last executing test programs: 7.687904539s ago: executing program 4 (id=1767): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(r1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.664645623s ago: executing program 1 (id=1770): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_io_uring_setup(0x3fce, &(0x7f0000000180)={0x0, 0x4ee3, 0x4, 0x3, 0x1b2}, 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.664423214s ago: executing program 4 (id=1771): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c02600004100070100000000ff000000017c00000400fc80a72601"], 0x26c0}}, 0x4c000) 6.165942741s ago: executing program 0 (id=1772): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 6.141827648s ago: executing program 2 (id=1774): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) 6.136352752s ago: executing program 4 (id=1775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 5.499602211s ago: executing program 1 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x100) write$char_usb(r3, &(0x7f0000000040)="e2", 0x118a) 5.498761545s ago: executing program 3 (id=1777): syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 5.3405903s ago: executing program 0 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600200008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) 4.983530335s ago: executing program 0 (id=1779): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.977375525s ago: executing program 3 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 4.084605465s ago: executing program 1 (id=1781): clock_gettime(0x3, &(0x7f0000000040)) fanotify_init(0x40, 0x1400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700110000"}}}}}}}, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9a, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x10000, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) 3.867993839s ago: executing program 3 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) 3.791416716s ago: executing program 4 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102400, 0x19000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000380)={0x8, r2}) 3.765759029s ago: executing program 0 (id=1784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='d'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.716710919s ago: executing program 2 (id=1785): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2.789284105s ago: executing program 3 (id=1786): unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) 2.701986744s ago: executing program 2 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 2.496723355s ago: executing program 1 (id=1788): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.477164607s ago: executing program 0 (id=1789): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 1.086097996s ago: executing program 4 (id=1790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600200008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) 1.008690012s ago: executing program 3 (id=1791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x100) write$char_usb(r2, &(0x7f0000000040)="e2", 0x118a) 1.008441231s ago: executing program 1 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 383.872481ms ago: executing program 2 (id=1793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 274.262275ms ago: executing program 2 (id=1794): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 227.052588ms ago: executing program 4 (id=1795): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$inet(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000002c0)={0x4, 0x20000800, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) 176.306026ms ago: executing program 1 (id=1796): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0xa, 0x1000003) ioctl$sock_SIOCGIFINDEX(r1, 0x400261f2, &(0x7f0000000100)={'dvmrp0\x00'}) 162.488938ms ago: executing program 0 (id=1797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$I2C(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x601, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 84.65014ms ago: executing program 2 (id=1798): syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 0s ago: executing program 3 (id=1799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='d'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.1194'. [ 506.289764][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.298038][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.321820][ T9742] usb 5-1: unable to get BOS descriptor set [ 506.340630][T10686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.349187][ T9742] usb 5-1: not running at top speed; connect to a high speed hub [ 506.380155][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.402351][ T9742] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 506.431104][ T9742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.639875][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 506.760547][ T9742] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.883947][ T9742] usb 5-1: config 1 has no interface number 1 [ 506.910345][ T30] audit: type=1400 audit(1753219652.160:625): avc: denied { map } for pid=10693 comm="syz.0.1198" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 506.910353][ T9742] usb 5-1: too many endpoints for config 1 interface 6 altsetting 8: 51, using maximum allowed: 30 [ 506.910393][ T9742] usb 5-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 506.933365][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.998416][T10699] netlink: 'syz.2.1199': attribute type 7 has an invalid length. [ 507.012658][T10699] netlink: 'syz.2.1199': attribute type 8 has an invalid length. [ 507.050420][ T30] audit: type=1400 audit(1753219652.160:626): avc: denied { execute } for pid=10693 comm="syz.0.1198" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.077034][ T24] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 507.099849][ T24] usb 2-1: config 0 has no interface number 0 [ 507.119889][ T24] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 507.171840][ T24] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.181796][ T9742] usb 5-1: config 1 interface 6 has no altsetting 0 [ 507.201250][ T24] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 507.212528][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.224069][ T24] usb 2-1: Product: syz [ 507.248000][ T24] usb 2-1: Manufacturer: syz [ 507.258518][ T24] usb 2-1: SerialNumber: syz [ 507.268133][T10703] vhci_hcd vhci_hcd.0: port 0 already used [ 507.283734][ T24] usb 2-1: config 0 descriptor?? [ 507.338182][ T9742] usb 5-1: string descriptor 0 read error: -71 [ 507.351213][T10665] vhci_hcd: connection closed [ 507.351585][ T49] vhci_hcd: stop threads [ 507.404535][T10688] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 507.413692][ T24] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 507.434012][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 507.437923][ T9742] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.949714][ T9742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.968809][ T9742] usb 5-1: can't set config #1, error -71 [ 507.974676][ T49] vhci_hcd: release socket [ 507.996399][ T49] vhci_hcd: disconnect device [ 508.353277][ T24] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 508.393093][ T9742] usb 5-1: USB disconnect, device number 20 [ 508.548858][ T5896] vhci_hcd: vhci_device speed not set [ 508.783044][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.839008][ T5831] usb 2-1: USB disconnect, device number 22 [ 508.894581][ T5831] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 508.968569][ T30] audit: type=1400 audit(1753219654.220:627): avc: denied { load_policy } for pid=10713 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 508.989229][T10714] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 509.050541][T10722] 9pnet_virtio: no channels available for device syz [ 509.079879][T10069] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 509.475218][ T5831] cyberjack 2-1:0.69: device disconnected [ 509.476821][T10714] SELinux: failed to load policy [ 509.517305][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.660020][T10069] usb 3-1: Using ep0 maxpacket: 16 [ 509.715929][T10069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.740522][T10069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.753125][T10069] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 509.769703][T10726] random: crng reseeded on system resumption [ 509.769830][ T9742] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 509.777264][ T30] audit: type=1400 audit(1753219655.020:628): avc: denied { write } for pid=10725 comm="syz.4.1207" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.783815][T10069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.831359][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.860803][ T30] audit: type=1400 audit(1753219655.020:629): avc: denied { open } for pid=10725 comm="syz.4.1207" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.870479][T10069] usb 3-1: config 0 descriptor?? [ 509.904764][T10729] SELinux: failed to load policy [ 509.980265][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.990232][ T5831] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 509.995675][ T9742] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 510.007641][ T9742] usb 4-1: config 0 has no interface number 0 [ 510.020359][ T9742] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 510.041691][ T5911] usb usb42-port1: attempt power cycle [ 510.079858][ T9742] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.117653][ T9742] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 510.142997][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.154798][ T5831] usb 1-1: not running at top speed; connect to a high speed hub [ 510.164158][ T5831] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 510.199724][ T5831] usb 1-1: config 5 has no interface number 0 [ 510.202176][ T9742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.224427][ T9742] usb 4-1: Product: syz [ 510.234582][ T9742] usb 4-1: Manufacturer: syz [ 510.245533][ T9742] usb 4-1: SerialNumber: syz [ 510.260162][ T9742] usb 4-1: config 0 descriptor?? [ 510.265932][T10720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 510.286834][ T5831] usb 1-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 510.311256][ T5831] usb 1-1: config 5 interface 215 has no altsetting 0 [ 510.321828][ T5831] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 510.332414][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.341527][ T5831] usb 1-1: Product: syz [ 510.345920][ T5831] usb 1-1: Manufacturer: syz [ 510.351092][ T5831] usb 1-1: SerialNumber: syz [ 510.358185][T10728] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 510.369963][ T9742] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 510.429852][T10733] batman_adv: batadv0: Interface deactivated: ipvlan9 [ 510.450823][T10733] batman_adv: batadv0: Removing interface: ipvlan9 [ 510.514428][T10069] apple 0003:05AC:024B.0003: unknown main item tag 0x6 [ 510.523874][ T9742] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 510.584609][T10069] apple 0003:05AC:024B.0003: ignoring exceeding usage max [ 510.634376][ T9742] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 510.638031][ T5911] usb usb42-port1: unable to enumerate USB device [ 510.643925][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.645440][T10069] apple 0003:05AC:024B.0003: invalid report_size 16640 [ 510.758409][T10738] batman_adv: batadv0: Adding interface: ipvlan12 [ 510.767256][T10069] apple 0003:05AC:024B.0003: item 0 2 1 7 parsing failed [ 510.775384][T10738] batman_adv: batadv0: The MTU of interface ipvlan12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.804260][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 510.814360][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.824723][T10738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan11 [ 510.837210][T10738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.847303][T10738] batman_adv: batadv0: Interface activated: ipvlan12 [ 510.907970][T10069] apple 0003:05AC:024B.0003: parse failed [ 510.912700][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.932879][T10069] apple 0003:05AC:024B.0003: probe with driver apple failed with error -22 [ 510.980013][T10069] usb 3-1: USB disconnect, device number 41 [ 511.523273][T10069] usb 4-1: USB disconnect, device number 17 [ 511.535882][T10069] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 511.577588][T10069] cyberjack 4-1:0.69: device disconnected [ 511.660901][ T30] audit: type=1400 audit(1753219656.870:630): avc: denied { getopt } for pid=10742 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 511.980473][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.409919][T10069] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 512.540625][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.582741][T10755] netlink: 'syz.1.1214': attribute type 12 has an invalid length. [ 512.625491][T10069] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 512.634957][T10069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.662679][T10069] usb 3-1: config 0 descriptor?? [ 512.679046][ T5896] IPVS: starting estimator thread 0... [ 512.686611][ T30] audit: type=1400 audit(1753219657.940:631): avc: denied { ioctl } for pid=10756 comm="syz.3.1216" path="socket:[32203]" dev="sockfs" ino=32203 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 512.735006][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.769758][T10758] IPVS: using max 73 ests per chain, 175200 per kthread [ 512.794663][T10757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.805058][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.827505][ T30] audit: type=1400 audit(1753219658.080:632): avc: denied { bind } for pid=10756 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.020116][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.055422][ T5831] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 513.089819][ T5831] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 513.116238][ T5831] usb 1-1: USB disconnect, device number 29 [ 513.192711][ T5831] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 513.334027][ T5831] cypress_m8 1-1:5.215: device disconnected [ 513.511771][T10765] 9pnet_virtio: no channels available for device syz [ 513.878327][T10069] pegasus 3-1:0.0: can't reset MAC [ 513.883974][T10069] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 514.408431][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.411571][T10069] usb 3-1: USB disconnect, device number 42 [ 514.459851][ T5896] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 514.520774][T10774] lo speed is unknown, defaulting to 1000 [ 514.631661][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.650337][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 514.659116][ T5896] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 514.669714][ T5896] usb 4-1: config 5 has no interface number 0 [ 514.675829][ T5896] usb 4-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 514.688247][ T5896] usb 4-1: config 5 interface 215 has no altsetting 0 [ 514.697602][ T5896] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 514.711001][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.719003][ T5896] usb 4-1: Product: syz [ 514.725411][ T5896] usb 4-1: Manufacturer: syz [ 514.730253][ T5896] usb 4-1: SerialNumber: syz [ 514.743442][T10770] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 515.163544][T10784] batman_adv: batadv0: Adding interface: ipvlan3 [ 515.170225][T10784] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.197850][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 515.208375][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.218965][T10784] batman_adv: batadv0: Interface activated: ipvlan3 [ 515.426727][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.428613][ T5896] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 515.507457][ T5896] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 515.580224][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.626295][ T5896] usb 4-1: USB disconnect, device number 18 [ 515.658979][ T5896] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 515.700663][ T5911] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 515.742476][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.745063][ T5896] cypress_m8 4-1:5.215: device disconnected [ 515.867037][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.906079][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 515.997821][ T5911] usb 5-1: config 5 has an invalid interface number: 215 but max is 0 [ 516.159111][ T5911] usb 5-1: config 5 has no interface number 0 [ 516.380939][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.406037][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.423952][ T5911] usb 5-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 516.460788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.484511][ T5911] usb 5-1: config 5 interface 215 has no altsetting 0 [ 516.540255][ T5911] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 516.562117][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.599791][ T5911] usb 5-1: Product: syz [ 516.697319][ T5911] usb 5-1: Manufacturer: syz [ 516.702052][ T5911] usb 5-1: SerialNumber: syz [ 516.714006][T10783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.524957][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.722087][ T5911] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected [ 517.838377][T10806] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 517.844938][T10806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 517.852499][T10806] vhci_hcd vhci_hcd.0: Device attached [ 517.874033][ T5911] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 518.366326][ T5911] usb 5-1: USB disconnect, device number 21 [ 518.366905][T10069] vhci_hcd: vhci_device speed not set [ 518.393740][ T5911] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 518.409923][ T5911] cypress_m8 5-1:5.215: device disconnected [ 518.500019][T10069] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 518.540272][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.624767][T10815] lo speed is unknown, defaulting to 1000 [ 518.645366][T10807] vhci_hcd: connection reset by peer [ 518.697059][ T3522] vhci_hcd: stop threads [ 518.719740][ T3522] vhci_hcd: release socket [ 518.726434][T10818] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 518.730582][ T3522] vhci_hcd: disconnect device [ 518.739270][T10818] netlink: 'syz.2.1231': attribute type 9 has an invalid length. [ 518.747136][ T30] audit: type=1400 audit(1753219663.990:633): avc: denied { ioctl } for pid=10817 comm="syz.2.1231" path="socket:[32594]" dev="sockfs" ino=32594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.758580][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 518.804835][T10818] hsr0: entered promiscuous mode [ 518.814855][T10818] macvlan2: entered promiscuous mode [ 518.832329][T10818] macvlan2: entered allmulticast mode [ 518.837904][T10818] hsr0: entered allmulticast mode [ 518.851823][T10818] hsr_slave_0: entered allmulticast mode [ 518.857478][T10818] hsr_slave_1: entered allmulticast mode [ 518.952050][ T5831] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 519.175284][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.189330][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.208122][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.208591][ T30] audit: type=1400 audit(1753219664.460:634): avc: denied { connect } for pid=10826 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 519.219160][ T5831] usb 4-1: config 1 interface 0 has no altsetting 1 [ 519.597330][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.605557][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.626011][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.677389][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.693486][ T5831] usb 4-1: Product: syz [ 519.698024][ T5831] usb 4-1: Manufacturer: syz [ 519.702849][ T5831] usb 4-1: SerialNumber: syz [ 519.740094][ T5831] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 519.761779][ T5831] cdc_ncm 4-1:1.0: bind() failure [ 520.430526][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.663121][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.675113][T10840] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 520.822969][T10846] 9pnet_virtio: no channels available for device syz [ 520.847197][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.870587][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.929806][ T7323] Bluetooth: hci5: Frame reassembly failed (-84) [ 521.002512][ T30] audit: type=1400 audit(1753219666.240:635): avc: denied { execute } for pid=10847 comm="syz.4.1240" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 521.217715][ T30] audit: type=1400 audit(1753219666.440:636): avc: denied { create } for pid=10847 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 521.250176][T10851] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 521.534390][ T9742] usb 4-1: USB disconnect, device number 19 [ 522.008388][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.131224][ T30] audit: type=1400 audit(1753219667.380:637): avc: denied { set_context_mgr } for pid=10858 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 522.154512][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.209571][T10865] xt_hashlimit: max too large, truncated to 1048576 [ 522.333583][T10862] netlink: 'syz.0.1242': attribute type 21 has an invalid length. [ 522.341550][T10862] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1242'. [ 522.588182][T10869] FAULT_INJECTION: forcing a failure. [ 522.588182][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.601334][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.1.1244 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 522.601358][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.601370][T10869] Call Trace: [ 522.601376][T10869] [ 522.601383][T10869] dump_stack_lvl+0x16c/0x1f0 [ 522.601417][T10869] should_fail_ex+0x512/0x640 [ 522.601454][T10869] _copy_from_user+0x2e/0xd0 [ 522.601473][T10869] copy_msghdr_from_user+0x98/0x160 [ 522.601502][T10869] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 522.601533][T10869] ? __lock_acquire+0xb8a/0x1c90 [ 522.601558][T10869] ___sys_sendmsg+0xfe/0x1d0 [ 522.601587][T10869] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.601646][T10869] __sys_sendmsg+0x16d/0x220 [ 522.601664][T10869] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.601698][T10869] do_syscall_64+0xcd/0x4c0 [ 522.601718][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.601738][T10869] RIP: 0033:0x7fc791f8e9a9 [ 522.601752][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.601769][T10869] RSP: 002b:00007fc792dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.601787][T10869] RAX: ffffffffffffffda RBX: 00007fc7921b6160 RCX: 00007fc791f8e9a9 [ 522.601799][T10869] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 522.601810][T10869] RBP: 00007fc792dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 522.601820][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.601831][T10869] R13: 0000000000000000 R14: 00007fc7921b6160 R15: 00007ffdf2f23158 [ 522.601855][T10869] [ 522.756552][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.831473][ T30] audit: type=1400 audit(1753219667.840:638): avc: denied { bind } for pid=10866 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.939730][ T5153] Bluetooth: hci5: command 0x1003 tx timeout [ 522.943216][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 523.037911][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.302311][ T30] audit: type=1400 audit(1753219668.560:639): avc: denied { name_bind } for pid=10876 comm="syz.0.1247" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 523.360875][T10875] FAULT_INJECTION: forcing a failure. [ 523.360875][T10875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.384180][T10875] CPU: 1 UID: 0 PID: 10875 Comm: syz.3.1246 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 523.384208][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.384219][T10875] Call Trace: [ 523.384225][T10875] [ 523.384232][T10875] dump_stack_lvl+0x16c/0x1f0 [ 523.384267][T10875] should_fail_ex+0x512/0x640 [ 523.384300][T10875] _copy_to_user+0x32/0xd0 [ 523.384322][T10875] simple_read_from_buffer+0xcb/0x170 [ 523.384353][T10875] proc_fail_nth_read+0x197/0x270 [ 523.384381][T10875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.384409][T10875] ? rw_verify_area+0xcf/0x680 [ 523.384434][T10875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.384461][T10875] vfs_read+0x1e1/0xc60 [ 523.384498][T10875] ? __pfx___mutex_lock+0x10/0x10 [ 523.384518][T10875] ? __pfx_vfs_read+0x10/0x10 [ 523.384551][T10875] ? __fget_files+0x20e/0x3c0 [ 523.384576][T10875] ksys_read+0x12a/0x250 [ 523.384602][T10875] ? __pfx_ksys_read+0x10/0x10 [ 523.384628][T10875] ? fput+0x70/0xf0 [ 523.384654][T10875] do_syscall_64+0xcd/0x4c0 [ 523.384674][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.384694][T10875] RIP: 0033:0x7f446978d3bc [ 523.384709][T10875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 523.384727][T10875] RSP: 002b:00007f446a678030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.384745][T10875] RAX: ffffffffffffffda RBX: 00007f44699b5fa0 RCX: 00007f446978d3bc [ 523.384757][T10875] RDX: 000000000000000f RSI: 00007f446a6780a0 RDI: 0000000000000004 [ 523.384768][T10875] RBP: 00007f446a678090 R08: 0000000000000000 R09: 0000000000000000 [ 523.384779][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.384789][T10875] R13: 0000000000000000 R14: 00007f44699b5fa0 R15: 00007ffea1b7f5d8 [ 523.384814][T10875] [ 523.571690][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 523.639754][ T9742] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 523.659762][T10069] vhci_hcd: vhci_device speed not set [ 523.791656][ T9742] usb 5-1: Using ep0 maxpacket: 16 [ 523.798575][ T9742] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 523.808790][ T9742] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 523.817517][ T9742] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 523.826848][ T9742] usb 5-1: config 0 has no interface number 0 [ 523.855967][ T9742] usb 5-1: config 0 interface 9 has no altsetting 0 [ 523.893446][ T9742] usb 5-1: config 0 interface 9 has no altsetting 1 [ 524.012047][ T9742] usb 5-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 524.114010][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.147541][ T9742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.163066][ T9742] usb 5-1: Product: syz [ 524.235183][ T9742] usb 5-1: Manufacturer: syz [ 524.240727][ T9742] usb 5-1: SerialNumber: syz [ 524.273400][ T9742] usb 5-1: config 0 descriptor?? [ 524.412578][ T30] audit: type=1400 audit(1753219669.670:640): avc: denied { setopt } for pid=10892 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 524.456198][ T30] audit: type=1400 audit(1753219669.690:641): avc: denied { getopt } for pid=10892 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.489431][ T9742] usb 5-1: selecting invalid altsetting 1 [ 524.505845][ T9742] sierra 5-1:0.9: Sierra USB modem converter detected [ 524.513177][T10895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 524.519684][T10895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 524.527173][T10895] vhci_hcd vhci_hcd.0: Device attached [ 524.654467][ T9742] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 524.667851][ T30] audit: type=1400 audit(1753219669.690:642): avc: denied { write } for pid=10892 comm="syz.0.1251" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 524.710085][ T5831] vhci_hcd: vhci_device speed not set [ 524.960908][ T5831] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 525.064533][ T9742] usb 5-1: USB disconnect, device number 22 [ 525.073485][ T9742] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 525.207859][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.230119][ T30] audit: type=1400 audit(1753219669.740:643): avc: denied { write } for pid=10870 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 525.231576][ T9742] sierra 5-1:0.9: device disconnected [ 525.286378][T10897] vhci_hcd: connection reset by peer [ 525.300989][ T7323] vhci_hcd: stop threads [ 525.305382][ T7323] vhci_hcd: release socket [ 525.310143][ T7323] vhci_hcd: disconnect device [ 526.078830][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.177653][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 526.278460][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.630926][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.639945][T10923] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 526.648069][T10923] lo: entered promiscuous mode [ 526.654110][T10923] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.710328][T10923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.838412][ T5889] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 526.909812][ T9742] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 527.015424][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 527.031323][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 527.041751][ T5889] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 527.051535][ T5889] usb 2-1: config 5 has no interface number 0 [ 527.058170][ T5889] usb 2-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 527.069594][ T5889] usb 2-1: config 5 interface 215 has no altsetting 0 [ 527.083262][ T9742] usb 4-1: Using ep0 maxpacket: 16 [ 527.105099][ T5889] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 527.105279][ T9742] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 527.115957][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.132674][ T9742] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 527.143607][ T5889] usb 2-1: Product: syz [ 527.143725][ T9742] usb 4-1: config 1 has no interface number 1 [ 527.151800][ T5889] usb 2-1: Manufacturer: syz [ 527.159006][ T9742] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 527.168730][ T5889] usb 2-1: SerialNumber: syz [ 527.174369][ T9742] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.223816][T10918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.231272][ T9742] usb 4-1: config 1 interface 105 has no altsetting 0 [ 527.250157][ T9742] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 527.259950][ T9742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.282508][ T9742] usb 4-1: Product: syz [ 527.289698][ T9742] usb 4-1: Manufacturer: syz [ 527.311507][ T9742] usb 4-1: SerialNumber: syz [ 527.340306][T10924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 527.343096][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.749804][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 527.908111][ T9742] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 527.939115][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.987350][ T9742] usb 4-1: USB disconnect, device number 20 [ 528.331576][ T24] usb 5-1: config index 0 descriptor too short (expected 22, got 18) [ 528.360846][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 528.379970][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.398512][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.464854][ T5889] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 528.473040][ T24] usb 5-1: config 0 descriptor?? [ 528.496492][ T24] cp210x 5-1:0.0: cp210x converter detected [ 528.508732][ T5889] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 528.545883][ T5889] usb 2-1: USB disconnect, device number 23 [ 528.621120][ T5889] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 528.674179][ T5889] cypress_m8 2-1:5.215: device disconnected [ 528.914355][ T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 529.060751][ T9742] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 529.127232][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.135802][ T24] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 529.163545][ T24] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 529.221390][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 529.281519][ T9742] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.293221][ T9742] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.420083][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.453277][ T9742] usb 1-1: config 0 interface 0 has no altsetting 0 [ 529.467450][ T9742] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 529.482163][ T9742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.494677][ T9742] usb 1-1: config 0 descriptor?? [ 529.640076][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 529.729887][T10069] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 529.899757][T10069] usb 2-1: Using ep0 maxpacket: 32 [ 529.906672][T10069] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 529.917461][T10069] usb 2-1: config 0 has no interface number 0 [ 529.923788][T10069] usb 2-1: config 0 interface 184 has no altsetting 0 [ 529.934182][T10069] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 529.943586][T10069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.951776][T10069] usb 2-1: Product: syz [ 529.956215][T10069] usb 2-1: Manufacturer: syz [ 529.960958][T10069] usb 2-1: SerialNumber: syz [ 529.971422][ T9742] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 529.981776][ T9742] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 529.991134][ T9742] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 530.032042][T10069] usb 2-1: config 0 descriptor?? [ 530.042438][T10069] smsc75xx v1.0.0 [ 530.060040][ T9742] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 530.072731][ T9742] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0004/input/input9 [ 530.444607][ T30] audit: type=1400 audit(1753219675.420:644): avc: denied { setopt } for pid=10966 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 530.487455][ T5831] vhci_hcd: vhci_device speed not set [ 530.665737][ T5896] usb 5-1: USB disconnect, device number 23 [ 530.675224][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.698967][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 530.703083][ T30] audit: type=1400 audit(1753219675.950:645): avc: denied { create } for pid=10947 comm="syz.0.1265" name="#4b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 530.731612][ T5896] cp210x 5-1:0.0: device disconnected [ 530.752976][ T9742] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 530.776116][ T9742] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 530.818903][ T9742] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 530.868902][ T30] audit: type=1400 audit(1753219675.980:646): avc: denied { link } for pid=10947 comm="syz.0.1265" name="#4b" dev="tmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 530.928771][ T9742] usb 1-1: USB disconnect, device number 30 [ 531.591374][T10976] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 531.593211][ T30] audit: type=1400 audit(1753219675.980:647): avc: denied { rename } for pid=10947 comm="syz.0.1265" name="#4c" dev="tmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 531.660350][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 531.739061][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 531.999888][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.096317][T10987] FAULT_INJECTION: forcing a failure. [ 532.096317][T10987] name failslab, interval 1, probability 0, space 0, times 0 [ 532.109124][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.4.1274 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 532.109148][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.109157][T10987] Call Trace: [ 532.109162][T10987] [ 532.109166][T10987] dump_stack_lvl+0x16c/0x1f0 [ 532.109190][T10987] should_fail_ex+0x512/0x640 [ 532.109207][T10987] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 532.109226][T10987] should_failslab+0xc2/0x120 [ 532.109237][T10987] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 532.109253][T10987] ? find_held_lock+0x2b/0x80 [ 532.109273][T10987] ? getname_flags.part.0+0x4c/0x550 [ 532.109290][T10987] getname_flags.part.0+0x4c/0x550 [ 532.109305][T10987] getname_flags+0x93/0xf0 [ 532.109321][T10987] do_sys_openat2+0xb8/0x1d0 [ 532.109335][T10987] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.109348][T10987] ? __fget_files+0x20e/0x3c0 [ 532.109361][T10987] __x64_sys_creat+0xcc/0x120 [ 532.109374][T10987] ? __pfx___x64_sys_creat+0x10/0x10 [ 532.109387][T10987] ? __pfx_ksys_write+0x10/0x10 [ 532.109405][T10987] ? rcu_is_watching+0x12/0xc0 [ 532.109419][T10987] ? do_syscall_64+0x91/0x4c0 [ 532.109430][T10987] do_syscall_64+0xcd/0x4c0 [ 532.109441][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.109453][T10987] RIP: 0033:0x7f2a7378e9a9 [ 532.109462][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.109473][T10987] RSP: 002b:00007f2a74638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 532.109484][T10987] RAX: ffffffffffffffda RBX: 00007f2a739b6160 RCX: 00007f2a7378e9a9 [ 532.109491][T10987] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 00002000000001c0 [ 532.109498][T10987] RBP: 00007f2a74638090 R08: 0000000000000000 R09: 0000000000000000 [ 532.109504][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.109510][T10987] R13: 0000000000000000 R14: 00007f2a739b6160 R15: 00007ffc13cf45d8 [ 532.109524][T10987] [ 532.483274][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.505341][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.516428][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 532.527278][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 532.537687][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 532.566665][T10069] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 532.573049][T10977] fido_id[10977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 532.585520][T10069] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 532.732550][ T9742] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 532.909268][T10069] usb 2-1: USB disconnect, device number 24 [ 532.932625][T10990] netlink: 'syz.3.1276': attribute type 9 has an invalid length. [ 532.953633][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 533.019992][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.079057][T10990] macvlan0: entered promiscuous mode [ 533.100003][T10990] hsr0: entered promiscuous mode [ 533.121654][T10990] macvlan0: entered allmulticast mode [ 533.128042][T10990] hsr0: entered allmulticast mode [ 533.133651][T10990] hsr_slave_0: entered allmulticast mode [ 533.139357][T10990] hsr_slave_1: entered allmulticast mode [ 533.150349][T11003] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 533.156883][T11003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 533.165815][T11003] vhci_hcd vhci_hcd.0: Device attached [ 533.330632][T11005] vhci_hcd: connection closed [ 533.330988][ T7323] vhci_hcd: stop threads [ 533.360376][ T7323] vhci_hcd: release socket [ 533.369288][ T7323] vhci_hcd: disconnect device [ 533.374495][ T9742] vhci_hcd: vhci_device speed not set [ 533.387245][T11010] netlink: 'syz.2.1279': attribute type 12 has an invalid length. [ 533.706127][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.060024][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.334963][T11025] 9pnet_virtio: no channels available for device syz [ 534.728071][T11029] netlink: 'syz.3.1284': attribute type 7 has an invalid length. [ 534.758759][T11029] netlink: 'syz.3.1284': attribute type 8 has an invalid length. [ 535.099815][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.689146][T11035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 535.717863][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.045059][ T30] audit: type=1326 audit(1753219681.300:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.1288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faadbf8e9a9 code=0x0 [ 536.140026][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.399782][ T24] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 536.629479][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 536.648438][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 536.913228][ T24] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 536.924337][ T24] usb 1-1: config 5 has no interface number 0 [ 536.933380][ T24] usb 1-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 536.948144][ T24] usb 1-1: config 5 interface 215 has no altsetting 0 [ 536.958648][ T24] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 536.972324][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.982217][ T24] usb 1-1: Product: syz [ 536.986520][ T24] usb 1-1: Manufacturer: syz [ 536.992850][ T24] usb 1-1: SerialNumber: syz [ 537.008767][T11041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.129818][T10069] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 537.191258][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.205538][T11053] netlink: 'syz.4.1291': attribute type 9 has an invalid length. [ 537.213688][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 537.262364][T11053] hsr0: entered promiscuous mode [ 537.281751][T11053] macvlan2: entered promiscuous mode [ 537.285670][T10069] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.296337][T11053] macvlan2: entered allmulticast mode [ 537.306446][T10069] usb 2-1: not running at top speed; connect to a high speed hub [ 537.327326][T11053] hsr0: entered allmulticast mode [ 537.339025][T10069] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 537.343948][T11053] hsr_slave_0: entered allmulticast mode [ 537.359710][T10069] usb 2-1: config 5 has no interface number 0 [ 537.365188][T11053] hsr_slave_1: entered allmulticast mode [ 537.371456][T10069] usb 2-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 537.371488][T10069] usb 2-1: config 5 interface 215 has no altsetting 0 [ 537.373546][T10069] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 537.423544][T10069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.444783][T10069] usb 2-1: Product: syz [ 537.455833][T10069] usb 2-1: Manufacturer: syz [ 537.463332][T10069] usb 2-1: SerialNumber: syz [ 537.477560][T11050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 537.655122][ T5955] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 537.827909][ T5955] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 537.867509][T11061] batman_adv: batadv0: Adding interface: ipvlan12 [ 537.874257][T11061] batman_adv: batadv0: The MTU of interface ipvlan12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.900735][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.943067][T11061] batman_adv: batadv0: Interface activated: ipvlan12 [ 538.039730][ T9742] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 538.140203][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.178996][ T5955] usb 4-1: config 0 descriptor?? [ 538.220312][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.272767][ T9742] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 538.320810][ T9742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.368631][ T9742] usb 5-1: config 0 descriptor?? [ 538.549213][ T24] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 538.567642][ T24] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 538.608830][ T24] usb 1-1: USB disconnect, device number 31 [ 538.633676][ T24] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 538.661349][ T24] cypress_m8 1-1:5.215: device disconnected [ 538.779429][T10069] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 538.788839][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.799250][T10069] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 538.815678][T10069] usb 2-1: USB disconnect, device number 25 [ 538.918338][T10069] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 538.935650][T10069] cypress_m8 2-1:5.215: device disconnected [ 539.243675][ T5955] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 539.263444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.278699][ T5955] usb 4-1: USB disconnect, device number 21 [ 539.407439][T11074] netlink: 'syz.0.1296': attribute type 12 has an invalid length. [ 539.420101][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.458316][ T9742] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 539.586567][T11076] netlink: 'syz.1.1297': attribute type 9 has an invalid length. [ 539.594808][ T9742] usb 5-1: USB disconnect, device number 24 [ 539.596782][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 539.740743][T11076] macvlan3: entered promiscuous mode [ 539.754944][T11076] macvlan3: entered allmulticast mode [ 540.921931][T11081] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 540.949719][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.078469][T11084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 541.085022][T11084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 541.092718][T11084] vhci_hcd vhci_hcd.0: Device attached [ 541.480018][ T5955] vhci_hcd: vhci_device speed not set [ 541.792108][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 541.819787][ T5955] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 541.860722][T11085] vhci_hcd: connection reset by peer [ 541.915742][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.103665][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.240928][ T49] vhci_hcd: stop threads [ 542.245220][ T49] vhci_hcd: release socket [ 542.267354][T11100] netlink: 'syz.1.1303': attribute type 9 has an invalid length. [ 542.278450][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 542.412023][ T49] vhci_hcd: disconnect device [ 542.436548][T11100] macvlan4: entered promiscuous mode [ 542.499326][T11100] macvlan4: entered allmulticast mode [ 542.504063][T11098] Cannot find add_set index 0 as target [ 542.525267][T11098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.590535][ T30] audit: type=1400 audit(1753219687.810:649): avc: denied { execute } for pid=11095 comm="syz.3.1302" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 542.819826][ T30] audit: type=1400 audit(1753219688.070:650): avc: denied { read write } for pid=11102 comm="syz.0.1305" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 542.880319][ T30] audit: type=1400 audit(1753219688.070:651): avc: denied { open } for pid=11102 comm="syz.0.1305" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 542.971018][T11115] usb usb8: usbfs: process 11115 (syz.3.1307) did not claim interface 0 before use [ 543.169755][ T9742] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 543.180037][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.317833][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1313'. [ 543.341615][ T9742] usb 3-1: Using ep0 maxpacket: 8 [ 543.354012][ T9742] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 543.371569][ T9742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.394941][ T9742] usb 3-1: Product: syz [ 543.406058][ T9742] usb 3-1: Manufacturer: syz [ 543.418826][ T9742] usb 3-1: SerialNumber: syz [ 543.477216][ T9742] usb 3-1: config 0 descriptor?? [ 543.515293][ T9742] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 543.802452][ T5843] Bluetooth: hci2: Malformed LE Event: 0x0d [ 543.842825][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'. [ 543.870834][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'. [ 543.888573][T11134] erspan0: entered promiscuous mode [ 543.897878][T11134] gretap0: entered promiscuous mode [ 543.901240][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.973210][ T30] audit: type=1400 audit(1753219689.230:652): avc: denied { map } for pid=11137 comm="syz.1.1318" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 544.005149][ T30] audit: type=1400 audit(1753219689.230:653): avc: denied { execute } for pid=11137 comm="syz.1.1318" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 544.103989][ T30] audit: type=1400 audit(1753219689.360:654): avc: denied { ioctl } for pid=11142 comm="syz.1.1319" path="socket:[36899]" dev="sockfs" ino=36899 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 544.152373][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.180810][T11143] bond0: (slave rose0): Enslaving as an active interface with an up link [ 544.222196][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.540262][ T974] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 544.557985][ T24] usb 3-1: USB disconnect, device number 43 [ 544.600025][ T9742] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 544.709862][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 544.721794][ T974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.732295][ T974] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 544.753772][ T974] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 544.788446][ T9742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.797798][ T974] usb 2-1: config 4 interface 0 has no altsetting 0 [ 544.808672][ T9742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.821658][ T9742] usb 1-1: Product: syz [ 544.827102][ T9742] usb 1-1: Manufacturer: syz [ 544.832130][ T9742] usb 1-1: SerialNumber: syz [ 544.838028][ T974] usb 2-1: string descriptor 0 read error: -22 [ 544.846172][ T974] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 544.867612][ T9742] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 544.883160][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.909856][T10069] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.937194][ T974] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 544.969563][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.988534][ T974] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 545.015437][ T974] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 545.033388][ T974] usb 2-1: media controller created [ 545.097007][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.167703][ T974] zl10353_read_register: readreg error (reg=127, ret==0) [ 545.210842][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.262841][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.274425][T11192] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 545.278191][ T974] usb 2-1: USB disconnect, device number 26 [ 545.379513][T11194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'. [ 545.415835][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1330'. [ 545.916120][ T30] audit: type=1400 audit(1753219691.170:655): avc: denied { bind } for pid=11215 comm="syz.1.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.989710][T10069] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 546.016893][ T30] audit: type=1400 audit(1753219691.170:656): avc: denied { listen } for pid=11215 comm="syz.1.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.020721][T10069] ath9k_htc: Failed to initialize the device [ 546.062887][ T30] audit: type=1400 audit(1753219691.170:657): avc: denied { accept } for pid=11215 comm="syz.1.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.087451][T10069] usb 1-1: ath9k_htc: USB layer deinitialized [ 546.164607][ T30] audit: type=1400 audit(1753219691.420:658): avc: denied { mount } for pid=11226 comm="syz.1.1341" name="/" dev="autofs" ino=36097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 546.221060][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 546.300643][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.309987][ T5831] usb 1-1: USB disconnect, device number 32 [ 546.389696][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 546.396733][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.406162][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 546.415433][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.423513][ T24] usb 5-1: Product: syz [ 546.427878][ T24] usb 5-1: Manufacturer: syz [ 546.432549][ T24] usb 5-1: SerialNumber: syz [ 546.440724][ T24] usb 5-1: config 0 descriptor?? [ 546.509938][ T5882] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 546.673039][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 546.684636][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 546.695652][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 546.705454][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.718365][ T5882] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.727453][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.737788][ T5882] usb 3-1: config 0 descriptor?? [ 546.850751][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 546.903392][T11246] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 546.909957][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.918960][T11246] vhci_hcd vhci_hcd.0: Device attached [ 546.933226][ T5955] vhci_hcd: vhci_device speed not set [ 546.944040][T11246] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 546.950582][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.959040][T11246] vhci_hcd vhci_hcd.0: Device attached [ 546.967855][T11246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 546.994839][T11246] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 547.001394][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 547.010644][T11246] vhci_hcd vhci_hcd.0: Device attached [ 547.022692][T11246] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 547.029326][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.046356][T11246] vhci_hcd vhci_hcd.0: Device attached [ 547.052603][ T24] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 547.070926][T11246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.081236][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 547.082069][T11246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.101326][T10069] vhci_hcd: vhci_device speed not set [ 547.133050][T11246] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 547.139676][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 547.166328][ T5882] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 547.169743][T10069] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 547.178651][T11246] vhci_hcd vhci_hcd.0: Device attached [ 547.229199][T11261] vhci_hcd: connection closed [ 547.229356][ T12] vhci_hcd: stop threads [ 547.231036][T11257] vhci_hcd: connection closed [ 547.237539][T11251] vhci_hcd: connection closed [ 547.243172][T11247] vhci_hcd: connection reset by peer [ 547.253353][T11255] vhci_hcd: connection closed [ 547.253534][ T12] vhci_hcd: release socket [ 547.255607][ T9742] usb 5-1: USB disconnect, device number 25 [ 547.259540][ T12] vhci_hcd: disconnect device [ 547.273347][ T5831] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 547.284298][ T12] vhci_hcd: stop threads [ 547.288640][ T12] vhci_hcd: release socket [ 547.293235][ T12] vhci_hcd: disconnect device [ 547.299010][ T12] vhci_hcd: stop threads [ 547.306091][ T12] vhci_hcd: release socket [ 547.311300][ T12] vhci_hcd: disconnect device [ 547.318075][ T12] vhci_hcd: stop threads [ 547.324519][ T12] vhci_hcd: release socket [ 547.329033][ T12] vhci_hcd: disconnect device [ 547.335556][ T12] vhci_hcd: stop threads [ 547.340588][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.369698][ T12] vhci_hcd: release socket [ 547.374258][ T12] vhci_hcd: disconnect device [ 547.431015][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 547.437469][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.448416][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.458910][ T5831] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 547.468003][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.477833][ T5831] usb 2-1: config 0 descriptor?? [ 547.775246][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 547.775264][ T30] audit: type=1326 audit(1753219693.030:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc132d8e9a9 code=0x7ffc0000 [ 547.831976][ T30] audit: type=1326 audit(1753219693.030:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc132d8e9a9 code=0x7ffc0000 [ 547.871296][ T30] audit: type=1326 audit(1753219693.070:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc132d8e9a9 code=0x7ffc0000 [ 547.906903][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 547.917564][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 547.941661][ T5831] usb 2-1: USB disconnect, device number 27 [ 547.949944][ T30] audit: type=1326 audit(1753219693.070:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc132d8e9a9 code=0x7ffc0000 [ 547.982795][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.982799][ T30] audit: type=1326 audit(1753219693.070:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc132d8e9a9 code=0x7ffc0000 [ 548.275583][T11285] block nbd0: shutting down sockets [ 548.381629][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.082598][T11302] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 549.093796][T11302] overlayfs: missing 'lowerdir' [ 549.120025][ T30] audit: type=1400 audit(1753219694.370:670): avc: denied { read write } for pid=11299 comm="syz.1.1365" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 549.219777][ T30] audit: type=1400 audit(1753219694.370:671): avc: denied { open } for pid=11299 comm="syz.1.1365" path="/299/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 549.255408][ T30] audit: type=1326 audit(1753219694.510:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7378e9a9 code=0x7ffc0000 [ 549.299330][ T30] audit: type=1326 audit(1753219694.510:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2a7378e9a9 code=0x7ffc0000 [ 549.357920][ T30] audit: type=1326 audit(1753219694.510:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7378e9a9 code=0x7ffc0000 [ 549.400670][ T5831] usb 3-1: USB disconnect, device number 44 [ 549.409683][ T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 549.424155][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.590900][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 549.604193][ T48] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 549.630258][ T48] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.663038][ T48] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.671968][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.711067][ T48] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.727059][T11332] syz_tun: entered allmulticast mode [ 549.770185][T11332] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 549.786059][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 549.824195][ T48] usb 4-1: config 0 has no interface number 0 [ 549.881481][ T48] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 549.956691][ T48] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 549.967940][T11336] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 549.996625][ T48] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 550.018230][ T48] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.031965][ T48] usb 4-1: config 0 interface 125 has no altsetting 0 [ 550.038717][ T48] usb 4-1: config 0 interface 125 has no altsetting 2 [ 550.047858][ T48] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 550.057157][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.088717][ T48] usb 4-1: Product: syz [ 550.093073][ T48] usb 4-1: Manufacturer: syz [ 550.097746][ T48] usb 4-1: SerialNumber: syz [ 550.134376][ T48] usb 4-1: config 0 descriptor?? [ 550.150496][ T48] usb 4-1: selecting invalid altsetting 2 [ 550.164851][T11343] ISOFS: Unable to identify CD-ROM format. [ 550.239795][ T9742] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 550.259938][ T974] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 550.417672][ T9742] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 550.426490][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 550.432566][ T9742] usb 2-1: config 0 has no interface number 0 [ 550.438672][ T9742] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 550.453835][ T5955] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 550.465384][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.477104][ T9742] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 550.478087][ T5911] kernel write not supported for file /983/clear_refs (pid: 5911 comm: kworker/1:7) [ 550.486221][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.486263][ T974] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.486284][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.487448][ T9742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.497005][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.507420][ T974] usb 1-1: config 0 descriptor?? [ 550.547127][ T9742] usb 2-1: config 0 descriptor?? [ 550.553110][T11337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 550.570136][ T974] hub 1-1:0.0: USB hub found [ 550.630314][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 550.637756][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 550.650374][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.681337][ T5955] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.690602][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.698615][ T5955] usb 3-1: Product: syz [ 550.702887][ T5955] usb 3-1: Manufacturer: syz [ 550.707513][ T5955] usb 3-1: SerialNumber: syz [ 550.714737][ T5955] usb 3-1: config 0 descriptor?? [ 550.722494][ T5955] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 550.732691][ T5955] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 550.783798][ T974] hub 1-1:0.0: 1 port detected [ 550.802891][ T24] usb 2-1: USB disconnect, device number 28 [ 550.951367][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.021796][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.162539][ C1] usb 4-1: async_complete: urb error -71 [ 551.169669][ T48] get_1284_register: usb error -71 [ 551.175763][ T48] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 551.196569][ T48] usb 4-1: USB disconnect, device number 22 [ 551.329906][ T5955] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 551.338060][ T5955] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 551.398101][ T974] hub 1-1:0.0: activate --> -90 [ 551.501728][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.514413][T11370] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.807090][ T5911] usb 1-1: USB disconnect, device number 33 [ 551.807382][ T974] usb 1-1: Failed to suspend device, error -71 [ 551.960374][ T5955] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 551.979761][ T48] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 552.131200][ T48] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 552.141529][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.152558][ T48] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.166286][ T48] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.175495][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.176011][ T5955] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 552.194260][ T5955] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 552.197122][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.202905][ T5955] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 552.219265][ T48] usb 4-1: invalid MIDI out EP 0 [ 552.219473][ T5955] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 552.224983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.242142][ T5955] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 552.253328][ T5955] usb 3-1: USB disconnect, device number 45 [ 552.310601][T10069] vhci_hcd: vhci_device speed not set [ 552.365283][ T48] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 552.410578][ T48] usb 4-1: USB disconnect, device number 23 [ 552.473795][T11388] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 552.480351][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.488590][T11388] vhci_hcd vhci_hcd.0: Device attached [ 552.497403][T11388] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 552.504018][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.513857][T11388] vhci_hcd vhci_hcd.0: Device attached [ 552.520855][T11388] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 552.527440][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 552.535184][T11388] vhci_hcd vhci_hcd.0: Device attached [ 552.543409][T11388] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 552.550013][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.557689][T11388] vhci_hcd vhci_hcd.0: Device attached [ 552.564321][T11388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.573183][T11388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.582720][T11388] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21) [ 552.589326][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.599018][T11388] vhci_hcd vhci_hcd.0: Device attached [ 552.616350][T11397] vhci_hcd: connection closed [ 552.616773][T11395] vhci_hcd: connection closed [ 552.617340][T11393] vhci_hcd: connection closed [ 552.626890][ T73] vhci_hcd: stop threads [ 552.635938][T11389] vhci_hcd: connection closed [ 552.636059][T11391] vhci_hcd: connection closed [ 552.639697][ T73] vhci_hcd: release socket [ 552.650523][ T73] vhci_hcd: disconnect device [ 552.655278][ T73] vhci_hcd: stop threads [ 552.659523][ T73] vhci_hcd: release socket [ 552.659715][ T974] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 552.664064][ T73] vhci_hcd: disconnect device [ 552.671713][ T5955] vhci_hcd: vhci_device speed not set [ 552.676366][ T73] vhci_hcd: stop threads [ 552.686020][ T73] vhci_hcd: release socket [ 552.690880][ T73] vhci_hcd: disconnect device [ 552.695679][ T73] vhci_hcd: stop threads [ 552.705290][ T73] vhci_hcd: release socket [ 552.711801][ T73] vhci_hcd: disconnect device [ 552.716740][ T73] vhci_hcd: stop threads [ 552.729741][ T73] vhci_hcd: release socket [ 552.738244][ T73] vhci_hcd: disconnect device [ 552.739729][ T5955] usb 35-1: new full-speed USB device number 6 using vhci_hcd [ 552.751230][ T5955] usb 35-1: enqueue for inactive port 0 [ 552.820567][ T5955] vhci_hcd: vhci_device speed not set [ 552.829719][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 552.841832][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.859006][ T974] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 552.870736][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.878943][ T974] usb 1-1: Product: syz [ 552.884479][ T974] usb 1-1: Manufacturer: syz [ 552.889469][ T974] usb 1-1: SerialNumber: syz [ 552.897253][ T974] usb 1-1: config 0 descriptor?? [ 552.999674][ T48] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 553.038043][T11412] overlayfs: failed to get inode (-116) [ 553.115069][ T974] usb 1-1: USB disconnect, device number 34 [ 553.173908][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 553.185804][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.212468][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.229579][ T48] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 553.255173][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.279393][ T48] usb 3-1: config 0 descriptor?? [ 553.581094][ T5911] net_ratelimit: 1 callbacks suppressed [ 553.581110][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.600316][ T974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 553.649557][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 553.657374][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 553.708274][ T48] aquacomputer_d5next 0003:0C70:F0B6.0007: unknown main item tag 0x2 [ 553.730042][ T48] aquacomputer_d5next 0003:0C70:F0B6.0007: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 553.759975][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 553.778330][ T974] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 553.798008][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.818183][ T974] usb 4-1: Product: syz [ 553.828223][ T974] usb 4-1: Manufacturer: syz [ 553.838686][ T974] usb 4-1: SerialNumber: syz [ 553.851679][ T974] usb 4-1: config 0 descriptor?? [ 553.871864][ T974] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 553.921645][ T48] libceph: connect (1)[c::]:6789 error -101 [ 553.948802][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 553.955553][ T5911] usb 3-1: USB disconnect, device number 46 [ 554.061877][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.191956][T11451] loop6: detected capacity change from 0 to 524287999 [ 554.192047][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 554.192061][ T30] audit: type=1400 audit(1753219699.440:682): avc: denied { append } for pid=11450 comm="syz.0.1420" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 554.228564][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.465572][T11433] ceph: No mds server is up or the cluster is laggy [ 554.474087][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 554.499654][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 554.507557][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 554.633108][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.651277][ T30] audit: type=1326 audit(1753219699.910:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.2.1422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faadbf8e9a9 code=0x0 [ 554.881721][T11465] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2549184248 (40786947968 ns) > initial count (38013993840 ns). Using initial count to start timer. [ 554.911895][T11465] kvm: Disabled LAPIC found during irq injection [ 555.086818][ T974] gspca_stk1135: reg_w 0xd err -71 [ 555.092567][ T30] audit: type=1400 audit(1753219700.340:684): avc: denied { read } for pid=11468 comm="syz.1.1426" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 555.100490][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.148441][ T974] gspca_stk1135: Sensor write failed [ 555.165407][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.189520][ T30] audit: type=1400 audit(1753219700.340:685): avc: denied { open } for pid=11468 comm="syz.1.1426" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 555.214209][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.214271][ T974] gspca_stk1135: Sensor write failed [ 555.214305][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.214317][ T974] gspca_stk1135: Sensor read failed [ 555.214346][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.283435][ T974] gspca_stk1135: Sensor read failed [ 555.294018][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 555.294603][ T974] gspca_stk1135: Detected sensor type unknown (0x0) [ 555.313377][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.320967][ T974] gspca_stk1135: Sensor read failed [ 555.327198][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.343644][ T974] gspca_stk1135: Sensor read failed [ 555.348961][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.356360][ T974] gspca_stk1135: Sensor write failed [ 555.361948][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 555.368323][ T974] gspca_stk1135: Sensor write failed [ 555.375386][ T974] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 555.423420][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.466060][ T974] usb 4-1: USB disconnect, device number 24 [ 555.472733][T11480] binder_alloc: 11474: binder_alloc_buf, no vma [ 555.662008][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.691896][T11487] : entered promiscuous mode [ 555.889658][ T30] audit: type=1400 audit(1753219701.140:686): avc: denied { connect } for pid=11494 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 555.909388][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.957011][T11506] binder: 11505:11506 ioctl c0306201 200000000240 returned -11 [ 556.018730][ T30] audit: type=1400 audit(1753219701.270:687): avc: denied { setopt } for pid=11503 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.019494][T11504] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 556.059817][T11504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1442'. [ 556.082935][T11512] batadv_slave_1: entered promiscuous mode [ 556.094520][T11512] batadv_slave_1: left promiscuous mode [ 556.135713][T11504] team0: Port device geneve0 added [ 556.857440][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.072612][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.099880][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.158389][ T5843] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 557.166528][ T5843] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 557.275540][ T30] audit: type=1400 audit(1753219702.520:688): avc: denied { create } for pid=11520 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 557.792423][ T30] audit: type=1400 audit(1753219702.800:689): avc: denied { remove_name } for pid=11520 comm="syz.4.1451" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 557.934585][ T30] audit: type=1400 audit(1753219702.800:690): avc: denied { unlink } for pid=11520 comm="syz.4.1451" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 558.147500][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.212219][ T30] audit: type=1400 audit(1753219702.810:691): avc: denied { ioctl } for pid=11520 comm="syz.4.1451" path="socket:[39041]" dev="sockfs" ino=39041 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 558.483755][T11528] : entered promiscuous mode [ 558.723286][T11543] binder: 11542:11543 ioctl c0306201 200000000240 returned -11 [ 559.446052][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.680535][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 560.691766][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.699899][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.708641][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.050982][T11585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.225845][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 561.236198][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 561.248696][ T5153] Bluetooth: hci1: hardware error 0x00 [ 561.558957][T11596] binder: 11594:11596 ioctl c0306201 200000000240 returned -11 [ 561.746549][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.462980][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.469294][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.477850][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.781792][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.102808][ T5831] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 563.341096][ T5153] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 563.362335][T11626] overlayfs: failed to get inode (-116) [ 563.368263][T11626] overlayfs: failed to get inode (-116) [ 563.399323][T11626] overlayfs: failed to get inode (-116) [ 563.459942][T11626] overlayfs: failed to get inode (-116) [ 563.486448][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 563.487722][ T30] audit: type=1400 audit(1753219708.740:697): avc: denied { connect } for pid=11629 comm="syz.2.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 563.523734][T11632] overlayfs: failed to get inode (-116) [ 563.529484][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 563.543470][T11632] overlayfs: failed to get inode (-116) [ 563.583026][ T5831] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 563.605235][T11626] overlayfs: failed to get inode (-116) [ 563.655107][ T5831] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 563.687509][T11626] overlayfs: failed to get inode (-116) [ 563.707361][T11632] overlayfs: failed to get inode (-116) [ 563.718135][ T5831] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 563.745998][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.747947][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 563.763868][T11632] overlayfs: failed to get inode (-116) [ 563.813309][ T5831] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 563.823749][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.889744][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.910049][ T5831] usb 2-1: Product: syz [ 563.916414][ T5831] usb 2-1: Manufacturer: syz [ 563.921487][ T5831] usb 2-1: SerialNumber: syz [ 563.950502][ T5831] usb 2-1: config 0 descriptor?? [ 564.004543][T11637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 564.011098][T11637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 564.023773][T11637] vhci_hcd vhci_hcd.0: Device attached [ 564.052984][T11637] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 564.059620][T11637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.080689][ T30] audit: type=1400 audit(1753219709.340:698): avc: denied { read } for pid=11635 comm="syz.4.1485" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 564.086566][T11637] vhci_hcd vhci_hcd.0: Device attached [ 564.107157][ T30] audit: type=1400 audit(1753219709.340:699): avc: denied { open } for pid=11635 comm="syz.4.1485" path="/302/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 564.131226][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.163066][T11648] block device autoloading is deprecated and will be removed. [ 564.199775][ T974] vhci_hcd: vhci_device speed not set [ 564.247803][T11654] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 564.260432][ T974] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 564.268189][T11650] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 564.274805][T11650] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 564.279340][ T5831] usb 2-1: Can not set alternate setting to 1, error: -71 [ 564.290568][ T5831] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 564.299827][T10069] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 564.303436][ T5831] usb 2-1: USB disconnect, device number 29 [ 564.318525][T11654] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 564.332045][T11637] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 564.338669][T11637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 564.348835][T11650] vhci_hcd vhci_hcd.0: Device attached [ 564.416943][T11659] openvswitch: : Dropping previously announced user features [ 564.431969][T11637] vhci_hcd vhci_hcd.0: Device attached [ 564.567899][T11660] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 564.574530][T11660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 564.618779][T11660] vhci_hcd vhci_hcd.0: Device attached [ 564.631454][T11661] vhci_hcd: connection closed [ 564.636390][T11651] vhci_hcd: connection closed [ 564.642794][T11645] vhci_hcd: connection closed [ 564.679800][T11652] vhci_hcd: connection closed [ 564.693401][T11641] vhci_hcd: connection reset by peer [ 564.728880][ T49] vhci_hcd: stop threads [ 564.735786][ T49] vhci_hcd: release socket [ 564.740379][ T49] vhci_hcd: disconnect device [ 564.749648][ T49] vhci_hcd: stop threads [ 564.753923][ T49] vhci_hcd: release socket [ 564.758892][ T49] vhci_hcd: disconnect device [ 564.765287][ T49] vhci_hcd: stop threads [ 564.771321][ T49] vhci_hcd: release socket [ 564.775915][ T49] vhci_hcd: disconnect device [ 564.780951][ T49] vhci_hcd: stop threads [ 564.785200][ T49] vhci_hcd: release socket [ 564.790115][T10069] usb 4-1: Using ep0 maxpacket: 32 [ 564.796331][ T49] vhci_hcd: disconnect device [ 564.802544][ T49] vhci_hcd: stop threads [ 564.807038][T10069] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 564.818422][ T49] vhci_hcd: release socket [ 564.823228][ T49] vhci_hcd: disconnect device [ 564.828103][T10069] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 564.837697][T10069] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 564.853029][T10069] usb 4-1: config 1 has no interface number 0 [ 564.860120][T10069] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.873984][T10069] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 564.887671][T10069] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 564.901165][T10069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.945789][T10069] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 564.991134][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.590663][T10069] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 565.848185][ T24] usb 4-1: USB disconnect, device number 25 [ 565.867230][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 566.094364][ T30] audit: type=1400 audit(1753219711.340:700): avc: denied { setopt } for pid=11674 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 566.849923][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.865281][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.876002][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.204681][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.222236][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.659734][ T30] audit: type=1400 audit(1753219713.640:701): avc: denied { write } for pid=11692 comm="syz.1.1498" path="socket:[39296]" dev="sockfs" ino=39296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.019837][ T30] audit: type=1400 audit(1753219714.040:702): avc: denied { connect } for pid=11697 comm="syz.2.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 569.489712][ T974] vhci_hcd: vhci_device speed not set [ 569.569727][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.903124][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.096323][ T30] audit: type=1400 audit(1753219715.350:703): avc: denied { append } for pid=11719 comm="syz.2.1507" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 570.237910][ T30] audit: type=1400 audit(1753219715.480:704): avc: denied { map } for pid=11717 comm="syz.3.1506" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 570.626972][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.702051][ T30] audit: type=1400 audit(1753219715.950:705): avc: denied { read } for pid=11727 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.187326][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.205212][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.496109][ T30] audit: type=1400 audit(1753219717.750:706): avc: denied { audit_write } for pid=11750 comm="syz.4.1516" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 572.789803][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 572.939826][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.014126][ T5911] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 573.882532][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.891201][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.912365][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.925515][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 573.981268][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.000990][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 574.010526][ T5911] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 574.019693][ T5911] usb 3-1: Manufacturer: syz [ 574.024318][ T5153] Bluetooth: hci2: unexpected event 0x06 length: 6 > 3 [ 574.036961][ T5911] usb 3-1: config 0 descriptor?? [ 574.114590][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 574.895875][ T5911] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 575.078651][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.360778][ T5911] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 575.807258][T11788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 575.815230][T11788] UDF-fs: Scanning with blocksize 512 failed [ 575.825451][T11788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 575.833164][T11788] UDF-fs: Scanning with blocksize 1024 failed [ 575.846504][T11788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 575.857744][T11788] UDF-fs: Scanning with blocksize 2048 failed [ 575.866840][T11788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 575.874538][T11788] UDF-fs: Scanning with blocksize 4096 failed [ 575.950244][ T5911] usb 3-1: USB disconnect, device number 47 [ 575.986223][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.065578][T11783] fido_id[11783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 576.214557][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.288232][ T30] audit: type=1400 audit(1753219721.530:707): avc: denied { write } for pid=11789 comm="syz.0.1529" path="socket:[39500]" dev="sockfs" ino=39500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 577.265335][T11804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.225640][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.789825][T11804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.798227][T11804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.848829][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 578.933690][T11814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.020803][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.408650][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.599685][ T48] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 579.740016][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.779783][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 579.801295][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.850197][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.931273][ T48] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 579.948733][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.981776][ T48] usb 4-1: config 0 descriptor?? [ 580.245014][T11804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.723999][ T48] aquacomputer_d5next 0003:0C70:F0B6.0009: unknown main item tag 0x2 [ 580.814178][ T48] aquacomputer_d5next 0003:0C70:F0B6.0009: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 581.217806][ T48] usb 4-1: USB disconnect, device number 26 [ 581.350386][T11835] fido_id[11835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 581.530044][ T5831] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 581.626122][T11842] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 581.847639][ T24] net_ratelimit: 2 callbacks suppressed [ 581.847661][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.870485][ T5831] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 582.001773][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.060035][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.060258][ T5831] usb 3-1: config 0 has no interface number 0 [ 582.096144][ T5831] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.117351][ T5831] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 582.139769][ T5831] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 582.182687][ T5831] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 582.289147][ T5831] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 582.304330][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 582.313377][ T5831] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.357876][ T5831] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 582.406700][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.519565][ T30] audit: type=1400 audit(1753219727.750:708): avc: denied { setattr } for pid=11846 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 582.593610][ T5831] usb 3-1: config 0 descriptor?? [ 582.684922][T11834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 582.835356][T11834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 582.860941][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.899440][ T5831] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 583.733445][ T974] usb 3-1: USB disconnect, device number 48 [ 583.739397][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 584.772335][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.776079][ T974] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 585.166978][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.714082][ T30] audit: type=1400 audit(1753219730.970:709): avc: denied { bind } for pid=11876 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 585.743351][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.747053][T11880] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.16777355) [ 586.090855][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.424145][ T30] audit: type=1400 audit(1753219731.470:710): avc: denied { setattr } for pid=11884 comm="syz.0.1556" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 586.890654][ T5882] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 587.184319][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.339701][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 587.346366][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 587.444473][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.587799][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 587.723783][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.733774][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.745390][ T5882] usb 2-1: Product: syz [ 587.750558][ T5882] usb 2-1: Manufacturer: syz [ 587.755984][ T5882] usb 2-1: SerialNumber: syz [ 587.888897][ T5882] usb 2-1: config 0 descriptor?? [ 587.917453][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.928256][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 588.390902][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.436254][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.523493][T11910] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 589.814270][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.853353][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 589.872128][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 589.881431][ T5882] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 590.882441][ T5882] em28xx 2-1:0.0: No AC97 audio processor [ 591.129853][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.158905][ T5882] usb 2-1: USB disconnect, device number 30 [ 591.620248][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 591.640239][ T5882] em28xx 2-1:0.0: Freeing device [ 591.711138][T11915] syz.2.1566 (11915): drop_caches: 2 [ 591.760552][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.026329][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.034675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.109866][T11943] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 592.164467][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.255592][ T30] audit: type=1400 audit(1753219737.460:711): avc: denied { mount } for pid=11935 comm="syz.4.1571" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 593.182417][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.190823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.220071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.562661][ T30] audit: type=1400 audit(1753219739.790:712): avc: denied { create } for pid=11969 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 594.582307][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.605292][T11986] IPVS: Error connecting to the multicast addr [ 594.817575][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.989887][ T974] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 595.071266][T11994] netlink: set zone limit has 4 unknown bytes [ 595.139960][ T974] usb 3-1: device descriptor read/64, error -71 [ 595.259788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.623884][ T30] audit: type=1400 audit(1753219740.870:713): avc: denied { create } for pid=12005 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 595.623947][ T974] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 595.948320][ T30] audit: type=1400 audit(1753219740.870:714): avc: denied { ioctl } for pid=12005 comm="syz.3.1596" path="socket:[39837]" dev="sockfs" ino=39837 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 595.984098][ T30] audit: type=1400 audit(1753219740.910:715): avc: denied { bind } for pid=12005 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 596.111576][T12014] overlayfs: missing 'lowerdir' [ 596.231416][ T30] audit: type=1400 audit(1753219741.470:716): avc: denied { mounton } for pid=12010 comm="syz.3.1599" path="/316/file0" dev="tmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 596.521626][ T974] usb 3-1: device descriptor read/64, error -71 [ 596.572145][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.101445][ T974] usb usb3-port1: attempt power cycle [ 597.417712][T12038] netlink: set zone limit has 4 unknown bytes [ 597.429097][ T30] audit: type=1400 audit(1753219742.670:717): avc: denied { ioctl } for pid=12035 comm="syz.1.1605" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 597.453634][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.580072][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.819920][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.628983][ T48] net_ratelimit: 3 callbacks suppressed [ 598.629003][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.100098][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.171216][ T30] audit: type=1400 audit(1753219744.420:718): avc: denied { listen } for pid=12059 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 599.346196][T12065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.354768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.501414][T12072] block nbd4: shutting down sockets [ 599.863351][ T5882] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 599.871372][ T48] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 599.962112][T12082] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 600.039138][T12081] openvswitch: : Dropping previously announced user features [ 600.305639][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.473666][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 600.684291][T12088] x_tables: ip_tables: osf match: only valid for protocol 6 [ 600.860231][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.098986][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 601.107205][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.116183][ T48] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 601.129797][ T48] usb 1-1: config 6 has no interface number 0 [ 601.136065][ T48] usb 1-1: config 6 interface 200 has no altsetting 0 [ 601.143292][ T5882] usb 4-1: language id specifier not provided by device, defaulting to English [ 601.165697][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 601.175936][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.186701][ T5882] usb 4-1: Product: syz [ 601.195910][ T48] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 601.206596][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.215513][ T5882] usb 4-1: Manufacturer: 죈㍔倊럁⚃㠙䒪簞윑䡱恔㔆濯犹⿨贾ﴏᆱ藅侍溆竛앸䙏㈤䚋䩔겏ꊛǝ࣋염ℵ榕㥔앰돌徨㳌ꋼ͵샕椛썒쟲臍誊歫邇榵ൄﲡ爉롱ﶹന抛출䢗쌤ᶏ뢽㴎辷몦糈肘⑀ᕟ礼΄涊쵟幊좗툲漩뱜䟴Ꝛ捋높踭濃利髐蹱ⳆꙨ㹸꺚듳虇蕴ҏ鮆葿⟇⾮㝌妵♧㙾ޕ󫀯 [ 601.250133][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.256452][ T48] usb 1-1: Product: syz [ 601.261032][ T48] usb 1-1: Manufacturer: syz [ 601.319320][ T48] usb 1-1: SerialNumber: syz [ 601.373504][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.561931][ T5882] usb 4-1: SerialNumber: syz [ 601.805130][T12100] overlayfs: failed to resolve './file0': -2 [ 601.938347][ T30] audit: type=1400 audit(1753219747.160:719): avc: denied { write } for pid=12096 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 601.976196][ T48] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 602.434594][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.509742][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.670630][ T5882] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 602.731829][ T48] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 602.804619][ T48] usb 1-1: media controller created [ 602.835762][ T5882] usb 4-1: USB disconnect, device number 27 [ 602.973681][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.986652][ T5882] usblp0: removed [ 603.391947][T12110] block nbd1: shutting down sockets [ 603.427951][ T48] dvb-usb: bulk message failed: -71 (6/0) [ 603.486610][ T48] dvb-usb: bulk message failed: -71 (6/0) [ 603.500067][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.609413][ T48] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 603.917805][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.931819][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 604.164530][T12118] : entered promiscuous mode [ 604.641890][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.721399][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.157357][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 605.164635][ T48] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 605.179833][ T48] usb 1-1: USB disconnect, device number 35 [ 605.315413][ T30] audit: type=1400 audit(1753219750.570:720): avc: denied { connect } for pid=12123 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 605.340867][ T5882] dvb-usb: bulk message failed: -19 (1/0) [ 605.347359][ T5882] dvb-usb: error while querying for an remote control event. [ 605.355245][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 605.465949][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.661276][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.702467][ T48] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 605.915191][ T30] audit: type=1400 audit(1753219751.160:721): avc: denied { relabelfrom } for pid=12136 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 605.984341][ T30] audit: type=1400 audit(1753219751.160:722): avc: denied { relabelto } for pid=12136 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 606.283319][T12160] : entered promiscuous mode [ 606.699947][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.984802][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.739758][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.761141][T12186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.698645][T12195] veth0_to_team: entered promiscuous mode [ 608.704491][T12195] veth0_to_team: entered allmulticast mode [ 609.293011][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.553118][T12198] fuse: Bad value for 'fd' [ 610.097465][T12203] openvswitch: : Dropping previously announced user features [ 610.211628][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.278970][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.295289][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 610.304368][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.739378][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.183375][T12225] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 611.240434][T12228] block nbd3: shutting down sockets [ 611.350235][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.502726][T12225] macvtap1: entered promiscuous mode [ 611.551089][T12225] macvtap1: entered allmulticast mode [ 611.556503][T12225] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 611.815540][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 611.849295][ T48] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 612.102503][ T48] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 612.292046][ T974] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 613.049618][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.059056][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.077204][ T974] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 613.098077][ T974] usb 3-1: config 0 has no interface number 0 [ 613.098761][ T48] usb 4-1: config 0 descriptor?? [ 613.104376][ T974] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.120310][ T974] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 613.132008][ T974] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 613.144419][ T974] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 613.155814][ T974] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 613.166929][ T974] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.180361][ T974] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 613.189690][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.202204][ T974] usb 3-1: config 0 descriptor?? [ 613.208360][T12251] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 613.226262][T12251] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 613.238288][ T974] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 613.323500][T12263] binder: 12262:12263 ioctl c0306201 200000000240 returned -11 [ 613.340728][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.382670][T12266] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 613.471752][ T974] usb 3-1: USB disconnect, device number 52 [ 613.478844][ T30] audit: type=1400 audit(1753219758.730:723): avc: denied { getopt } for pid=12238 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.517642][ T974] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 614.172177][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.184606][ T48] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 615.291353][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.337350][ T48] usb 4-1: USB disconnect, device number 28 [ 615.586456][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.759345][T12296] binder: 12294:12296 ioctl c0306201 200000000240 returned -11 [ 616.222839][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.442154][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.474334][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.605819][T12310] ubi31: attaching mtd0 [ 616.622917][T12310] ubi31: scanning is finished [ 616.627692][T12310] ubi31: empty MTD device detected [ 617.013452][ T30] audit: type=1400 audit(1753219761.840:724): avc: denied { ioctl } for pid=12300 comm="syz.0.1699" path="socket:[40469]" dev="sockfs" ino=40469 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 617.360067][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 617.500844][T12310] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 617.555155][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.807958][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 618.094021][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 618.248445][T12327] openvswitch: : Dropping previously announced user features [ 618.620430][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.805231][T12343] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1714'. [ 618.937842][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 619.499957][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.688209][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.963462][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.032121][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 620.094853][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 620.252264][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 620.469975][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 620.649713][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 620.674779][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 620.688065][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.749931][ T24] usb 1-1: Product: syz [ 620.754137][ T24] usb 1-1: Manufacturer: syz [ 620.768361][ T24] usb 1-1: SerialNumber: syz [ 620.792749][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 620.808834][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 621.019759][ T48] net_ratelimit: 2 callbacks suppressed [ 621.019774][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.120499][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 621.378012][ T7323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.468170][ T48] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 621.982023][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.067270][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.272591][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.300210][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.074449][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.080882][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.241426][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 624.299980][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.422790][T12452] binder_alloc: 12451: binder_alloc_buf, no vma [ 624.509103][T12452] binder: 12451:12452 ioctl c0306201 200000000240 returned -11 [ 625.061816][T12458] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 625.230789][T12458] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 625.339988][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 625.340852][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.385855][T12458] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 625.423729][T12458] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 625.433292][T12458] geneve2: entered promiscuous mode [ 625.438532][T12458] geneve2: entered allmulticast mode [ 625.486252][T12465] netlink: zone id is out of range [ 625.491844][T12465] netlink: zone id is out of range [ 625.617677][ T30] audit: type=1400 audit(1753219770.870:725): avc: denied { create } for pid=12469 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 625.703690][ T30] audit: type=1400 audit(1753219770.870:726): avc: denied { getopt } for pid=12469 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 625.788331][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 625.856102][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 626.089746][T12488] evm: overlay not supported [ 626.390610][T10069] net_ratelimit: 7 callbacks suppressed [ 626.390626][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.860038][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.915091][T12492] binder: BINDER_SET_CONTEXT_MGR already set [ 626.935332][T12492] binder: 12491:12492 ioctl 4018620d 200000000040 returned -16 [ 627.110739][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.145329][T12492] binder: 12491:12492 ioctl c0306201 200000000240 returned -11 [ 627.288428][T12498] netlink: zone id is out of range [ 627.302023][T12498] netlink: set zone limit has 4 unknown bytes [ 627.970504][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.978635][ T3522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.161808][ T30] audit: type=1400 audit(1753219773.400:727): avc: denied { read } for pid=12503 comm="syz.2.1774" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 628.225565][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 628.752166][T12509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.760004][T12509] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 628.774116][T12509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.787608][T12509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.801290][T12509] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 629.445380][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.655476][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.707795][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.925356][T12535] binder: BINDER_SET_CONTEXT_MGR already set [ 629.950582][T12535] binder: 12532:12535 ioctl 4018620d 200000000040 returned -16 [ 629.970056][T12535] binder: 12532:12535 ioctl c0306201 200000000240 returned -11 [ 630.704039][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 630.789993][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 630.859870][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 632.795244][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 632.902574][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.182106][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 633.192432][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.204791][ T4509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.246545][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 633.247906][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.263913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.573365][ T31] INFO: task kworker/0:0:9 blocked for more than 144 seconds. [ 633.619653][ T31] Not tainted 6.16.0-rc7-syzkaller #0 [ 633.625591][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.641882][ T31] task:kworker/0:0 state:D stack:23512 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 633.654378][ T31] Workqueue: usb_hub_wq hub_event [ 633.659502][ T31] Call Trace: [ 633.663370][ T31] [ 633.677191][ T31] __schedule+0x116a/0x5dd0 [ 633.731211][ T31] ? __pfx___schedule+0x10/0x10 [ 634.182968][ T31] ? find_held_lock+0x2b/0x80 [ 634.187709][ T31] ? schedule+0x2d7/0x3a0 [ 634.192095][ T31] schedule+0xe7/0x3a0 [ 634.196189][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.201809][ T31] __mutex_lock+0x6c7/0xb90 [ 634.206326][ T31] ? hub_event+0x2482/0x4fe0 [ 634.223119][ T31] ? hub_event+0x29aa/0x4fe0 [ 634.233305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.244044][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 634.260848][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 634.272456][ T31] ? hub_event+0x29aa/0x4fe0 [ 634.282318][ T31] hub_event+0x29aa/0x4fe0 [ 634.403326][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 634.423086][ T31] ? __pfx_hub_event+0x10/0x10 [ 634.446185][ T31] ? assoc_array_insert+0x40/0x3970 [ 634.467681][ T31] ? rcu_is_watching+0x12/0xc0 [ 634.476693][ T31] process_one_work+0x9cf/0x1b70 [ 634.481734][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 634.487042][ T31] ? __pfx_process_one_work+0x10/0x10 [ 634.492499][ T31] ? assign_work+0x1a0/0x250 [ 634.497113][ T31] worker_thread+0x6c8/0xf10 [ 634.501754][ T31] ? __pfx_worker_thread+0x10/0x10 [ 634.577992][ T31] kthread+0x3c5/0x780 [ 634.582250][ T31] ? __pfx_kthread+0x10/0x10 [ 634.586860][ T31] ? rcu_is_watching+0x12/0xc0 [ 634.591676][ T31] ? __pfx_kthread+0x10/0x10 [ 634.596285][ T31] ret_from_fork+0x5d4/0x6f0 [ 634.600962][ T31] ? __pfx_kthread+0x10/0x10 [ 634.605565][ T31] ret_from_fork_asm+0x1a/0x30 [ 634.610480][ T31] [ 634.628765][ T31] [ 634.628765][ T31] Showing all locks held in the system: [ 634.636950][ T31] 5 locks held by kworker/0:0/9: [ 634.642270][ T31] #0: ffff88801eefa148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 634.653130][ T31] #1: ffffc900000e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 634.664871][ T31] #2: ffff88802adab198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 634.682161][ T31] #3: ffff88802adae510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 634.693581][ T31] #4: ffff8880289b1968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 634.703520][ T31] 1 lock held by khungtaskd/31: [ 634.708382][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 634.718264][ T31] 2 locks held by getty/5594: [ 634.722934][ T31] #0: ffff88814d5800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 634.732783][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 634.742928][ T31] 5 locks held by kworker/0:4/5943: [ 634.748098][ T31] #0: ffff88801eefa148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 634.758881][ T31] #1: ffffc900042cfd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 634.770132][ T31] #2: ffff88802af00198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 634.779024][ T31] #3: ffff88802af03510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 634.789010][ T31] #4: ffff8880289b1968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 634.798722][ T31] 5 locks held by kworker/u8:11/6438: [ 634.804120][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 634.814070][ T31] #1: ffff8880b8424088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 634.825465][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 634.834866][ T31] #3: ffffffff9b092440 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 634.845265][ T31] #4: ffffffff9afcf920 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 634.855647][ T31] [ 634.857964][ T31] ============================================= [ 634.857964][ T31] [ 634.869244][ T31] NMI backtrace for cpu 1 [ 634.869259][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 634.869273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.869280][ T31] Call Trace: [ 634.869284][ T31] [ 634.869289][ T31] dump_stack_lvl+0x116/0x1f0 [ 634.869311][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 634.869326][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 634.869343][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 634.869359][ T31] watchdog+0xf70/0x12c0 [ 634.869374][ T31] ? __pfx_watchdog+0x10/0x10 [ 634.869385][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.869402][ T31] ? __kthread_parkme+0x19e/0x250 [ 634.869418][ T31] ? __pfx_watchdog+0x10/0x10 [ 634.869430][ T31] kthread+0x3c5/0x780 [ 634.869441][ T31] ? __pfx_kthread+0x10/0x10 [ 634.869452][ T31] ? rcu_is_watching+0x12/0xc0 [ 634.869466][ T31] ? __pfx_kthread+0x10/0x10 [ 634.869477][ T31] ret_from_fork+0x5d4/0x6f0 [ 634.869493][ T31] ? __pfx_kthread+0x10/0x10 [ 634.869504][ T31] ret_from_fork_asm+0x1a/0x30 [ 634.869522][ T31] [ 634.869526][ T31] Sending NMI from CPU 1 to CPUs 0: [ 634.986346][ C0] NMI backtrace for cpu 0 [ 634.986361][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 634.986378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.986387][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 634.986411][ C0] Code: 6b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 89 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 634.986425][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 634.986437][ C0] RAX: 00000000030dc2bf RBX: 0000000000000000 RCX: ffffffff8b868c99 [ 634.986447][ C0] RDX: 0000000000000000 RSI: ffffffff8de2ff26 RDI: ffffffff8c1573e0 [ 634.986456][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 634.986465][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 634.986474][ C0] R13: ffffffff8e297780 R14: ffffffff90a94050 R15: 0000000000000000 [ 634.986483][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 634.986497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.986506][ C0] CR2: 00007fc132f83178 CR3: 000000007cb74000 CR4: 00000000003526f0 [ 634.986515][ C0] Call Trace: [ 634.986520][ C0] [ 634.986525][ C0] default_idle+0x13/0x20 [ 634.986541][ C0] default_idle_call+0x6d/0xb0 [ 634.986554][ C0] do_idle+0x391/0x510 [ 634.986573][ C0] ? __pfx_do_idle+0x10/0x10 [ 634.986589][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 634.986610][ C0] cpu_startup_entry+0x4f/0x60 [ 634.986627][ C0] rest_init+0x16b/0x2b0 [ 634.986641][ C0] ? acpi_subsystem_init+0x133/0x180 [ 634.986661][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 634.986675][ C0] start_kernel+0x3ee/0x4d0 [ 634.986696][ C0] x86_64_start_reservations+0x18/0x30 [ 634.986715][ C0] x86_64_start_kernel+0x130/0x190 [ 634.986735][ C0] common_startup_64+0x13e/0x148 [ 634.986754][ C0] [ 634.987436][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 635.184327][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 635.194376][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.204412][ T31] Call Trace: [ 635.207678][ T31] [ 635.210594][ T31] dump_stack_lvl+0x3d/0x1f0 [ 635.215184][ T31] panic+0x71c/0x800 [ 635.219071][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 635.224952][ T31] ? __pfx_panic+0x10/0x10 [ 635.229360][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 635.234722][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.240692][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 635.246054][ T31] ? watchdog+0xdda/0x12c0 [ 635.250458][ T31] ? watchdog+0xdcd/0x12c0 [ 635.254862][ T31] watchdog+0xdeb/0x12c0 [ 635.259094][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.263756][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 635.268949][ T31] ? __kthread_parkme+0x19e/0x250 [ 635.273964][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.278626][ T31] kthread+0x3c5/0x780 [ 635.282678][ T31] ? __pfx_kthread+0x10/0x10 [ 635.287252][ T31] ? rcu_is_watching+0x12/0xc0 [ 635.292006][ T31] ? __pfx_kthread+0x10/0x10 [ 635.296581][ T31] ret_from_fork+0x5d4/0x6f0 [ 635.301164][ T31] ? __pfx_kthread+0x10/0x10 [ 635.305736][ T31] ret_from_fork_asm+0x1a/0x30 [ 635.310496][ T31] [ 635.313694][ T31] Kernel Offset: disabled [ 635.318001][ T31] Rebooting in 86400 seconds..