 550.803303][ T30] #0: ffffffff8e1bb180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 550.813935][ T30] 6 locks held by kworker/u8:6/3429: [ 550.819209][ T30] #0: ffff888020ab9948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 550.830275][ T30] #1: ffffc9000cbbfd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 550.842479][ T30] #2: ffff88814edc40e0 (&type->s_umount_key#52){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 550.853436][ T30] #3: ffff88814edc6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 550.863956][ T30] #4: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 550.873698][ T30] #5: ffff88807857b410 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 550.883615][ T30] 3 locks held by kworker/u8:11/3664: [ 550.888983][ T30] #0: ffff8880b863eed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 550.899100][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 550.911546][ T30] #2: ffff88805dbb2910 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x316/0x8d0 [ 550.925452][ T30] 2 locks held by getty/5595: [ 550.930329][ T30] #0: ffff888031f5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 550.940333][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 550.950785][ T30] 3 locks held by syz-executor/5819: [ 550.956080][ T30] #0: ffff888035798d18 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 550.966435][ T30] #1: ffff88814edc4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 550.976109][ T30] #2: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 550.985895][ T30] 3 locks held by syz.3.1075/9683: [ 550.991118][ T30] #0: ffff8880348c69b8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 551.001458][ T30] #1: ffff88814edc4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 551.011634][ T30] #2: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 551.021307][ T30] 3 locks held by syz.1.1080/9699: [ 551.026412][ T30] #0: ffff88807fe493d0 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 551.036842][ T30] #1: ffff88814edc4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 551.046584][ T30] #2: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 551.056323][ T30] 3 locks held by syz.4.1081/9702: [ 551.061616][ T30] #0: ffff888078e1dc40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 551.072124][ T30] #1: ffff88814edc4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 551.081703][ T30] #2: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 551.091490][ T30] 3 locks held by syz.2.1082/9705: [ 551.096619][ T30] #0: ffff8880308fb580 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 551.106974][ T30] #1: ffff88814edc4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 551.117063][ T30] #2: ffff88814edc8958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 551.126764][ T30] [ 551.129088][ T30] ============================================= [ 551.129088][ T30] [ 551.137674][ T30] NMI backtrace for cpu 0 [ 551.142063][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 551.152213][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 551.162245][ T30] Call Trace: [ 551.165498][ T30] [ 551.168441][ T30] dump_stack_lvl+0x116/0x1f0 [ 551.173127][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 551.178084][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.184083][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 551.190050][ T30] watchdog+0xf0c/0x1240 [ 551.194353][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.199031][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.204218][ T30] ? __kthread_parkme+0x148/0x220 [ 551.209272][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.213925][ T30] kthread+0x2c1/0x3a0 [ 551.218006][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.223190][ T30] ? __pfx_kthread+0x10/0x10 [ 551.227759][ T30] ret_from_fork+0x45/0x80 [ 551.232196][ T30] ? __pfx_kthread+0x10/0x10 [ 551.236766][ T30] ret_from_fork_asm+0x1a/0x30 [ 551.241566][ T30] [ 551.245216][ T30] Sending NMI from CPU 0 to CPUs 1: [ 551.250904][ C1] NMI backtrace for cpu 1 [ 551.250915][ C1] CPU: 1 UID: 0 PID: 5189 Comm: syslogd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 551.250936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 551.250945][ C1] RIP: 0010:write_comp_data+0x42/0x90 [ 551.250967][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 551.250982][ C1] RSP: 0018:ffffc900044d78b0 EFLAGS: 00000246 [ 551.250997][ C1] RAX: 0000000000000000 RBX: ffff888031b7b180 RCX: ffffffff89c4c1ff [ 551.251009][ C1] RDX: ffff88807c530000 RSI: 0000000000000000 RDI: 0000000000000001 [ 551.251019][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 551.251030][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888031b7b300 [ 551.251040][ C1] R13: ffff888023b13640 R14: ffff888031b7b41c R15: 0000000000000000 [ 551.251052][ C1] FS: 00007f20eee4e500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 551.251070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.251081][ C1] CR2: 0000556f2ac76680 CR3: 00000000356b0000 CR4: 00000000003526f0 [ 551.251092][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.251103][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.251113][ C1] Call Trace: [ 551.251119][ C1] [ 551.251125][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 551.251148][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 551.251172][ C1] ? nmi_handle+0x1a9/0x5c0 [ 551.251208][ C1] ? write_comp_data+0x42/0x90 [ 551.251225][ C1] ? default_do_nmi+0x6a/0x160 [ 551.251257][ C1] ? exc_nmi+0x170/0x1e0 [ 551.251275][ C1] ? end_repeat_nmi+0xf/0x53 [ 551.251293][ C1] ? unix_write_space+0x24f/0x510 [ 551.251392][ C1] ? write_comp_data+0x42/0x90 [ 551.251408][ C1] ? write_comp_data+0x42/0x90 [ 551.251425][ C1] ? write_comp_data+0x42/0x90 [ 551.251441][ C1] [ 551.251476][ C1] [ 551.251481][ C1] unix_write_space+0x24f/0x510 [ 551.251513][ C1] sock_wfree+0x261/0x880 [ 551.251576][ C1] unix_destruct_scm+0x138/0x190 [ 551.251596][ C1] ? __pfx_unix_destruct_scm+0x10/0x10 [ 551.251620][ C1] ? __pfx_unix_destruct_scm+0x10/0x10 [ 551.251640][ C1] skb_release_head_state+0xa3/0x290 [ 551.251673][ C1] consume_skb+0x85/0x100 [ 551.251692][ C1] __unix_dgram_recvmsg+0x821/0xe50 [ 551.251721][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 551.251746][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 551.251823][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 551.251867][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 551.251890][ C1] sock_recvmsg+0x1f6/0x250 [ 551.251936][ C1] sock_read_iter+0x2bb/0x3b0 [ 551.251957][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 551.251982][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 551.252024][ C1] ? security_file_permission+0x71/0x210 [ 551.252059][ C1] vfs_read+0xa4c/0xbe0 [ 551.252080][ C1] ? __pfx_vfs_read+0x10/0x10 [ 551.252099][ C1] ? rcu_is_watching+0x12/0xc0 [ 551.252125][ C1] ksys_read+0x207/0x250 [ 551.252142][ C1] ? __pfx_ksys_read+0x10/0x10 [ 551.252163][ C1] do_syscall_64+0xcd/0x250 [ 551.252180][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.252213][ C1] RIP: 0033:0x7f20eefa2b6a [ 551.252241][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 551.252257][ C1] RSP: 002b:00007fffc2b90218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.252273][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20eefa2b6a [ 551.252285][ C1] RDX: 00000000000000ff RSI: 000056047271a300 RDI: 0000000000000000 [ 551.252297][ C1] RBP: 000056047271a2c0 R08: 0000000000000001 R09: 0000000000000000 [ 551.252309][ C1] R10: 00007f20ef1413a3 R11: 0000000000000246 R12: 000056047271a34d [ 551.252321][ C1] R13: 000056047271a300 R14: 0000000000000000 R15: 00007f20ef185a80 [ 551.252338][ C1] [ 551.252968][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 551.651782][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 551.661922][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 551.671977][ T30] Call Trace: [ 551.675243][ T30] [ 551.678166][ T30] dump_stack_lvl+0x3d/0x1f0 [ 551.682761][ T30] panic+0x71d/0x800 [ 551.686726][ T30] ? __pfx_panic+0x10/0x10 [ 551.691138][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 551.696503][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.702481][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 551.707845][ T30] ? watchdog+0xd76/0x1240 [ 551.712253][ T30] ? watchdog+0xd69/0x1240 [ 551.716689][ T30] watchdog+0xd87/0x1240 [ 551.720924][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.725594][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.730795][ T30] ? __kthread_parkme+0x148/0x220 [ 551.735818][ T30] ? __pfx_watchdog+0x10/0x10 [ 551.740487][ T30] kthread+0x2c1/0x3a0 [ 551.744550][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.749742][ T30] ? __pfx_kthread+0x10/0x10 [ 551.754326][ T30] ret_from_fork+0x45/0x80 [ 551.758731][ T30] ? __pfx_kthread+0x10/0x10 [ 551.763314][ T30] ret_from_fork_asm+0x1a/0x30 [ 551.768082][ T30] [ 551.771422][ T30] Kernel Offset: disabled [ 551.775731][ T30] Rebooting in 86400 seconds..