last executing test programs: 12.44820111s ago: executing program 4 (id=2376): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[{@uuid_on, 0x3a}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_lt}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_role={'subj_role', 0x3d, 'xino=on'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@measure}], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file1\x00') 10.371783631s ago: executing program 1 (id=2382): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000280)=0x2c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 10.204157601s ago: executing program 2 (id=2383): r0 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255, 0x100, 0x0, 0x2db}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.244928643s ago: executing program 1 (id=2384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) getitimer(0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f00000003c0)={0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000000c0)=0x1ff, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000000)=0x7, 0x4) r7 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$clear(0x7, r7) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000d0601010000000000000000000000070000000d0003006c6973743a7365fde268787012d0df6c9e85ef8e7400000000"], 0x34}}, 0x0) 8.988910875s ago: executing program 2 (id=2385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1) 8.753936584s ago: executing program 4 (id=2386): poll(0x0, 0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init() r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0xad, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, [0x0, 0x80000000]}}) 8.669777185s ago: executing program 0 (id=2387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r3 = openat(0xffffffffffffffff, 0x0, 0x216000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x4c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) io_setup(0x9, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 7.546266873s ago: executing program 2 (id=2389): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f000000001090212000100000000010469000003720200"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 7.044245541s ago: executing program 4 (id=2390): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000000)="ec", 0x1, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f0000000140)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x309, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 6.992006963s ago: executing program 0 (id=2391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7b33da90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3a400000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)}, {&(0x7f0000000600)="d1bc1884", 0x4}], 0x2) dup3(r3, r5, 0x6700000000000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.023773901s ago: executing program 0 (id=2393): io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10e9023, &(0x7f00000001c0)={[{@default_permissions}, {@userxattr}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.892187289s ago: executing program 1 (id=2394): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x3, 0x2, 0x87ec, 0x8d, 0x43, 0x0, 0x93}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000280)={r6, 0x9fd}, &(0x7f0000000300)=0x8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x91) readv(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/168, 0xa8}, {&(0x7f0000000000)=""/39, 0x27}], 0x2) sched_setscheduler(r0, 0x6, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 5.019700836s ago: executing program 0 (id=2396): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) r5 = fcntl$dupfd(r0, 0x406, r0) write$UHID_INPUT(r5, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x3, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r1}, 0x14) 4.987173457s ago: executing program 1 (id=2397): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[{@uuid_on, 0x3a}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_lt}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_role={'subj_role', 0x3d, 'xino=on'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@measure}], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file1\x00') 4.979565095s ago: executing program 4 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000540)=[{0x0, 0x9, 0xf, 0x9}, {0x4, 0x5, 0x5, 0x6}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4.89393331s ago: executing program 3 (id=2399): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000280)={r2, 0x2, 0xc0, 0x46, &(0x7f0000000040)=[{0x5e5, 0x200, 0x8, 0xff}]}) (fail_nth: 1) 3.681531126s ago: executing program 0 (id=2400): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad04000000000004ffe7df73"], 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) (async) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(0x0) (async) open(0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) 3.681098073s ago: executing program 2 (id=2401): poll(0x0, 0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) inotify_init() r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0xad, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, [0x0, 0x80000000]}}) 3.520792938s ago: executing program 3 (id=2402): io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10e9023, &(0x7f00000001c0)={[{@default_permissions}, {@userxattr}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) 3.488979215s ago: executing program 4 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x400}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000540)=[{0x0, 0x9, 0xf, 0x9}, {0x4, 0x5, 0x5, 0x6}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.450231284s ago: executing program 1 (id=2404): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x30000009}) 2.384973566s ago: executing program 3 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.190142428s ago: executing program 1 (id=2406): arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x7, 0x2, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x8, 0x1, 0x7, 0x80, 0x8, 0x4, 0xa, 0x6, 0x4, [0x8, 0xfffffffe, 0x2, 0x5, 0x1, 0x5, 0x200, 0xff]}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109021b00010000000009040000015883b200090585f1fc"], 0x0) 1.721733816s ago: executing program 2 (id=2407): io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10e9023, &(0x7f00000001c0)={[{@default_permissions}, {@userxattr}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.577829633s ago: executing program 3 (id=2408): syz_emit_ethernet(0x3e, &(0x7f00000022c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8400", 0x8, 0x2c, 0x0, @remote, @local, {[@dstopts={0x73}]}}}}}, 0x0) 943.811066ms ago: executing program 3 (id=2409): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x3, 0x2, 0x87ec, 0x8d, 0x43, 0x0, 0x93}, &(0x7f0000000100)=0x9c) 781.711617ms ago: executing program 2 (id=2410): io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10e9023, &(0x7f00000001c0)={[{@default_permissions}, {@userxattr}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 634.155996ms ago: executing program 3 (id=2411): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f000000001090212000100000000010469000003720200"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 21.705245ms ago: executing program 4 (id=2412): r0 = syz_usb_connect$hid(0x0, 0x21, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1843, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000980)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f10626db12b9e78d629870bb26edb4a594a7b70000000000000000002945ffebbf0612dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c9014", 0x96, 0xfffffffffffffffb) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="64796e2c0081985a8b6e323b26d2723b14612748db4d74b23e2661a62a335f0bc884305a1ed29e8701f9da1c9ebdba3c4d4a1adc1d201fb77f491eb67a944936850abcc554fb6ce6d6ce005a6c0e3683989adffbef2fae15bfca73c6d7d16d6ac18b35ef3485ede9fcc125b8c586bbbdbc0823e557bbcb293af37b9e2f61a8f4b8d6a4dd0950e930c04d789fa5ce62760292b9a59598527a14496c61765fd8d620aea4e69aec10790c07b16d24825a61ae07"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfc08}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002000000000008000300"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) 0s ago: executing program 0 (id=2413): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0x1, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc00e}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 907.079641][T13962] do_syscall_64+0xcd/0xfa0 [ 907.079663][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.079680][T13962] RIP: 0033:0x7f28e578eec9 [ 907.079695][T13962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.079712][T13962] RSP: 002b:00007f28e65f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 907.079730][T13962] RAX: ffffffffffffffda RBX: 00007f28e59e6180 RCX: 00007f28e578eec9 [ 907.079741][T13962] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 907.079751][T13962] RBP: 00007f28e65f1090 R08: 0000000000000000 R09: 0000000000000000 [ 907.079761][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.079771][T13962] R13: 00007f28e59e6218 R14: 00007f28e59e6180 R15: 00007fff69849078 [ 907.079798][T13962] [ 907.319287][T11365] usb 2-1: config index 0 descriptor too short (expected 36, got 15) [ 907.327983][T11365] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 907.483090][T11365] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.529394][T11365] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 907.572316][T11365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.604638][T11365] usb 2-1: config 0 descriptor?? [ 907.610516][ T5867] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 907.774655][ T5867] usb 5-1: config index 0 descriptor too short (expected 36, got 15) [ 907.783184][ T5867] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 907.838163][ T5867] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.918087][T13967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 907.935052][T13967] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 908.075933][T11365] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 908.590070][ T5867] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 908.683278][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.796068][T11365] usb 4-1: Using ep0 maxpacket: 32 [ 908.818818][T11365] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 908.833057][ T5867] usb 5-1: config 0 descriptor?? [ 908.903176][T11365] usb 4-1: config 0 has no interface number 0 [ 908.989017][T11365] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 909.061650][T11365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.184363][T13971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 909.985696][T11365] usb 4-1: Product: syz [ 909.990535][T11365] usb 4-1: Manufacturer: syz [ 909.995147][T11365] usb 4-1: SerialNumber: syz [ 910.015981][T11365] usb 4-1: config 0 descriptor?? [ 910.020449][ T30] audit: type=1400 audit(2000000395.640:283): avc: denied { create } for pid=13970 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 910.037355][T11365] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 910.071119][T13971] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 910.093813][T11204] usb 2-1: USB disconnect, device number 39 [ 910.324455][T11365] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 910.339329][T11365] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 911.442492][T13966] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2029'. [ 911.475864][T11365] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 911.559149][ T5867] usb 5-1: USB disconnect, device number 59 [ 911.826557][T11365] usb 2-1: Using ep0 maxpacket: 16 [ 911.930232][T11365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.005066][T11365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.067010][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 912.076714][ T5867] usb 4-1: USB disconnect, device number 50 [ 912.142363][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'. [ 912.608973][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 912.630093][T14004] FAULT_INJECTION: forcing a failure. [ 912.630093][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.631244][T11365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 912.659753][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 912.672231][T11365] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 912.681809][ T5867] quatech2 4-1:0.51: device disconnected [ 912.687817][T14004] CPU: 1 UID: 0 PID: 14004 Comm: syz.0.2040 Not tainted syzkaller #0 PREEMPT(full) [ 912.687832][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 912.687839][T14004] Call Trace: [ 912.687842][T14004] [ 912.687846][T14004] dump_stack_lvl+0x16c/0x1f0 [ 912.687863][T14004] should_fail_ex+0x512/0x640 [ 912.687879][T14004] _copy_from_user+0x2e/0xd0 [ 912.687893][T14004] copy_msghdr_from_user+0x98/0x160 [ 912.687907][T14004] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 912.687926][T14004] ___sys_sendmsg+0xfe/0x1d0 [ 912.687938][T14004] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.687949][T14004] ? __lock_acquire+0x622/0x1c90 [ 912.687980][T14004] __sys_sendmsg+0x16d/0x220 [ 912.687992][T14004] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.688013][T14004] do_syscall_64+0xcd/0xfa0 [ 912.688026][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.688037][T14004] RIP: 0033:0x7f2f1af8eec9 [ 912.688047][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.688057][T14004] RSP: 002b:00007f2f1bee8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.688067][T14004] RAX: ffffffffffffffda RBX: 00007f2f1b1e5fa0 RCX: 00007f2f1af8eec9 [ 912.688074][T14004] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000006 [ 912.688080][T14004] RBP: 00007f2f1bee8090 R08: 0000000000000000 R09: 0000000000000000 [ 912.688086][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.688092][T14004] R13: 00007f2f1b1e6038 R14: 00007f2f1b1e5fa0 R15: 00007ffe33f57178 [ 912.688106][T14004] [ 912.690675][T11365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.915836][T11365] usb 2-1: config 0 descriptor?? [ 913.463506][ T30] audit: type=1400 audit(2000000399.090:284): avc: denied { mounton } for pid=13988 comm="syz.1.2033" path="/proc/1472/task" dev="proc" ino=49920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 913.774810][T11365] hid (null): invalid report_count 53475 [ 913.780629][T11365] hid (null): global environment stack underflow [ 913.789498][T11365] hid (null): invalid report_count 53042 [ 913.795431][T11365] hid (null): unknown global tag 0xd [ 913.801148][T11365] hid (null): unknown global tag 0xe [ 913.850778][ T30] audit: type=1400 audit(2000000399.480:285): avc: denied { write } for pid=14010 comm="syz.0.2043" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 913.918122][T11365] usb 2-1: USB disconnect, device number 40 [ 913.930681][ T30] audit: type=1400 audit(2000000399.480:286): avc: denied { open } for pid=14010 comm="syz.0.2043" path="/421/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 915.168997][T14030] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 915.250347][T14031] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 916.841800][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2054'. [ 916.856153][T14052] IPVS: set_ctl: invalid protocol: 62 10.1.1.1:20001 [ 917.235760][T11365] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 917.825957][ T5866] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 917.835787][ T5867] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 917.845941][T11365] usb 3-1: Using ep0 maxpacket: 32 [ 917.857391][T14062] debugfs: 'ttyS3' already exists in 'caif_serial' [ 917.868685][T11365] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 917.877659][T11365] usb 3-1: config 0 has no interface number 0 [ 917.898007][T11365] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 917.916956][T11365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.927885][ T30] audit: type=1400 audit(2000000403.570:287): avc: denied { create } for pid=14061 comm="syz.4.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 917.954719][T11365] usb 3-1: Product: syz [ 917.963273][T11365] usb 3-1: Manufacturer: syz [ 917.973086][T11365] usb 3-1: SerialNumber: syz [ 917.989223][ T5866] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 918.005808][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 918.011194][ T5866] usb 2-1: config 0 has no interface number 0 [ 918.022802][T11365] usb 3-1: config 0 descriptor?? [ 918.032630][ T5867] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 918.043430][ T5866] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.060077][T11365] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 918.070930][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.080340][ T5866] usb 2-1: config 0 interface 235 has no altsetting 0 [ 918.100063][ T5867] usb 4-1: config 0 descriptor?? [ 918.111384][ T5866] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 918.152463][ T5867] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 918.164681][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.221780][ T5866] usb 2-1: Product: syz [ 918.261133][ T5866] usb 2-1: Manufacturer: syz [ 918.319809][ T5866] usb 2-1: SerialNumber: syz [ 918.388101][T11365] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 918.508588][ T5867] usb 4-1: USB disconnect, device number 51 [ 918.521798][ T5866] usb 2-1: config 0 descriptor?? [ 918.717797][T14040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2052'. [ 919.172525][ T5866] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 919.232261][T11365] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 919.427603][ T5866] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 919.763467][ T5866] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 920.096947][ T5866] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 920.104885][ T5866] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 920.143724][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 920.151708][T11365] usb 3-1: USB disconnect, device number 47 [ 920.186385][T11365] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 920.242221][ T5866] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 920.280062][ T30] audit: type=1400 audit(2000000405.930:288): avc: denied { write } for pid=14092 comm="syz.3.2066" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 920.309666][T14091] FAULT_INJECTION: forcing a failure. [ 920.309666][T14091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.344753][T11365] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 920.359003][T14091] CPU: 1 UID: 0 PID: 14091 Comm: syz.1.2065 Not tainted syzkaller #0 PREEMPT(full) [ 920.359024][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 920.359031][T14091] Call Trace: [ 920.359035][T14091] [ 920.359039][T14091] dump_stack_lvl+0x16c/0x1f0 [ 920.359056][T14091] should_fail_ex+0x512/0x640 [ 920.359072][T14091] _copy_from_user+0x2e/0xd0 [ 920.359087][T14091] __sys_bpf+0x248/0x4980 [ 920.359102][T14091] ? __pfx___sys_bpf+0x10/0x10 [ 920.359114][T14091] ? find_held_lock+0x2b/0x80 [ 920.359127][T14091] ? find_held_lock+0x2b/0x80 [ 920.359145][T14091] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 920.359167][T14091] ? fput+0x9b/0xd0 [ 920.359177][T14091] ? ksys_write+0x1ac/0x250 [ 920.359190][T14091] ? __pfx_ksys_write+0x10/0x10 [ 920.359206][T14091] __x64_sys_bpf+0x78/0xc0 [ 920.359218][T14091] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.359231][T14091] do_syscall_64+0xcd/0xfa0 [ 920.359244][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.359256][T14091] RIP: 0033:0x7f374978eec9 [ 920.359265][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.359276][T14091] RSP: 002b:00007f374a68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 920.359287][T14091] RAX: ffffffffffffffda RBX: 00007f37499e5fa0 RCX: 00007f374978eec9 [ 920.359294][T14091] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 920.359300][T14091] RBP: 00007f374a68d090 R08: 0000000000000000 R09: 0000000000000000 [ 920.359306][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.359312][T14091] R13: 00007f37499e6038 R14: 00007f37499e5fa0 R15: 00007ffdf5fa1278 [ 920.359326][T14091] [ 920.359727][ T5866] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 920.575250][T11365] quatech2 3-1:0.51: device disconnected [ 920.995183][ T5866] usb 2-1: USB disconnect, device number 41 [ 921.209021][T14108] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2070'. [ 921.717077][ T5866] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 921.726943][ T5866] keyspan 2-1:0.235: device disconnected [ 922.052724][T14119] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2071'. [ 922.511916][T14120] geneve2: entered promiscuous mode [ 922.519806][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35839 - 0 [ 922.533798][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35839 - 0 [ 922.543087][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35839 - 0 [ 922.551995][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35839 - 0 [ 922.561924][T14120] warning: `syz.3.2074' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 922.924117][ T30] audit: type=1400 audit(2000000408.570:289): avc: denied { setopt } for pid=14129 comm="syz.4.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 924.725674][T14142] geneve3: entered promiscuous mode [ 924.731188][T14142] geneve3: entered allmulticast mode [ 924.738931][ T30] audit: type=1400 audit(2000000409.510:290): avc: denied { ioctl } for pid=14122 comm="syz.2.2073" path="socket:[50077]" dev="sockfs" ino=50077 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.905748][ T10] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 925.118365][T14149] geneve2: entered promiscuous mode [ 925.136918][T14149] geneve2: entered allmulticast mode [ 925.200755][ T10] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 925.223457][ T10] usb 2-1: config 0 has no interface number 0 [ 925.233589][ T10] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.270088][ T10] usb 2-1: config 0 interface 235 has no altsetting 0 [ 925.301601][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 925.321856][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.363525][ T10] usb 2-1: Product: syz [ 925.437974][ T10] usb 2-1: Manufacturer: syz [ 925.454518][ T10] usb 2-1: SerialNumber: syz [ 925.464210][ T10] usb 2-1: config 0 descriptor?? [ 925.477568][ T10] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 925.485539][ T10] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 925.525310][ T10] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 925.580006][ T10] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 925.619934][ T10] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 925.639507][ T10] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 925.761241][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 925.856061][T11204] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 926.077791][T11204] usb 3-1: Using ep0 maxpacket: 32 [ 926.084302][T11204] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 926.093557][T11204] usb 3-1: config 0 has no interface number 0 [ 926.106032][T11204] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 926.115215][T11204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.123564][T11204] usb 3-1: Product: syz [ 926.128764][T11204] usb 3-1: Manufacturer: syz [ 926.141008][T11204] usb 3-1: SerialNumber: syz [ 926.172771][T11204] usb 3-1: config 0 descriptor?? [ 926.227640][T11204] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 926.657722][T11204] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 926.674878][T11204] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 926.705009][ T5866] usb 2-1: USB disconnect, device number 42 [ 926.713589][ T5866] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 926.728382][ T5866] keyspan 2-1:0.235: device disconnected [ 926.917158][T14169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 926.923756][T14169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 926.957398][T14169] vhci_hcd vhci_hcd.0: Device attached [ 926.970601][T14164] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2080'. [ 927.195755][T11204] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 927.305704][ T5866] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 927.385702][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 927.415686][T11365] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 927.457087][ T5866] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 927.467434][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 927.476504][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 927.485904][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.496533][ T5866] usb 2-1: config 0 descriptor?? [ 927.503042][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 927.518099][ T10] usb 4-1: device descriptor read/64, error -71 [ 927.525351][ T978] usb 3-1: USB disconnect, device number 48 [ 927.533988][ T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 927.551883][ T978] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 927.563868][ T978] quatech2 3-1:0.51: device disconnected [ 927.572555][T11365] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 927.583129][T11365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.600903][T11365] usb 5-1: Product: syz [ 927.605103][T11365] usb 5-1: Manufacturer: syz [ 927.610343][T11365] usb 5-1: SerialNumber: syz [ 927.620247][T11365] usb 5-1: config 0 descriptor?? [ 927.719578][ T30] audit: type=1400 audit(2000000413.370:291): avc: denied { create } for pid=14183 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 927.739649][ T30] audit: type=1400 audit(2000000413.370:292): avc: denied { getopt } for pid=14183 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 927.747182][T14169] tipc: Enabled bearer , priority 0 [ 927.760827][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 927.783648][T14169] tipc: Disabling bearer [ 927.831796][ T978] usb 2-1: USB disconnect, device number 43 [ 927.838773][T14170] vhci_hcd: connection closed [ 927.854899][ T8663] vhci_hcd: stop threads [ 927.855213][T11365] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 927.860171][ T8663] vhci_hcd: release socket [ 927.878042][T11204] usb 35-1: device descriptor read/64, error -71 [ 927.880334][T11365] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 927.888691][ T8663] vhci_hcd: disconnect device [ 927.901247][T11365] usb 5-1: USB disconnect, device number 60 [ 927.901861][ T10] usb 4-1: device descriptor read/64, error -71 [ 928.026262][ T10] usb usb4-port1: attempt power cycle [ 928.089862][T11204] vhci_hcd: vhci_device speed not set [ 928.104296][T14192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2088'. [ 928.629302][ T30] audit: type=1400 audit(2000000414.280:293): avc: denied { create } for pid=14193 comm="syz.0.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 928.664371][T14194] binder: BINDER_SET_CONTEXT_MGR already set [ 928.670501][T14194] binder: 14193:14194 ioctl 4018620d 200000000040 returned -16 [ 928.681628][ T30] audit: type=1400 audit(2000000414.310:294): avc: denied { write } for pid=14193 comm="syz.0.2089" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 928.936900][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 928.991368][T14207] delete_channel: no stack [ 929.000752][ T10] usb 4-1: device descriptor read/8, error -71 [ 929.155713][ T30] audit: type=1400 audit(2000000414.800:295): avc: denied { setopt } for pid=14206 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 929.285705][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 929.336995][ T978] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 929.418786][T14213] new mount options do not match the existing superblock, will be ignored [ 929.428121][T14213] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 929.447450][ T10] usb 4-1: device descriptor read/8, error -71 [ 929.566711][ T10] usb usb4-port1: unable to enumerate USB device [ 929.587059][ T978] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 929.608971][ T978] usb 3-1: config 0 has no interface number 0 [ 930.104237][ T978] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.169704][ T978] usb 3-1: config 0 interface 235 has no altsetting 0 [ 930.189658][ T978] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 930.204057][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.212968][ T978] usb 3-1: Product: syz [ 930.217193][ T978] usb 3-1: Manufacturer: syz [ 930.221786][ T978] usb 3-1: SerialNumber: syz [ 930.238461][ T978] usb 3-1: config 0 descriptor?? [ 930.246298][ T978] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 930.256047][ T978] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 930.264076][ T978] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 930.274921][ T978] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 930.283190][ T978] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 930.291608][ T978] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 930.301640][ T978] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 931.155844][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.162327][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.262888][T14230] vxfs: WRONG superblock magic 00000000 at 1 [ 931.269532][T14230] vxfs: WRONG superblock magic 00000000 at 8 [ 931.275710][T14230] vxfs: can't find superblock. [ 931.549548][ T30] audit: type=1400 audit(2000000417.200:296): avc: denied { create } for pid=14234 comm="syz.3.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 931.638714][ T30] audit: type=1400 audit(2000000417.230:297): avc: denied { ioctl } for pid=14234 comm="syz.3.2099" path="socket:[52441]" dev="sockfs" ino=52441 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 931.899209][T14241] bridge0: port 1(team0) entered blocking state [ 931.905913][T14241] bridge0: port 1(team0) entered disabled state [ 931.914218][T14241] team0: entered allmulticast mode [ 931.919415][T14241] team_slave_0: entered allmulticast mode [ 931.925203][T14241] team_slave_1: entered allmulticast mode [ 931.941090][T14241] team0: entered promiscuous mode [ 931.946218][T14241] team_slave_0: entered promiscuous mode [ 931.953042][T14241] team_slave_1: entered promiscuous mode [ 931.961340][T14241] bridge0: port 1(team0) entered blocking state [ 931.967727][T14241] bridge0: port 1(team0) entered forwarding state [ 932.437057][ T978] usb 3-1: USB disconnect, device number 49 [ 932.449995][ T978] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 932.460057][ T978] keyspan 3-1:0.235: device disconnected [ 932.661836][T14251] FAULT_INJECTION: forcing a failure. [ 932.661836][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 932.675728][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.2.2103 Not tainted syzkaller #0 PREEMPT(full) [ 932.675752][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 932.675762][T14251] Call Trace: [ 932.675768][T14251] [ 932.675775][T14251] dump_stack_lvl+0x16c/0x1f0 [ 932.675799][T14251] should_fail_ex+0x512/0x640 [ 932.675815][T14251] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 932.675829][T14251] should_failslab+0xc2/0x120 [ 932.675845][T14251] kmem_cache_alloc_noprof+0x75/0x6e0 [ 932.675857][T14251] ? __schedule+0x3fec/0x5de0 [ 932.675868][T14251] ? getname_flags.part.0+0x4c/0x550 [ 932.675882][T14251] ? getname_flags.part.0+0x4c/0x550 [ 932.675892][T14251] getname_flags.part.0+0x4c/0x550 [ 932.675905][T14251] getname_flags+0x93/0xf0 [ 932.675918][T14251] do_sys_openat2+0xb8/0x1d0 [ 932.675928][T14251] ? __pfx_do_sys_openat2+0x10/0x10 [ 932.675941][T14251] ? __pfx___schedule+0x10/0x10 [ 932.675953][T14251] __x64_sys_openat+0x174/0x210 [ 932.675964][T14251] ? __pfx___x64_sys_openat+0x10/0x10 [ 932.675974][T14251] ? xfd_validate_state+0x61/0x180 [ 932.675998][T14251] do_syscall_64+0xcd/0xfa0 [ 932.676011][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.676026][T14251] RIP: 0033:0x7ff45d98eec9 [ 932.676035][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.676050][T14251] RSP: 002b:00007ff45bbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 932.676061][T14251] RAX: ffffffffffffffda RBX: 00007ff45dbe6180 RCX: 00007ff45d98eec9 [ 932.676068][T14251] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 932.676074][T14251] RBP: 00007ff45bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 932.676080][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.676086][T14251] R13: 00007ff45dbe6218 R14: 00007ff45dbe6180 R15: 00007fffd944ec28 [ 932.676101][T14251] [ 933.261784][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2104'. [ 934.116664][ T30] audit: type=1400 audit(2000000419.750:298): avc: denied { read write } for pid=14263 comm="syz.2.2105" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 934.152213][ T30] audit: type=1400 audit(2000000419.750:299): avc: denied { open } for pid=14263 comm="syz.2.2105" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 934.187344][ T30] audit: type=1400 audit(2000000419.800:300): avc: denied { append } for pid=14264 comm="syz.1.2106" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 934.227443][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2108'. [ 934.335680][ T5866] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 934.492907][ T30] audit: type=1400 audit(2000000420.140:301): avc: denied { create } for pid=14269 comm="syz.3.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 934.646915][ T30] audit: type=1400 audit(2000000420.140:302): avc: denied { setopt } for pid=14269 comm="syz.3.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 934.861079][ T30] audit: type=1400 audit(2000000420.140:303): avc: denied { connect } for pid=14269 comm="syz.3.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 935.023312][ T30] audit: type=1400 audit(2000000420.350:304): avc: denied { getopt } for pid=14276 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 935.155827][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 935.377221][ T10] usb 1-1: config 0 has no interfaces? [ 935.397195][ T5866] usb 3-1: config 0 has no interfaces? [ 935.404137][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 935.425718][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 935.433731][ T5866] usb 3-1: Product: syz [ 935.438223][ T5866] usb 3-1: Manufacturer: syz [ 935.438887][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 935.486044][ T5866] usb 3-1: config 0 descriptor?? [ 935.739158][T14265] FAULT_INJECTION: forcing a failure. [ 935.739158][T14265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.795898][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.2.2105 Not tainted syzkaller #0 PREEMPT(full) [ 935.795923][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 935.795933][T14265] Call Trace: [ 935.795939][T14265] [ 935.795945][T14265] dump_stack_lvl+0x16c/0x1f0 [ 935.795970][T14265] should_fail_ex+0x512/0x640 [ 935.795991][T14265] _copy_from_user+0x2e/0xd0 [ 935.796010][T14265] copy_msghdr_from_user+0x98/0x160 [ 935.796029][T14265] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 935.796059][T14265] ___sys_sendmsg+0xfe/0x1d0 [ 935.796081][T14265] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.796098][T14265] ? __lock_acquire+0x622/0x1c90 [ 935.796152][T14265] __sys_sendmsg+0x16d/0x220 [ 935.796172][T14265] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.796209][T14265] do_syscall_64+0xcd/0xfa0 [ 935.796233][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.796250][T14265] RIP: 0033:0x7ff45d98eec9 [ 935.796265][T14265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.796282][T14265] RSP: 002b:00007ff45e763038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.796299][T14265] RAX: ffffffffffffffda RBX: 00007ff45dbe5fa0 RCX: 00007ff45d98eec9 [ 935.796310][T14265] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000007 [ 935.796320][T14265] RBP: 00007ff45e763090 R08: 0000000000000000 R09: 0000000000000000 [ 935.796330][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.796340][T14265] R13: 00007ff45dbe6038 R14: 00007ff45dbe5fa0 R15: 00007fffd944ec28 [ 935.796366][T14265] [ 935.991348][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 935.999554][ T10] usb 1-1: Product: syz [ 936.003699][ T10] usb 1-1: Manufacturer: syz [ 936.012582][ T978] usb 3-1: USB disconnect, device number 50 [ 936.072847][ T10] usb 1-1: config 0 descriptor?? [ 936.076856][T14308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.109707][T14308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.415702][ T5866] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 936.580584][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 936.591193][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.615874][ T5866] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 936.627948][ T5866] usb 4-1: config 1 has no interface number 1 [ 936.634585][ T5866] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.647841][ T5866] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.662280][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.674801][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.709971][ T5866] usb 4-1: Product: syz [ 936.719329][ T5866] usb 4-1: Manufacturer: syz [ 936.723938][ T5866] usb 4-1: SerialNumber: syz [ 936.746052][ T5867] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 936.990224][T14320] /dev/nullb0: Can't open blockdev [ 937.048274][ T5867] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 937.168793][ T5867] usb 2-1: config 0 has no interface number 0 [ 937.181859][ T5867] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 937.215346][ T5867] usb 2-1: config 0 interface 235 has no altsetting 0 [ 937.222519][ T5866] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 937.230887][ T5866] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 937.243289][ T5867] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 937.257248][ T5866] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 937.265407][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.283049][ T5866] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 937.292219][ T5867] usb 2-1: Product: syz [ 937.298473][ T5867] usb 2-1: Manufacturer: syz [ 937.314172][ T5867] usb 2-1: SerialNumber: syz [ 937.349870][ T5867] usb 2-1: config 0 descriptor?? [ 937.379137][ T5867] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 937.414417][ T5866] usb 4-1: USB disconnect, device number 56 [ 937.425217][ T5867] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 937.458905][ T5867] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 937.517966][ T5867] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 937.558820][ T5867] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 937.584724][ T5867] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 937.626695][ T5867] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 937.704632][ T5867] usb 1-1: USB disconnect, device number 46 [ 937.771752][ T10] IPVS: starting estimator thread 0... [ 937.895749][T14325] IPVS: using max 74 ests per chain, 177600 per kthread [ 938.073804][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 938.621680][T14324] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 938.755724][ T5866] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 938.968802][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 938.988145][ T5866] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 939.009027][ T5866] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 939.040933][ T5866] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 939.065129][ T5866] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 939.123882][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 939.151267][ T5866] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 939.165899][ T5866] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 939.176704][ T5866] usb 5-1: Product: syz [ 939.180986][ T5866] usb 5-1: Manufacturer: syz [ 939.191542][ T5866] usb 5-1: SerialNumber: syz [ 939.566850][ T30] audit: type=1400 audit(2000000424.850:305): avc: denied { setopt } for pid=14334 comm="syz.0.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 939.639441][ T5867] usb 2-1: USB disconnect, device number 44 [ 939.657955][ T5867] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 939.668491][ T5866] usb 5-1: config 0 descriptor?? [ 939.684921][ T5866] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 939.695708][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 939.699155][ T5867] keyspan 2-1:0.235: device disconnected [ 939.718694][ T5866] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 939.957164][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 940.031012][T14345] FAULT_INJECTION: forcing a failure. [ 940.031012][T14345] name failslab, interval 1, probability 0, space 0, times 0 [ 940.043784][T14345] CPU: 1 UID: 0 PID: 14345 Comm: syz.1.2121 Not tainted syzkaller #0 PREEMPT(full) [ 940.043807][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.043817][T14345] Call Trace: [ 940.043824][T14345] [ 940.043831][T14345] dump_stack_lvl+0x16c/0x1f0 [ 940.043856][T14345] should_fail_ex+0x512/0x640 [ 940.043877][T14345] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 940.043901][T14345] should_failslab+0xc2/0x120 [ 940.043926][T14345] kmem_cache_alloc_noprof+0x75/0x6e0 [ 940.043951][T14345] ? rcu_is_watching+0x12/0xc0 [ 940.043968][T14345] ? getname_flags.part.0+0x4c/0x550 [ 940.043992][T14345] ? getname_flags.part.0+0x4c/0x550 [ 940.044008][T14345] getname_flags.part.0+0x4c/0x550 [ 940.044028][T14345] getname_flags+0x93/0xf0 [ 940.044051][T14345] do_sys_openat2+0xb8/0x1d0 [ 940.044067][T14345] ? __pfx_do_sys_openat2+0x10/0x10 [ 940.044085][T14345] ? __pfx___schedule+0x10/0x10 [ 940.044102][T14345] ? __fget_files+0x20e/0x3c0 [ 940.044129][T14345] __x64_sys_openat+0x174/0x210 [ 940.044146][T14345] ? __pfx___x64_sys_openat+0x10/0x10 [ 940.044162][T14345] ? ksys_write+0x1ac/0x250 [ 940.044192][T14345] do_syscall_64+0xcd/0xfa0 [ 940.044215][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.044232][T14345] RIP: 0033:0x7f374978eec9 [ 940.044246][T14345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.044263][T14345] RSP: 002b:00007f374a64b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 940.044280][T14345] RAX: ffffffffffffffda RBX: 00007f37499e6180 RCX: 00007f374978eec9 [ 940.044292][T14345] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 940.044303][T14345] RBP: 00007f374a64b090 R08: 0000000000000000 R09: 0000000000000000 [ 940.044313][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.044323][T14345] R13: 00007f37499e6218 R14: 00007f37499e6180 R15: 00007ffdf5fa1278 [ 940.044348][T14345] [ 940.240296][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.00 [ 940.254688][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.301673][ T10] usb 4-1: config 0 descriptor?? [ 940.321741][T14338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 940.354675][ T978] usb 5-1: USB disconnect, device number 61 [ 940.370218][ T978] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 940.384071][ T30] audit: type=1400 audit(2000000426.030:306): avc: denied { create } for pid=14347 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 940.403972][ T30] audit: type=1400 audit(2000000426.030:307): avc: denied { connect } for pid=14347 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 940.428152][ T30] audit: type=1400 audit(2000000426.040:308): avc: denied { write } for pid=14347 comm="syz.2.2123" laddr=172.20.20.10 lport=14724 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 940.505742][ T5867] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 940.594323][ T10] apple 0003:05AC:0263.0010: item fetching failed at offset 0/3 [ 940.603753][ T10] apple 0003:05AC:0263.0010: parse failed [ 940.611394][ T10] apple 0003:05AC:0263.0010: probe with driver apple failed with error -22 [ 940.623955][ T10] usb 4-1: USB disconnect, device number 57 [ 940.625715][ T5866] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 940.657430][ T5867] usb 1-1: config index 0 descriptor too short (expected 36, got 15) [ 940.710990][ T5867] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 940.722900][ T5867] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 940.731965][ T5867] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 940.741095][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.756258][ T5867] usb 1-1: config 0 descriptor?? [ 940.768292][ T5866] usb 3-1: device descriptor read/64, error -71 [ 941.006401][ T5866] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 941.154324][T14355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 941.553353][ T5866] usb 3-1: device descriptor read/64, error -71 [ 941.990335][T14355] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 942.056906][ T5866] usb usb3-port1: attempt power cycle [ 942.405747][ T5866] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 942.425694][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 942.426071][ T5866] usb 3-1: device descriptor read/8, error -71 [ 942.585666][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 942.593260][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 942.602971][ T10] usb 4-1: config 0 has no interface number 0 [ 942.613393][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 942.622823][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.631079][ T10] usb 4-1: Product: syz [ 942.635362][ T10] usb 4-1: Manufacturer: syz [ 942.640925][ T10] usb 4-1: SerialNumber: syz [ 942.652415][ T10] usb 4-1: config 0 descriptor?? [ 942.664747][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 942.685734][ T5866] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 942.716412][ T5866] usb 3-1: device descriptor read/8, error -71 [ 942.826594][ T5866] usb usb3-port1: unable to enumerate USB device [ 944.107987][ T5866] usb 1-1: USB disconnect, device number 47 [ 944.367366][T14364] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2126'. [ 944.374147][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 944.388619][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 944.630248][T14382] /dev/nullb0: Can't open blockdev [ 944.646076][ T30] audit: type=1400 audit(2000000430.290:309): avc: denied { ioctl } for pid=14374 comm="syz.4.2130" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 945.190022][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 945.285759][ T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 945.400309][ T5867] usb 4-1: USB disconnect, device number 58 [ 945.436767][ T30] audit: type=1400 audit(2000000431.080:310): avc: denied { read } for pid=14393 comm="syz.2.2135" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 945.472532][ T30] audit: type=1400 audit(2000000431.090:311): avc: denied { open } for pid=14393 comm="syz.2.2135" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 945.477786][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 945.505687][ T30] audit: type=1400 audit(2000000431.120:312): avc: denied { write } for pid=14393 comm="syz.2.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 945.563223][ T10] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 945.583312][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 945.592648][ T10] usb 1-1: config 0 has no interface number 0 [ 945.616567][ T10] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.626767][ T30] audit: type=1400 audit(2000000431.120:313): avc: denied { ioctl } for pid=14393 comm="syz.2.2135" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 945.656566][ T10] usb 1-1: config 0 interface 235 has no altsetting 0 [ 945.683976][ T5867] quatech2 4-1:0.51: device disconnected [ 945.687433][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 945.726675][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.734687][ T10] usb 1-1: Product: syz [ 945.915754][ T978] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 945.998364][ T30] audit: type=1400 audit(2000000431.120:314): avc: denied { write } for pid=14393 comm="syz.2.2135" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 946.321585][ T30] audit: type=1400 audit(2000000431.580:315): avc: denied { create } for pid=14392 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 946.356895][ T10] usb 1-1: Manufacturer: syz [ 946.382029][ T10] usb 1-1: SerialNumber: syz [ 946.433530][ T10] usb 1-1: config 0 descriptor?? [ 946.465705][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 946.489548][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.504817][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2137'. [ 946.528182][ T10] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 946.538470][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 946.557432][ T10] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 946.565409][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.581349][ T10] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 946.668475][ T978] usb 2-1: config 0 descriptor?? [ 946.689882][ T10] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 946.776275][T14412] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 947.158797][ T10] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 947.167688][ T10] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 947.177299][ T978] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 947.210873][ T5169] bcm5974 2-1:0.0: could not read from device [ 947.221976][ T10] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 947.556811][ T978] usb 2-1: USB disconnect, device number 45 [ 947.574476][ T5822] bcm5974 2-1:0.0: could not read from device [ 947.603227][ T5169] bcm5974 2-1:0.0: could not read from device [ 948.265673][ T978] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 949.031266][ T30] audit: type=1400 audit(2000000433.985:316): avc: denied { ioctl } for pid=14427 comm="syz.4.2143" path="socket:[53845]" dev="sockfs" ino=53845 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 949.132194][T14436] fuse: Bad value for 'group_id' [ 949.137315][T14436] fuse: Bad value for 'group_id' [ 949.517161][ T978] usb 2-1: config index 0 descriptor too short (expected 36, got 15) [ 949.622665][ T5867] usb 1-1: USB disconnect, device number 48 [ 949.980701][ T978] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 949.991307][ T978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.035689][ T978] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 950.080951][ T5867] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 950.096046][ T5867] keyspan 1-1:0.235: device disconnected [ 950.150316][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.456495][ T978] usb 2-1: config 0 descriptor?? [ 951.181233][T14451] FAULT_INJECTION: forcing a failure. [ 951.181233][T14451] name failslab, interval 1, probability 0, space 0, times 0 [ 951.194337][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.3.2148 Not tainted syzkaller #0 PREEMPT(full) [ 951.194363][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 951.194374][T14451] Call Trace: [ 951.194381][T14451] [ 951.194388][T14451] dump_stack_lvl+0x16c/0x1f0 [ 951.194414][T14451] should_fail_ex+0x512/0x640 [ 951.194436][T14451] ? fs_reclaim_acquire+0xae/0x150 [ 951.194464][T14451] should_failslab+0xc2/0x120 [ 951.194490][T14451] __kmalloc_noprof+0xdd/0x880 [ 951.194510][T14451] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 951.194540][T14451] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 951.194563][T14451] tomoyo_realpath_from_path+0xc2/0x6e0 [ 951.194591][T14451] ? tomoyo_profile+0x47/0x60 [ 951.194621][T14451] tomoyo_path_number_perm+0x245/0x580 [ 951.194641][T14451] ? tomoyo_path_number_perm+0x237/0x580 [ 951.194665][T14451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 951.194687][T14451] ? find_held_lock+0x2b/0x80 [ 951.194728][T14451] ? find_held_lock+0x2b/0x80 [ 951.194744][T14451] ? hook_file_ioctl_common+0x145/0x410 [ 951.194767][T14451] ? __fget_files+0x20e/0x3c0 [ 951.194803][T14451] security_file_ioctl+0x9b/0x240 [ 951.194829][T14451] __x64_sys_ioctl+0xb7/0x210 [ 951.194851][T14451] do_syscall_64+0xcd/0xfa0 [ 951.194873][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.194891][T14451] RIP: 0033:0x7f28e578eec9 [ 951.194908][T14451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.194925][T14451] RSP: 002b:00007f28e6633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 951.194943][T14451] RAX: ffffffffffffffda RBX: 00007f28e59e5fa0 RCX: 00007f28e578eec9 [ 951.194954][T14451] RDX: 0000200000000100 RSI: 0000000000003b88 RDI: 0000000000000003 [ 951.194965][T14451] RBP: 00007f28e6633090 R08: 0000000000000000 R09: 0000000000000000 [ 951.194975][T14451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.194986][T14451] R13: 00007f28e59e6038 R14: 00007f28e59e5fa0 R15: 00007fff69849078 [ 951.195013][T14451] [ 951.195048][T14451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 951.414340][T14452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 951.567504][ T30] audit: type=1400 audit(2000000437.155:317): avc: denied { read } for pid=14445 comm="syz.2.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 951.709392][ T978] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 952.195912][ T978] usb 1-1: config index 0 descriptor too short (expected 36, got 15) [ 952.232994][ T978] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 952.519208][ T978] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 952.598537][ T30] audit: type=1400 audit(2000000438.255:318): avc: denied { map } for pid=14458 comm="syz.4.2152" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 952.626226][T14460] FAULT_INJECTION: forcing a failure. [ 952.626226][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 952.639928][ T978] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 952.758169][T14460] CPU: 1 UID: 0 PID: 14460 Comm: syz.4.2152 Not tainted syzkaller #0 PREEMPT(full) [ 952.758187][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 952.758194][T14460] Call Trace: [ 952.758198][T14460] [ 952.758202][T14460] dump_stack_lvl+0x16c/0x1f0 [ 952.758220][T14460] should_fail_ex+0x512/0x640 [ 952.758233][T14460] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 952.758248][T14460] should_failslab+0xc2/0x120 [ 952.758264][T14460] kmem_cache_alloc_noprof+0x75/0x6e0 [ 952.758276][T14460] ? vm_area_dup+0x27/0x8d0 [ 952.758290][T14460] ? vm_area_dup+0x27/0x8d0 [ 952.758300][T14460] vm_area_dup+0x27/0x8d0 [ 952.758311][T14460] __split_vma+0x18e/0x1070 [ 952.758323][T14460] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.758337][T14460] ? __pfx___split_vma+0x10/0x10 [ 952.758347][T14460] ? kernel_text_address+0x8d/0x100 [ 952.758370][T14460] vma_modify+0xee1/0x2030 [ 952.758383][T14460] ? _kstrtoull+0x145/0x200 [ 952.758400][T14460] ? __pfx_vma_modify+0x10/0x10 [ 952.758415][T14460] vma_modify_flags+0x212/0x2d0 [ 952.758427][T14460] ? __pfx_vma_modify_flags+0x10/0x10 [ 952.758443][T14460] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 952.758459][T14460] mlock_fixup+0x27c/0xe50 [ 952.758472][T14460] ? mas_find+0x156/0x6d0 [ 952.758486][T14460] apply_vma_lock_flags+0x254/0x370 [ 952.758500][T14460] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 952.758512][T14460] ? __pfx___might_resched+0x10/0x10 [ 952.758526][T14460] ? __pfx_down_write_killable+0x10/0x10 [ 952.758542][T14460] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 952.758558][T14460] do_mlock+0x2a5/0x800 [ 952.758570][T14460] ? __fget_files+0x20e/0x3c0 [ 952.758584][T14460] ? __pfx_do_mlock+0x10/0x10 [ 952.758596][T14460] ? fput+0x9b/0xd0 [ 952.758606][T14460] ? ksys_write+0x1ac/0x250 [ 952.758619][T14460] ? __pfx_ksys_write+0x10/0x10 [ 952.758635][T14460] __x64_sys_mlock+0x59/0x80 [ 952.758647][T14460] do_syscall_64+0xcd/0xfa0 [ 952.758661][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.758672][T14460] RIP: 0033:0x7f602178eec9 [ 952.758680][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.758691][T14460] RSP: 002b:00007f60225da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 952.758701][T14460] RAX: ffffffffffffffda RBX: 00007f60219e6090 RCX: 00007f602178eec9 [ 952.758708][T14460] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 952.758714][T14460] RBP: 00007f60225da090 R08: 0000000000000000 R09: 0000000000000000 [ 952.758720][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.758727][T14460] R13: 00007f60219e6128 R14: 00007f60219e6090 R15: 00007fffdff1b188 [ 952.758740][T14460] [ 952.864182][T14464] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2153'. [ 953.045877][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.069902][ T978] usb 1-1: config 0 descriptor?? [ 953.320466][ T5867] usb 2-1: USB disconnect, device number 46 [ 953.438607][ T30] audit: type=1400 audit(2000000439.095:319): avc: denied { read } for pid=14467 comm="syz.1.2155" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 953.665119][T14474] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 955.978922][T14477] usb usb8: usbfs: process 14477 (syz.1.2155) did not claim interface 4 before use [ 956.017636][ T30] audit: type=1400 audit(2000000439.115:320): avc: denied { open } for pid=14467 comm="syz.1.2155" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 956.095809][ T30] audit: type=1400 audit(2000000441.635:322): avc: denied { read write } for pid=14467 comm="syz.1.2155" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 957.073798][ T30] audit: type=1400 audit(2000000441.635:323): avc: denied { open } for pid=14467 comm="syz.1.2155" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 957.097643][ T30] audit: type=1400 audit(2000000441.635:324): avc: denied { ioctl } for pid=14467 comm="syz.1.2155" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 957.855912][ T30] audit: type=1400 audit(2000000440.285:321): avc: denied { mount } for pid=14467 comm="syz.1.2155" name="/" dev="autofs" ino=52927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 957.981093][ T30] audit: type=1400 audit(2000000443.635:325): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 958.229915][ T5867] usb 1-1: USB disconnect, device number 49 [ 958.256257][T14493] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 958.805716][ T30] audit: type=1400 audit(2000000444.445:326): avc: denied { mount } for pid=14488 comm="syz.4.2162" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 959.058225][T14493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.265875][ T5867] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 959.562705][ T30] audit: type=1326 audit(2000000445.205:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 959.636047][ T5867] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 959.652395][T14505] bond1: (slave veth3): Enslaving as an active interface with a down link [ 959.660054][ T5867] usb 3-1: config 0 has no interface number 0 [ 959.673318][ T30] audit: type=1326 audit(2000000445.205:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 959.718724][ T5867] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 959.783004][T14516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2164'. [ 959.799439][T14509] bond1: (slave dummy0): making interface the new active one [ 959.807333][ T5867] usb 3-1: config 0 interface 235 has no altsetting 0 [ 959.824682][ T30] audit: type=1326 audit(2000000445.205:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 959.837985][T14517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2164'. [ 959.864718][ T5867] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 959.877253][T14509] dummy0: entered promiscuous mode [ 959.883088][T14509] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 959.895210][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.935665][ T5867] usb 3-1: Product: syz [ 959.949515][ T5867] usb 3-1: Manufacturer: syz [ 959.971732][ T5867] usb 3-1: SerialNumber: syz [ 959.983041][ T5867] usb 3-1: config 0 descriptor?? [ 959.992179][ T30] audit: type=1326 audit(2000000445.205:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 959.995053][ T5867] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 960.028302][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 960.047306][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 960.074208][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 960.126237][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 960.182747][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 960.204098][ T5867] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 960.220482][ T30] audit: type=1326 audit(2000000445.205:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 960.484247][T14507] bond1 (unregistering): (slave veth3): Releasing active interface [ 960.495203][T14507] bond1 (unregistering): (slave dummy0): Releasing active interface [ 960.527851][T14507] bond1 (unregistering): Released all slaves [ 960.552769][T14516] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2164'. [ 961.317460][T14529] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2165'. [ 961.479266][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 961.768723][ T5866] usb 3-1: USB disconnect, device number 55 [ 961.785490][ T5866] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 961.796513][ T5866] keyspan 3-1:0.235: device disconnected [ 961.818588][ T5867] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 961.863093][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 961.874678][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 961.893223][ T10] usb 4-1: config 0 has no interface number 0 [ 961.905371][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 961.926717][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.975651][ T10] usb 4-1: Product: syz [ 961.985907][ T10] usb 4-1: Manufacturer: syz [ 961.990829][ T10] usb 4-1: SerialNumber: syz [ 962.095998][ T10] usb 4-1: config 0 descriptor?? [ 962.141046][ T5867] usb 2-1: config index 0 descriptor too short (expected 36, got 15) [ 962.141482][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 962.594144][ T5867] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 962.647118][ T5867] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 962.663264][ T5867] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 962.685832][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 962.689669][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.713854][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 962.866088][ T5867] usb 2-1: config 0 descriptor?? [ 963.738236][T14519] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2166'. [ 963.907109][T14548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 964.310492][T14548] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 965.174409][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 965.182728][ T10] usb 4-1: USB disconnect, device number 59 [ 965.200702][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 965.260942][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 965.285194][ T10] quatech2 4-1:0.51: device disconnected [ 965.535044][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 965.535059][ T30] audit: type=1400 audit(2000000451.185:342): avc: denied { connect } for pid=14560 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 965.630891][T14562] bridge0: port 1(team0) entered blocking state [ 965.637664][T14562] bridge0: port 1(team0) entered disabled state [ 965.644667][T14562] team0: entered allmulticast mode [ 965.649902][T14562] team_slave_0: entered allmulticast mode [ 965.655828][T14562] team_slave_1: entered allmulticast mode [ 965.671039][T14562] team0: entered promiscuous mode [ 965.676229][T14562] team_slave_0: entered promiscuous mode [ 965.682887][T14562] team_slave_1: entered promiscuous mode [ 965.691232][T14562] bridge0: port 1(team0) entered blocking state [ 965.697640][T14562] bridge0: port 1(team0) entered forwarding state [ 966.000406][ T5867] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 966.162190][ T30] audit: type=1400 audit(2000000451.755:343): avc: denied { read } for pid=14560 comm="syz.2.2176" path="socket:[54098]" dev="sockfs" ino=54098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 966.324254][ T5867] usb 1-1: config index 0 descriptor too short (expected 36, got 15) [ 966.335836][ T5867] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 966.354743][ T5867] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 966.574690][ T5867] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 966.592369][ T10] usb 2-1: USB disconnect, device number 47 [ 966.611784][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.632393][ T5867] usb 1-1: config 0 descriptor?? [ 967.054525][T14578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 967.279054][ T5867] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 969.533370][ T5867] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 969.978474][ T5867] usb 3-1: config 0 has no interface number 0 [ 969.984648][ T5867] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 970.081010][ T5867] usb 3-1: config 0 interface 235 has no altsetting 0 [ 970.098450][ T5867] usb 3-1: string descriptor 0 read error: -71 [ 970.434288][ T5867] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 970.464625][ T978] usb 1-1: USB disconnect, device number 50 [ 970.468603][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.549960][ T5867] usb 3-1: config 0 descriptor?? [ 970.620148][ T5867] usb 3-1: can't set config #0, error -71 [ 970.645069][ T5867] usb 3-1: USB disconnect, device number 56 [ 971.154155][T14600] bridge0: port 1(team0) entered blocking state [ 971.161991][T14600] bridge0: port 1(team0) entered disabled state [ 971.170369][T14600] team0: entered allmulticast mode [ 971.175680][T14600] team_slave_0: entered allmulticast mode [ 971.181582][T14600] team_slave_1: entered allmulticast mode [ 971.188517][T14600] team0: entered promiscuous mode [ 971.193540][T14600] team_slave_0: entered promiscuous mode [ 971.199306][T14600] team_slave_1: entered promiscuous mode [ 971.205800][T14600] bridge0: port 1(team0) entered blocking state [ 971.212126][T14600] bridge0: port 1(team0) entered forwarding state [ 971.345779][ T5866] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 971.685700][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 971.717848][ T5866] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 971.737492][ T5866] usb 1-1: config 0 has no interface number 0 [ 971.826014][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 972.008598][ T30] audit: type=1400 audit(2000000457.545:344): avc: denied { sqpoll } for pid=14605 comm="syz.1.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 972.204880][ T5866] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 972.235977][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.263513][ T5866] usb 1-1: Product: syz [ 972.270933][ T5866] usb 1-1: Manufacturer: syz [ 972.278345][ T5866] usb 1-1: SerialNumber: syz [ 972.995117][ T30] audit: type=1400 audit(2000000458.165:345): avc: denied { write } for pid=14610 comm="syz.4.2188" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 973.029301][ T30] audit: type=1400 audit(2000000458.175:346): avc: denied { ioctl } for pid=14610 comm="syz.4.2188" path="socket:[54262]" dev="sockfs" ino=54262 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 973.058895][ T5866] usb 1-1: config 0 descriptor?? [ 973.066349][ T30] audit: type=1400 audit(2000000458.175:347): avc: denied { ioctl } for pid=14610 comm="syz.4.2188" path="socket:[54265]" dev="sockfs" ino=54265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 973.080817][ T5866] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 973.463905][ T5866] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 973.744537][ T5866] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 973.966102][T14597] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2185'. [ 974.592884][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 974.601244][ T5867] usb 1-1: USB disconnect, device number 51 [ 974.610614][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 974.622974][ T5866] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 974.684906][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 974.726429][ T5867] quatech2 1-1:0.51: device disconnected [ 974.797924][ T5866] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 974.806425][ T5866] usb 3-1: config 0 has no interface number 0 [ 974.846363][ T5866] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.917376][ T5866] usb 3-1: config 0 interface 235 has no altsetting 0 [ 974.931843][ T5866] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 974.946965][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.955250][ T5866] usb 3-1: Product: syz [ 974.959819][ T5866] usb 3-1: Manufacturer: syz [ 974.964489][ T5866] usb 3-1: SerialNumber: syz [ 974.997489][ T5866] usb 3-1: config 0 descriptor?? [ 975.021175][ T5866] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 975.038583][ T5866] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 975.063041][ T5866] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 975.174030][ T5866] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 975.188031][ T5866] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 975.206322][ T5866] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 975.276961][T14642] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 975.450302][T14644] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 975.711110][ T5866] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 975.750123][ T5866] usb 3-1: USB disconnect, device number 57 [ 975.813885][ T5866] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 975.839156][ T5866] keyspan 3-1:0.235: device disconnected [ 976.401315][T14654] Bluetooth: MGMT ver 1.23 [ 976.407095][ T30] audit: type=1400 audit(2000000462.055:348): avc: denied { write } for pid=14653 comm="syz.2.2198" path="socket:[55313]" dev="sockfs" ino=55313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 976.430869][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.558539][T14664] fuse: Unknown parameter 'grou00000000000000000000' [ 979.460404][T14679] /dev/nullb0: Can't open blockdev [ 979.472377][T14679] new mount options do not match the existing superblock, will be ignored [ 979.484438][T14679] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 980.766647][T14691] mmap: syz.1.2206 (14691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 980.841913][ T30] audit: type=1400 audit(2000000466.395:349): avc: denied { ioctl } for pid=14685 comm="syz.1.2206" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 981.365845][ T5867] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 981.807460][ T5867] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 981.819580][ T5867] usb 3-1: config 0 has no interface number 0 [ 981.829903][ T5867] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 982.015708][ T5867] usb 3-1: config 0 interface 235 has no altsetting 0 [ 982.029864][ T5867] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 982.053316][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.073844][ T5867] usb 3-1: Product: syz [ 982.083095][ T5867] usb 3-1: Manufacturer: syz [ 982.094693][ T5867] usb 3-1: SerialNumber: syz [ 982.112969][ T5867] usb 3-1: config 0 descriptor?? [ 982.134708][ T5867] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 982.158047][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 982.193002][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 982.239043][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 982.272526][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 982.302655][ T5867] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 983.525521][ T5867] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 983.662596][ T5867] usb 3-1: USB disconnect, device number 58 [ 983.710156][ T5867] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 983.741194][ T5867] keyspan 3-1:0.235: device disconnected [ 984.336964][T14725] fuse: Unknown parameter 'grou00000000000000000000' [ 984.700296][ T30] audit: type=1400 audit(2000000470.355:350): avc: denied { write } for pid=14717 comm="syz.2.2213" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 985.396588][ T30] audit: type=1400 audit(2000000470.355:351): avc: denied { ioctl } for pid=14717 comm="syz.2.2213" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 985.421692][ T30] audit: type=1400 audit(2000000470.365:352): avc: denied { write } for pid=14717 comm="syz.2.2213" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 985.939773][T14739] new mount options do not match the existing superblock, will be ignored [ 985.961625][T14739] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 986.483245][T14735] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 988.365475][ T5866] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 989.082844][ T5866] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 989.304861][ T5866] usb 5-1: config 0 has no interface number 0 [ 989.314852][ T5866] usb 5-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.375795][ T5866] usb 5-1: config 0 interface 235 has no altsetting 0 [ 989.389617][ T5866] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 989.399221][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.408164][ T5866] usb 5-1: Product: syz [ 989.412930][ T5866] usb 5-1: Manufacturer: syz [ 989.418850][ T5866] usb 5-1: SerialNumber: syz [ 989.437540][ T5866] usb 5-1: config 0 descriptor?? [ 989.463563][ T5866] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 989.482015][ T5866] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 990.004623][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 990.476690][ T5866] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 990.495663][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 991.320208][ T5866] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 991.353661][ T5866] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 991.415658][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 991.421917][ T5866] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 991.431716][ T5866] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 991.461850][ T5866] usb 5-1: USB disconnect, device number 62 [ 991.469811][ T5866] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 991.479632][ T5866] keyspan 5-1:0.235: device disconnected [ 991.599019][ T10] usb 2-1: device descriptor read/all, error -71 [ 992.565241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.574059][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.585715][T11204] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 993.492386][T11204] usb 5-1: config index 0 descriptor too short (expected 36, got 15) [ 993.500556][T11204] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 993.985366][T11204] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 993.995909][T11204] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 994.004980][T11204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.029755][T11204] usb 5-1: config 0 descriptor?? [ 994.678059][T14816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 994.706800][T14816] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 995.365754][ T5866] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 995.812794][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 995.973743][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 996.105973][ T5866] usb 1-1: config 4 interface 0 has no altsetting 0 [ 996.261620][ T5866] usb 1-1: string descriptor 0 read error: -22 [ 996.347824][ T5866] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 996.454442][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.580844][ T5866] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 997.108491][T14832] process 'syz.1.2241' launched './file0' with NULL argv: empty string added [ 997.213953][ T30] audit: type=1400 audit(2000000482.755:353): avc: denied { mounton } for pid=14823 comm="syz.3.2242" path="/447/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 997.765677][ T30] audit: type=1400 audit(2000000482.765:354): avc: denied { remount } for pid=14823 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 997.800455][ T5866] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 997.810995][ T5866] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 997.818336][ T5866] usb 1-1: media controller created [ 997.999372][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.010954][ T30] audit: type=1400 audit(2000000482.775:355): avc: denied { execute_no_trans } for pid=14822 comm="syz.1.2241" path="/440/file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 998.033333][T11204] usb 5-1: USB disconnect, device number 63 [ 998.068965][ T5866] zl10353_read_register: readreg error (reg=127, ret==0) [ 998.165739][ T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 998.397795][ T5866] usb 1-1: USB disconnect, device number 52 [ 998.551834][ T10] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 998.560185][ T10] usb 3-1: config 0 has no interface number 0 [ 999.030786][ T10] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.047803][ T10] usb 3-1: config 0 interface 235 has no altsetting 0 [ 999.073470][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 999.195648][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.214781][ T10] usb 3-1: Product: syz [ 999.224096][ T10] usb 3-1: Manufacturer: syz [ 999.234265][ T10] usb 3-1: SerialNumber: syz [ 999.309056][T14852] bridge0: port 1(team0) entered blocking state [ 999.315783][T14852] bridge0: port 1(team0) entered disabled state [ 999.322726][T14852] team0: entered allmulticast mode [ 999.328096][T14852] team_slave_0: entered allmulticast mode [ 999.333849][T14852] team_slave_1: entered allmulticast mode [ 999.349074][T14852] team0: entered promiscuous mode [ 999.354176][T14852] team_slave_0: entered promiscuous mode [ 999.360979][T14852] team_slave_1: entered promiscuous mode [ 999.369386][T14852] bridge0: port 1(team0) entered blocking state [ 999.375730][T14852] bridge0: port 1(team0) entered forwarding state [ 999.761536][ T10] usb 3-1: config 0 descriptor?? [ 999.788901][ T10] usb 3-1: can't set config #0, error -71 [ 1000.097015][ T10] usb 3-1: USB disconnect, device number 59 [ 1001.170130][ T30] audit: type=1400 audit(2000000486.825:356): avc: denied { getopt } for pid=14876 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1001.528307][T14888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1001.534827][T14888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1001.555112][T14888] vhci_hcd vhci_hcd.0: Device attached [ 1001.795667][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1001.865678][ T5866] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1001.927945][T14899] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1001.937293][ T5867] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1002.002724][T14899] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1002.337305][ T10] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1002.356698][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1002.377226][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1002.395206][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.424464][ T10] usb 3-1: config 0 descriptor?? [ 1002.979267][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1002.986347][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1002.995831][ T5867] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1003.005548][ T5867] usb 2-1: string descriptor 0 read error: -22 [ 1003.012346][ T5867] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1003.028471][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.059182][ T5867] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1003.078673][ T5867] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1003.091054][ T5867] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1003.114228][ T5867] usb 2-1: media controller created [ 1003.250422][ T5866] usb 37-1: device descriptor read/64, error -71 [ 1003.259373][T14895] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1003.290862][T11365] usb 3-1: USB disconnect, device number 60 [ 1003.297209][T14890] vhci_hcd: connection closed [ 1003.298122][ T6802] vhci_hcd: stop threads [ 1003.340302][ T6802] vhci_hcd: release socket [ 1003.344880][ T6802] vhci_hcd: disconnect device [ 1003.366944][T14913] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2262'. [ 1003.794265][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1003.917641][ T5867] zl10353_read_register: readreg error (reg=127, ret==0) [ 1004.496591][ T5867] usb 2-1: USB disconnect, device number 50 [ 1004.725884][T14923] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2265'. [ 1004.879332][T14932] new mount options do not match the existing superblock, will be ignored [ 1004.899022][T14932] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1005.297846][T14923] Bluetooth: MGMT ver 1.23 [ 1005.446762][ T30] audit: type=1400 audit(2000000490.945:357): avc: denied { append } for pid=14920 comm="syz.4.2265" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1006.505939][T14954] FAULT_INJECTION: forcing a failure. [ 1006.505939][T14954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.579851][T14954] CPU: 0 UID: 0 PID: 14954 Comm: syz.0.2270 Not tainted syzkaller #0 PREEMPT(full) [ 1006.579877][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1006.579883][T14954] Call Trace: [ 1006.579887][T14954] [ 1006.579891][T14954] dump_stack_lvl+0x16c/0x1f0 [ 1006.579908][T14954] should_fail_ex+0x512/0x640 [ 1006.579924][T14954] _copy_from_user+0x2e/0xd0 [ 1006.579939][T14954] copy_msghdr_from_user+0x98/0x160 [ 1006.579952][T14954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1006.579971][T14954] ___sys_sendmsg+0xfe/0x1d0 [ 1006.579984][T14954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.579995][T14954] ? __lock_acquire+0x622/0x1c90 [ 1006.580024][T14954] __sys_sendmsg+0x16d/0x220 [ 1006.580037][T14954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1006.580057][T14954] do_syscall_64+0xcd/0xfa0 [ 1006.580071][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.580082][T14954] RIP: 0033:0x7f2f1af8eec9 [ 1006.580091][T14954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.580101][T14954] RSP: 002b:00007f2f1bec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.580112][T14954] RAX: ffffffffffffffda RBX: 00007f2f1b1e6090 RCX: 00007f2f1af8eec9 [ 1006.580119][T14954] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1006.580126][T14954] RBP: 00007f2f1bec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.580132][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.580138][T14954] R13: 00007f2f1b1e6128 R14: 00007f2f1b1e6090 R15: 00007ffe33f57178 [ 1006.580151][T14954] [ 1006.772276][ T30] audit: type=1400 audit(2000000492.425:358): avc: denied { connect } for pid=14951 comm="syz.1.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1008.073289][T14977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2275'. [ 1008.860985][ T30] audit: type=1400 audit(2000000494.515:359): avc: denied { ioctl } for pid=14982 comm="syz.2.2280" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1009.086869][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1009.616921][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1009.675784][ T5867] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1009.792858][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1009.831237][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1009.916637][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1009.925213][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1009.943605][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.987581][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1010.010413][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.040043][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1010.046295][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1010.130599][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1010.133770][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1010.155694][T11204] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1010.177689][T14981] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 1010.196833][ T10] usb 4-1: media controller created [ 1010.226110][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.231687][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.265988][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1010.334612][ T5867] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1010.346658][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.353753][T11204] usb 2-1: config index 0 descriptor too short (expected 36, got 15) [ 1010.381252][T11204] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1010.415874][ T10] usb 4-1: USB disconnect, device number 60 [ 1010.426154][ T5867] usb 3-1: config 0 descriptor?? [ 1010.444992][T11204] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.526970][ T5867] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1010.597337][T11204] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 1010.645739][T11204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.754748][T11204] usb 2-1: config 0 descriptor?? [ 1011.094876][ T5867] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1011.144876][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1011.154572][ T5867] usb 3-1: MIDIStreaming interface descriptor not found [ 1014.151795][ T5867] usb 3-1: USB disconnect, device number 61 [ 1014.393984][T15024] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2289'. [ 1014.507531][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.950827][ T5867] usb 2-1: USB disconnect, device number 51 [ 1015.260423][T15041] FAULT_INJECTION: forcing a failure. [ 1015.260423][T15041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.286133][T15041] CPU: 0 UID: 0 PID: 15041 Comm: syz.1.2296 Not tainted syzkaller #0 PREEMPT(full) [ 1015.286150][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1015.286157][T15041] Call Trace: [ 1015.286160][T15041] [ 1015.286164][T15041] dump_stack_lvl+0x16c/0x1f0 [ 1015.286182][T15041] should_fail_ex+0x512/0x640 [ 1015.286198][T15041] _copy_from_user+0x2e/0xd0 [ 1015.286212][T15041] copy_msghdr_from_user+0x98/0x160 [ 1015.286227][T15041] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1015.286246][T15041] ___sys_sendmsg+0xfe/0x1d0 [ 1015.286258][T15041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.286269][T15041] ? __lock_acquire+0x622/0x1c90 [ 1015.286300][T15041] __sys_sendmsg+0x16d/0x220 [ 1015.286312][T15041] ? __pfx___sys_sendmsg+0x10/0x10 [ 1015.286333][T15041] do_syscall_64+0xcd/0xfa0 [ 1015.286347][T15041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.286360][T15041] RIP: 0033:0x7f374978eec9 [ 1015.286369][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.286380][T15041] RSP: 002b:00007f374a68d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.286391][T15041] RAX: ffffffffffffffda RBX: 00007f37499e5fa0 RCX: 00007f374978eec9 [ 1015.286398][T15041] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1015.286404][T15041] RBP: 00007f374a68d090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.286410][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.286416][T15041] R13: 00007f37499e6038 R14: 00007f37499e5fa0 R15: 00007ffdf5fa1278 [ 1015.286430][T15041] [ 1015.789195][ T30] audit: type=1400 audit(2000000501.445:360): avc: denied { create } for pid=15049 comm="syz.2.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1016.461707][ T30] audit: type=1400 audit(2000000502.105:361): avc: denied { sys_admin } for pid=15049 comm="syz.2.2301" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1020.294697][ T30] audit: type=1400 audit(2000000505.705:362): avc: denied { getopt } for pid=15103 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1020.484476][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'. [ 1021.510710][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2320'. [ 1023.144474][ T30] audit: type=1400 audit(2000000507.825:363): avc: denied { getopt } for pid=15127 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1023.210613][ T30] audit: type=1400 audit(2000000507.825:364): avc: denied { write } for pid=15127 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1023.326721][T15143] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1023.333268][T15143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1023.534785][T15148] new mount options do not match the existing superblock, will be ignored [ 1023.570222][T15148] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1023.735840][ T5867] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1023.848849][T15143] vhci_hcd vhci_hcd.0: Device attached [ 1024.563125][T15157] FAULT_INJECTION: forcing a failure. [ 1024.563125][T15157] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.579638][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1024.588891][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.1.2327 Not tainted syzkaller #0 PREEMPT(full) [ 1024.588914][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1024.588924][T15157] Call Trace: [ 1024.588930][T15157] [ 1024.588937][T15157] dump_stack_lvl+0x16c/0x1f0 [ 1024.588963][T15157] should_fail_ex+0x512/0x640 [ 1024.588983][T15157] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1024.589010][T15157] should_failslab+0xc2/0x120 [ 1024.589036][T15157] __kvmalloc_node_noprof+0x141/0x9c0 [ 1024.589061][T15157] ? seq_read_iter+0x830/0x12d0 [ 1024.589088][T15157] ? seq_read_iter+0x830/0x12d0 [ 1024.589106][T15157] seq_read_iter+0x830/0x12d0 [ 1024.589124][T15157] ? find_held_lock+0x2b/0x80 [ 1024.589142][T15157] ? look_up_lock_class+0x59/0x150 [ 1024.589164][T15157] ? register_lock_class+0x41/0x4c0 [ 1024.589191][T15157] seq_read+0x3a3/0x570 [ 1024.589211][T15157] ? __pfx_seq_read+0x10/0x10 [ 1024.589253][T15157] full_proxy_read+0x131/0x1a0 [ 1024.589270][T15157] ? __pfx_full_proxy_read+0x10/0x10 [ 1024.589288][T15157] vfs_read+0x1e4/0xcf0 [ 1024.589314][T15157] ? __pfx___mutex_lock+0x10/0x10 [ 1024.589336][T15157] ? __pfx_vfs_read+0x10/0x10 [ 1024.589365][T15157] ? __fget_files+0x20e/0x3c0 [ 1024.589397][T15157] ksys_read+0x12a/0x250 [ 1024.589417][T15157] ? __pfx_ksys_read+0x10/0x10 [ 1024.589446][T15157] do_syscall_64+0xcd/0xfa0 [ 1024.589469][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.589487][T15157] RIP: 0033:0x7f374978eec9 [ 1024.589501][T15157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.589518][T15157] RSP: 002b:00007f374a66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1024.589535][T15157] RAX: ffffffffffffffda RBX: 00007f37499e6090 RCX: 00007f374978eec9 [ 1024.589546][T15157] RDX: 0000000000002020 RSI: 0000200000005180 RDI: 0000000000000007 [ 1024.589556][T15157] RBP: 00007f374a66c090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.589566][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.589576][T15157] R13: 00007f37499e6128 R14: 00007f37499e6090 R15: 00007ffdf5fa1278 [ 1024.589603][T15157] [ 1024.882083][T15156] netlink: 'syz.3.2329': attribute type 4 has an invalid length. [ 1024.898122][T15156] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2329'. [ 1025.527890][T15156] 9pnet_fd: Insufficient options for proto=fd [ 1025.534856][ T10] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1025.594861][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.627593][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1025.636726][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.664564][ T10] usb 5-1: config 0 descriptor?? [ 1025.908452][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1026.819298][ T5888] usb 5-1: USB disconnect, device number 64 [ 1026.826185][T15144] vhci_hcd: connection reset by peer [ 1026.950173][T15169] new mount options do not match the existing superblock, will be ignored [ 1026.960842][T15169] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1027.101470][T15172] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1027.213255][ T2962] vhci_hcd: stop threads [ 1027.270388][ T2962] vhci_hcd: release socket [ 1027.285206][ T2962] vhci_hcd: disconnect device [ 1027.301093][T15182] FAULT_INJECTION: forcing a failure. [ 1027.301093][T15182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.327001][ T30] audit: type=1326 audit(2000000512.975:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.350946][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.4.2333 Not tainted syzkaller #0 PREEMPT(full) [ 1027.350971][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1027.350981][T15182] Call Trace: [ 1027.350987][T15182] [ 1027.350993][T15182] dump_stack_lvl+0x16c/0x1f0 [ 1027.351019][T15182] should_fail_ex+0x512/0x640 [ 1027.351045][T15182] _copy_from_user+0x2e/0xd0 [ 1027.351068][T15182] copy_msghdr_from_user+0x98/0x160 [ 1027.351085][T15182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1027.351110][T15182] ? __pfx__kstrtoull+0x10/0x10 [ 1027.351140][T15182] ___sys_sendmsg+0xfe/0x1d0 [ 1027.351160][T15182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.351191][T15182] ? find_held_lock+0x2b/0x80 [ 1027.351224][T15182] __sys_sendmmsg+0x200/0x420 [ 1027.351246][T15182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1027.351274][T15182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1027.351307][T15182] ? fput+0x9b/0xd0 [ 1027.351322][T15182] ? ksys_write+0x1ac/0x250 [ 1027.351342][T15182] ? __pfx_ksys_write+0x10/0x10 [ 1027.351373][T15182] __x64_sys_sendmmsg+0x9c/0x100 [ 1027.351391][T15182] ? lockdep_hardirqs_on+0x7c/0x110 [ 1027.351410][T15182] do_syscall_64+0xcd/0xfa0 [ 1027.351431][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.351447][T15182] RIP: 0033:0x7f602178eec9 [ 1027.351461][T15182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.351476][T15182] RSP: 002b:00007f60225fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1027.351492][T15182] RAX: ffffffffffffffda RBX: 00007f60219e5fa0 RCX: 00007f602178eec9 [ 1027.351503][T15182] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 1027.351513][T15182] RBP: 00007f60225fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.351524][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.351533][T15182] R13: 00007f60219e6038 R14: 00007f60219e5fa0 R15: 00007fffdff1b188 [ 1027.351558][T15182] [ 1027.363137][ T30] audit: type=1326 audit(2000000512.975:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.582506][ T30] audit: type=1326 audit(2000000512.975:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.610419][ T30] audit: type=1326 audit(2000000512.975:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.652016][ T30] audit: type=1326 audit(2000000512.975:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.722391][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2334'. [ 1027.737574][T15187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2334'. [ 1027.796074][ T30] audit: type=1326 audit(2000000512.985:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1027.877083][ T30] audit: type=1326 audit(2000000512.985:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1028.600558][ T30] audit: type=1326 audit(2000000512.985:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1028.634737][ T30] audit: type=1326 audit(2000000512.985:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1028.769991][ T30] audit: type=1326 audit(2000000512.985:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1028.804261][ T30] audit: type=1326 audit(2000000512.985:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1028.905372][ T30] audit: type=1326 audit(2000000512.985:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1029.037239][ T30] audit: type=1326 audit(2000000512.985:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f28e578eec9 code=0x7ffc0000 [ 1029.105741][ T5867] vhci_hcd: vhci_device speed not set [ 1029.298139][ T30] audit: type=1400 audit(2000000514.955:378): avc: denied { create } for pid=15201 comm="syz.4.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1030.013205][T15216] sctp: [Deprecated]: syz.2.2341 (pid 15216) Use of int in max_burst socket option deprecated. [ 1030.013205][T15216] Use struct sctp_assoc_value instead [ 1030.283009][T15223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2345'. [ 1030.436478][T15224] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1031.057511][ T5867] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1033.055671][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1033.072855][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.084683][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.099951][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1033.195707][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.275932][ T5867] usb 2-1: Product: syz [ 1033.280280][ T5867] usb 2-1: Manufacturer: syz [ 1033.284917][ T5867] usb 2-1: SerialNumber: syz [ 1033.349753][ T5867] usb 2-1: config 0 descriptor?? [ 1034.582060][ T5867] usb 2-1: USB disconnect, device number 52 [ 1035.095646][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1035.166990][ T30] audit: type=1400 audit(2000000520.825:379): avc: denied { create } for pid=15266 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1035.167894][T15267] syzkaller1: entered promiscuous mode [ 1035.210641][T15267] syzkaller1: entered allmulticast mode [ 1035.247244][ T30] audit: type=1400 audit(2000000520.825:380): avc: denied { write } for pid=15266 comm="syz.1.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1035.399631][ T978] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1035.427025][ T10] usb 4-1: config index 0 descriptor too short (expected 36, got 15) [ 1035.435274][ T10] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1035.479348][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1035.507524][T15274] fuse: Bad value for 'fd' [ 1036.008957][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.019599][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 1036.036407][T15273] FAULT_INJECTION: forcing a failure. [ 1036.036407][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.049015][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.0.2360 Not tainted syzkaller #0 PREEMPT(full) [ 1036.049030][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1036.049037][T15273] Call Trace: [ 1036.049042][T15273] [ 1036.049046][T15273] dump_stack_lvl+0x16c/0x1f0 [ 1036.049063][T15273] should_fail_ex+0x512/0x640 [ 1036.049077][T15273] ? fs_reclaim_acquire+0xae/0x150 [ 1036.049095][T15273] should_failslab+0xc2/0x120 [ 1036.049111][T15273] __kmalloc_noprof+0xdd/0x880 [ 1036.049123][T15273] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.049142][T15273] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.049157][T15273] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1036.049174][T15273] ? tomoyo_profile+0x47/0x60 [ 1036.049192][T15273] tomoyo_path_number_perm+0x245/0x580 [ 1036.049204][T15273] ? tomoyo_path_number_perm+0x237/0x580 [ 1036.049218][T15273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1036.049232][T15273] ? find_held_lock+0x2b/0x80 [ 1036.049255][T15273] ? find_held_lock+0x2b/0x80 [ 1036.049264][T15273] ? hook_file_ioctl_common+0x145/0x410 [ 1036.049278][T15273] ? __fget_files+0x20e/0x3c0 [ 1036.049295][T15273] security_file_ioctl+0x9b/0x240 [ 1036.049311][T15273] __x64_sys_ioctl+0xb7/0x210 [ 1036.049324][T15273] do_syscall_64+0xcd/0xfa0 [ 1036.049338][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.049349][T15273] RIP: 0033:0x7f2f1af8eec9 [ 1036.049360][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.049371][T15273] RSP: 002b:00007f2f1bee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.049382][T15273] RAX: ffffffffffffffda RBX: 00007f2f1b1e5fa0 RCX: 00007f2f1af8eec9 [ 1036.049389][T15273] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000005 [ 1036.049395][T15273] RBP: 00007f2f1bee8090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.049402][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.049408][T15273] R13: 00007f2f1b1e6038 R14: 00007f2f1b1e5fa0 R15: 00007ffe33f57178 [ 1036.049422][T15273] [ 1036.049427][T15273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1036.262873][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1036.314517][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.444033][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1036.922334][ T10] usb 4-1: config 0 descriptor?? [ 1036.927397][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.057487][ T978] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1037.069250][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.141505][ T978] usb 3-1: config 0 descriptor?? [ 1037.316664][ T978] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1037.544921][T15287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1037.577407][T15287] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 1038.725053][ T978] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1039.456046][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1039.463045][ T978] usb 3-1: MIDIStreaming interface descriptor not found [ 1040.564801][ T10] usb 4-1: USB disconnect, device number 61 [ 1040.586641][ T978] usb 3-1: USB disconnect, device number 62 [ 1041.055847][ T5888] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1041.506944][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1041.520346][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1041.531044][ T5888] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1041.549595][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 1041.559462][ T5888] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1041.603140][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.655388][ T5888] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1041.693174][ T5888] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1041.705201][ T5867] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1041.827462][ T5888] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1041.849778][ T5888] usb 1-1: media controller created [ 1041.862929][T15305] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1041.922634][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.999563][ T5867] usb 4-1: config index 0 descriptor too short (expected 36, got 15) [ 1042.025952][ T5867] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1042.048364][ T5888] zl10353_read_register: readreg error (reg=127, ret==0) [ 1042.057942][ T5867] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1042.113365][ T5867] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 1042.142456][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.173646][ T5888] usb 1-1: USB disconnect, device number 53 [ 1042.181068][ T5867] usb 4-1: config 0 descriptor?? [ 1043.046835][T15326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1043.198787][T15326] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 1045.021474][ T10] usb 4-1: USB disconnect, device number 62 [ 1045.299691][T15344] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1045.496935][T15345] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1045.503472][T15345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1045.691412][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 1045.727943][T15344] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1045.735922][T15345] vhci_hcd vhci_hcd.0: Device attached [ 1046.005665][ T5888] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1046.045809][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1046.956662][ T5888] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1046.975667][ T5888] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1046.984745][ T5888] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1047.037810][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.237039][ T5888] usb 4-1: config 0 descriptor?? [ 1047.431039][T15366] new mount options do not match the existing superblock, will be ignored [ 1047.444422][T15366] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1047.905447][ T978] usb 4-1: USB disconnect, device number 63 [ 1047.926249][T15350] vhci_hcd: connection closed [ 1047.948458][ T1163] vhci_hcd: stop threads [ 1047.965770][ T1163] vhci_hcd: release socket [ 1047.972128][ T1163] vhci_hcd: disconnect device [ 1048.145493][ T30] audit: type=1326 audit(2000000533.795:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.339438][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2384'. [ 1048.350512][T15375] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2384'. [ 1048.412239][ T30] audit: type=1326 audit(2000000533.795:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.450804][ T30] audit: type=1326 audit(2000000533.795:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.476557][T15377] capability: warning: `syz.2.2385' uses deprecated v2 capabilities in a way that may be insecure [ 1048.476562][ T30] audit: type=1326 audit(2000000533.795:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.533821][ T30] audit: type=1326 audit(2000000533.795:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.565718][ T30] audit: type=1326 audit(2000000533.795:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.626914][T15377] FAULT_INJECTION: forcing a failure. [ 1048.626914][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.696555][ T30] audit: type=1326 audit(2000000533.795:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1048.855714][T15377] CPU: 1 UID: 0 PID: 15377 Comm: syz.2.2385 Not tainted syzkaller #0 PREEMPT(full) [ 1048.855739][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1048.855750][T15377] Call Trace: [ 1048.855757][T15377] [ 1048.855764][T15377] dump_stack_lvl+0x16c/0x1f0 [ 1048.855790][T15377] should_fail_ex+0x512/0x640 [ 1048.855814][T15377] _copy_from_user+0x2e/0xd0 [ 1048.855838][T15377] __sys_bpf+0x248/0x4980 [ 1048.855865][T15377] ? __pfx___sys_bpf+0x10/0x10 [ 1048.855883][T15377] ? find_held_lock+0x2b/0x80 [ 1048.855905][T15377] ? find_held_lock+0x2b/0x80 [ 1048.855928][T15377] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1048.855967][T15377] ? fput+0x9b/0xd0 [ 1048.855983][T15377] ? ksys_write+0x1ac/0x250 [ 1048.856004][T15377] ? __pfx_ksys_write+0x10/0x10 [ 1048.856032][T15377] __x64_sys_bpf+0x78/0xc0 [ 1048.856053][T15377] ? lockdep_hardirqs_on+0x7c/0x110 [ 1048.856073][T15377] do_syscall_64+0xcd/0xfa0 [ 1048.856095][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.856113][T15377] RIP: 0033:0x7ff45d98eec9 [ 1048.856129][T15377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.856146][T15377] RSP: 002b:00007ff45e763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1048.856164][T15377] RAX: ffffffffffffffda RBX: 00007ff45dbe5fa0 RCX: 00007ff45d98eec9 [ 1048.856176][T15377] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1048.856188][T15377] RBP: 00007ff45e763090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.856200][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.856211][T15377] R13: 00007ff45dbe6038 R14: 00007ff45dbe5fa0 R15: 00007fffd944ec28 [ 1048.856234][T15377] [ 1049.136105][ T30] audit: type=1326 audit(2000000533.795:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1049.196106][ T30] audit: type=1326 audit(2000000533.795:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1049.263076][ T30] audit: type=1326 audit(2000000533.795:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f374978eec9 code=0x7ffc0000 [ 1050.280180][T15390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1050.286711][T15390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1050.420018][T15390] vhci_hcd vhci_hcd.0: Device attached [ 1050.543634][T15403] fuse: Bad value for 'fd' [ 1050.713415][ T5867] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1051.456093][ T5888] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1052.697098][ T5888] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1052.708247][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1052.784023][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1052.794122][T15426] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1052.854001][T15428] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1053.166662][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.327513][ T5888] usb 3-1: config 0 descriptor?? [ 1053.366628][T15429] FAULT_INJECTION: forcing a failure. [ 1053.366628][T15429] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.405660][T15429] CPU: 0 UID: 0 PID: 15429 Comm: syz.3.2399 Not tainted syzkaller #0 PREEMPT(full) [ 1053.405688][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1053.405700][T15429] Call Trace: [ 1053.405706][T15429] [ 1053.405714][T15429] dump_stack_lvl+0x16c/0x1f0 [ 1053.405739][T15429] should_fail_ex+0x512/0x640 [ 1053.405759][T15429] ? fs_reclaim_acquire+0xae/0x150 [ 1053.405783][T15429] should_failslab+0xc2/0x120 [ 1053.405808][T15429] __kmalloc_noprof+0xdd/0x880 [ 1053.405826][T15429] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1053.405855][T15429] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1053.405876][T15429] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1053.405901][T15429] ? tomoyo_profile+0x47/0x60 [ 1053.405930][T15429] tomoyo_path_number_perm+0x245/0x580 [ 1053.405949][T15429] ? tomoyo_path_number_perm+0x237/0x580 [ 1053.405971][T15429] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1053.405991][T15429] ? find_held_lock+0x2b/0x80 [ 1053.406029][T15429] ? find_held_lock+0x2b/0x80 [ 1053.406044][T15429] ? hook_file_ioctl_common+0x145/0x410 [ 1053.406067][T15429] ? __fget_files+0x20e/0x3c0 [ 1053.406094][T15429] security_file_ioctl+0x9b/0x240 [ 1053.406118][T15429] __x64_sys_ioctl+0xb7/0x210 [ 1053.406138][T15429] do_syscall_64+0xcd/0xfa0 [ 1053.406160][T15429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.406176][T15429] RIP: 0033:0x7f28e578eec9 [ 1053.406191][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.406208][T15429] RSP: 002b:00007f28e6633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.406226][T15429] RAX: ffffffffffffffda RBX: 00007f28e59e5fa0 RCX: 00007f28e578eec9 [ 1053.406244][T15429] RDX: 0000200000000280 RSI: 00000000c01864b1 RDI: 0000000000000003 [ 1053.406255][T15429] RBP: 00007f28e6633090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.406265][T15429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.406275][T15429] R13: 00007f28e59e6038 R14: 00007f28e59e5fa0 R15: 00007fff69849078 [ 1053.406301][T15429] [ 1053.406309][T15429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.421710][ T5888] usb 3-1: can't set config #0, error -71 [ 1053.478432][T15393] vhci_hcd: connection reset by peer [ 1053.775958][ T5888] usb 3-1: USB disconnect, device number 63 [ 1053.816594][ T1163] vhci_hcd: stop threads [ 1053.820871][ T1163] vhci_hcd: release socket [ 1053.826564][ T1163] vhci_hcd: disconnect device [ 1054.517811][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.531170][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.985941][ T5866] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1055.597474][ T5866] usb 1-1: device descriptor read/64, error -71 [ 1056.211294][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1056.211312][ T30] audit: type=1400 audit(2000000541.865:398): avc: denied { read append } for pid=15454 comm="syz.1.2406" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1056.262555][ T30] audit: type=1400 audit(2000000541.865:399): avc: denied { open } for pid=15454 comm="syz.1.2406" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1056.305642][ T5866] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1056.315731][ T5867] vhci_hcd: vhci_device speed not set [ 1056.465698][ T5866] usb 1-1: device descriptor read/64, error -71 [ 1056.554010][T15463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1056.560552][T15463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1056.665996][ T5866] usb usb1-port1: attempt power cycle [ 1056.670679][T15463] vhci_hcd vhci_hcd.0: Device attached [ 1057.138671][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1057.205796][T11365] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1057.266461][T11204] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1057.351286][T15476] FAULT_INJECTION: forcing a failure. [ 1057.351286][T15476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.352533][T15476] [ 1057.352541][T15476] ====================================================== [ 1057.352547][T15476] WARNING: possible circular locking dependency detected [ 1057.352555][T15476] syzkaller #0 Not tainted [ 1057.352564][T15476] ------------------------------------------------------ [ 1057.352570][T15476] syz.0.2413/15476 is trying to acquire lock: [ 1057.352578][T15476] ffffffff8e2d1680 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1057.352637][T15476] [ 1057.352637][T15476] but task is already holding lock: [ 1057.352643][T15476] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1057.352687][T15476] [ 1057.352687][T15476] which lock already depends on the new lock. [ 1057.352687][T15476] [ 1057.352692][T15476] [ 1057.352692][T15476] the existing dependency chain (in reverse order) is: [ 1057.352698][T15476] [ 1057.352698][T15476] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1057.352714][T15476] _raw_spin_lock_nested+0x31/0x40 [ 1057.352730][T15476] raw_spin_rq_lock_nested+0x29/0x130 [ 1057.352750][T15476] task_rq_lock+0xcf/0x490 [ 1057.352761][T15476] cgroup_move_task+0x81/0x2a0 [ 1057.352774][T15476] css_set_move_task+0x288/0x5f0 [ 1057.352792][T15476] cgroup_post_fork+0x201/0x9d0 [ 1057.352805][T15476] copy_process+0x602d/0x76a0 [ 1057.352817][T15476] kernel_clone+0xfc/0x930 [ 1057.352829][T15476] user_mode_thread+0xc8/0x110 [ 1057.352841][T15476] rest_init+0x23/0x2b0 [ 1057.352860][T15476] start_kernel+0x3f6/0x4e0 [ 1057.352873][T15476] x86_64_start_reservations+0x18/0x30 [ 1057.352888][T15476] x86_64_start_kernel+0x130/0x190 [ 1057.352902][T15476] common_startup_64+0x13e/0x148 [ 1057.352920][T15476] [ 1057.352920][T15476] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1057.352937][T15476] _raw_spin_lock_irqsave+0x3a/0x60 [ 1057.352949][T15476] try_to_wake_up+0xb7/0x1870 [ 1057.352969][T15476] __wake_up_common+0x135/0x1f0 [ 1057.352985][T15476] __wake_up+0x31/0x60 [ 1057.352997][T15476] tty_port_default_wakeup+0x47/0x60 [ 1057.353019][T15476] serial8250_tx_chars+0x68e/0x860 [ 1057.353032][T15476] serial8250_handle_irq+0x761/0xcb0 [ 1057.353045][T15476] serial8250_default_handle_irq+0x9e/0x270 [ 1057.353059][T15476] serial8250_interrupt+0xf8/0x1d0 [ 1057.353073][T15476] __handle_irq_event_percpu+0x236/0x920 [ 1057.353095][T15476] handle_irq_event+0xab/0x1e0 [ 1057.353105][T15476] handle_edge_irq+0x3ca/0x9e0 [ 1057.353125][T15476] __common_interrupt+0xd0/0x2f0 [ 1057.353138][T15476] common_interrupt+0xba/0xe0 [ 1057.353157][T15476] asm_common_interrupt+0x26/0x40 [ 1057.353170][T15476] pv_native_safe_halt+0xf/0x20 [ 1057.353184][T15476] default_idle+0x13/0x20 [ 1057.353201][T15476] default_idle_call+0x6c/0xb0 [ 1057.353219][T15476] do_idle+0x38d/0x500 [ 1057.353229][T15476] cpu_startup_entry+0x4f/0x60 [ 1057.353241][T15476] start_secondary+0x21d/0x2b0 [ 1057.353255][T15476] common_startup_64+0x13e/0x148 [ 1057.353272][T15476] [ 1057.353272][T15476] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1057.353289][T15476] _raw_spin_lock_irqsave+0x3a/0x60 [ 1057.353302][T15476] __wake_up+0x1c/0x60 [ 1057.353314][T15476] tty_port_default_wakeup+0x47/0x60 [ 1057.353334][T15476] serial8250_tx_chars+0x68e/0x860 [ 1057.353346][T15476] serial8250_handle_irq+0x761/0xcb0 [ 1057.353359][T15476] serial8250_default_handle_irq+0x9e/0x270 [ 1057.353372][T15476] serial8250_interrupt+0xf8/0x1d0 [ 1057.353387][T15476] __handle_irq_event_percpu+0x236/0x920 [ 1057.353408][T15476] handle_irq_event+0xab/0x1e0 [ 1057.353419][T15476] handle_edge_irq+0x3ca/0x9e0 [ 1057.353438][T15476] __common_interrupt+0xd0/0x2f0 [ 1057.353450][T15476] common_interrupt+0xba/0xe0 [ 1057.353468][T15476] asm_common_interrupt+0x26/0x40 [ 1057.353481][T15476] pv_native_safe_halt+0xf/0x20 [ 1057.353495][T15476] default_idle+0x13/0x20 [ 1057.353511][T15476] default_idle_call+0x6c/0xb0 [ 1057.353529][T15476] do_idle+0x38d/0x500 [ 1057.353539][T15476] cpu_startup_entry+0x4f/0x60 [ 1057.353557][T15476] start_secondary+0x21d/0x2b0 [ 1057.353571][T15476] common_startup_64+0x13e/0x148 [ 1057.353588][T15476] [ 1057.353588][T15476] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1057.353604][T15476] _raw_spin_lock_irqsave+0x3a/0x60 [ 1057.353617][T15476] serial8250_console_write+0x181/0x1890 [ 1057.353635][T15476] console_flush_all+0x801/0xc60 [ 1057.353656][T15476] console_unlock+0xd8/0x210 [ 1057.353675][T15476] vprintk_emit+0x3d7/0x680 [ 1057.353686][T15476] _printk+0xc7/0x100 [ 1057.353702][T15476] register_console+0xc2d/0x11b0 [ 1057.353714][T15476] univ8250_console_init+0x5f/0x90 [ 1057.353731][T15476] console_init+0x152/0x680 [ 1057.353745][T15476] start_kernel+0x29f/0x4e0 [ 1057.353758][T15476] x86_64_start_reservations+0x18/0x30 [ 1057.353772][T15476] x86_64_start_kernel+0x130/0x190 [ 1057.353785][T15476] common_startup_64+0x13e/0x148 [ 1057.353803][T15476] [ 1057.353803][T15476] -> #0 (console_owner){-.-.}-{0:0}: [ 1057.353819][T15476] __lock_acquire+0x126f/0x1c90 [ 1057.353836][T15476] lock_acquire+0x179/0x350 [ 1057.353851][T15476] console_lock_spinning_enable+0x72/0x80 [ 1057.353871][T15476] console_flush_all+0x7aa/0xc60 [ 1057.353891][T15476] console_unlock+0xd8/0x210 [ 1057.353911][T15476] vprintk_emit+0x3d7/0x680 [ 1057.353922][T15476] _printk+0xc7/0x100 [ 1057.353937][T15476] should_fail_ex+0x4e7/0x640 [ 1057.353952][T15476] strncpy_from_user+0x3b/0x2e0 [ 1057.353965][T15476] strncpy_from_user_nofault+0x7f/0x180 [ 1057.353983][T15476] bpf_probe_read_compat_str+0xe8/0x180 [ 1057.354004][T15476] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1057.354014][T15476] bpf_trace_run4+0x252/0x5b0 [ 1057.354034][T15476] __bpf_trace_sched_switch+0x145/0x190 [ 1057.354055][T15476] __schedule+0x183b/0x5de0 [ 1057.354068][T15476] preempt_schedule_irq+0x51/0x90 [ 1057.354081][T15476] irqentry_exit+0x36/0x90 [ 1057.354096][T15476] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1057.354109][T15476] __f_unlock_pos+0x4/0x20 [ 1057.354128][T15476] ksys_write+0x190/0x250 [ 1057.354144][T15476] do_syscall_64+0xcd/0xfa0 [ 1057.354159][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.354171][T15476] [ 1057.354171][T15476] other info that might help us debug this: [ 1057.354171][T15476] [ 1057.354176][T15476] Chain exists of: [ 1057.354176][T15476] console_owner --> &p->pi_lock --> &rq->__lock [ 1057.354176][T15476] [ 1057.354195][T15476] Possible unsafe locking scenario: [ 1057.354195][T15476] [ 1057.354199][T15476] CPU0 CPU1 [ 1057.354202][T15476] ---- ---- [ 1057.354206][T15476] lock(&rq->__lock); [ 1057.354214][T15476] lock(&p->pi_lock); [ 1057.354223][T15476] lock(&rq->__lock); [ 1057.354232][T15476] lock(console_owner); [ 1057.354241][T15476] [ 1057.354241][T15476] *** DEADLOCK *** [ 1057.354241][T15476] [ 1057.354244][T15476] 5 locks held by syz.0.2413/15476: [ 1057.354252][T15476] #0: ffff888034c8fb38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1057.354287][T15476] #1: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1057.354325][T15476] #2: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 1057.354362][T15476] #3: ffffffff8e3b1ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1057.354396][T15476] #4: ffffffff8e3b1b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1057.354433][T15476] [ 1057.354433][T15476] stack backtrace: [ 1057.354440][T15476] CPU: 0 UID: 0 PID: 15476 Comm: syz.0.2413 Not tainted syzkaller #0 PREEMPT(full) [ 1057.354456][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1057.354466][T15476] Call Trace: [ 1057.354470][T15476] [ 1057.354476][T15476] dump_stack_lvl+0x116/0x1f0 [ 1057.354493][T15476] print_circular_bug+0x275/0x350 [ 1057.354510][T15476] check_noncircular+0x14c/0x170 [ 1057.354528][T15476] __lock_acquire+0x126f/0x1c90 [ 1057.354548][T15476] lock_acquire+0x179/0x350 [ 1057.354565][T15476] ? console_lock_spinning_enable+0x61/0x80 [ 1057.354587][T15476] ? console_lock_spinning_enable+0x4a/0x80 [ 1057.354609][T15476] console_lock_spinning_enable+0x72/0x80 [ 1057.354636][T15476] ? console_lock_spinning_enable+0x61/0x80 [ 1057.354657][T15476] console_flush_all+0x7aa/0xc60 [ 1057.354680][T15476] ? __pfx_console_flush_all+0x10/0x10 [ 1057.354705][T15476] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1057.354720][T15476] console_unlock+0xd8/0x210 [ 1057.354741][T15476] ? __pfx_console_unlock+0x10/0x10 [ 1057.354761][T15476] ? do_raw_spin_unlock+0xe0/0x230 [ 1057.354782][T15476] ? _printk+0xc7/0x100 [ 1057.354798][T15476] ? __down_trylock_console_sem+0xb0/0x140 [ 1057.354818][T15476] vprintk_emit+0x3d7/0x680 [ 1057.354831][T15476] ? __pfx_vprintk_emit+0x10/0x10 [ 1057.354844][T15476] ? strncpy_from_user+0x1c8/0x2e0 [ 1057.354860][T15476] _printk+0xc7/0x100 [ 1057.354877][T15476] ? __pfx__printk+0x10/0x10 [ 1057.354895][T15476] ? __pfx____ratelimit+0x10/0x10 [ 1057.354911][T15476] should_fail_ex+0x4e7/0x640 [ 1057.354927][T15476] strncpy_from_user+0x3b/0x2e0 [ 1057.354943][T15476] strncpy_from_user_nofault+0x7f/0x180 [ 1057.354960][T15476] bpf_probe_read_compat_str+0xe8/0x180 [ 1057.354981][T15476] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1057.354992][T15476] bpf_trace_run4+0x252/0x5b0 [ 1057.355013][T15476] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1057.355036][T15476] ? plist_check_prev_next+0x12a/0x1a0 [ 1057.355057][T15476] ? kvm_sched_clock_read+0x11/0x20 [ 1057.355071][T15476] ? sched_clock+0x38/0x60 [ 1057.355086][T15476] __bpf_trace_sched_switch+0x145/0x190 [ 1057.355107][T15476] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1057.355129][T15476] ? __schedule+0x1861/0x5de0 [ 1057.355145][T15476] ? psi_task_switch+0x457/0xb10 [ 1057.355160][T15476] __schedule+0x183b/0x5de0 [ 1057.355174][T15476] ? find_held_lock+0x2b/0x80 [ 1057.355188][T15476] ? get_pid_task+0x106/0x250 [ 1057.355207][T15476] ? find_held_lock+0x2b/0x80 [ 1057.355219][T15476] ? __pfx___schedule+0x10/0x10 [ 1057.355236][T15476] ? mark_held_locks+0x49/0x80 [ 1057.355253][T15476] preempt_schedule_irq+0x51/0x90 [ 1057.355268][T15476] irqentry_exit+0x36/0x90 [ 1057.355283][T15476] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1057.355297][T15476] RIP: 0010:__f_unlock_pos+0x4/0x20 [ 1057.355317][T15476] Code: ff e9 fb fe ff ff e8 6b 48 e4 ff e9 15 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <53> 48 89 fb e8 d3 c0 7b ff 48 8d bb 90 00 00 00 5b e9 76 f9 25 09 [ 1057.355331][T15476] RSP: 0018:ffffc9000c387e78 EFLAGS: 00000293 [ 1057.355342][T15476] RAX: 0000000000000000 RBX: ffff888034c8fa43 RCX: ffffffff8237e00e [ 1057.355352][T15476] RDX: ffff88807b7c8000 RSI: ffffffff8237e018 RDI: ffff888034c8fa40 [ 1057.355361][T15476] RBP: ffff888034c8fa40 R08: 0000000000000007 R09: 0000000000000000 [ 1057.355370][T15476] R10: 0000000000000002 R11: 0000000000000001 R12: 1ffff92001870fd0 [ 1057.355379][T15476] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1057.355390][T15476] ? ksys_write+0x17e/0x250 [ 1057.355406][T15476] ? ksys_write+0x188/0x250 [ 1057.355424][T15476] ksys_write+0x190/0x250 [ 1057.355441][T15476] ? __pfx_ksys_write+0x10/0x10 [ 1057.355461][T15476] do_syscall_64+0xcd/0xfa0 [ 1057.355477][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.355490][T15476] RIP: 0033:0x7f2f1af8d97f [ 1057.355501][T15476] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1057.355514][T15476] RSP: 002b:00007f2f1bea6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1057.355526][T15476] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f2f1af8d97f [ 1057.355535][T15476] RDX: 0000000000000001 RSI: 00007f2f1bea6090 RDI: 0000000000000008 [ 1057.355543][T15476] RBP: 00007f2f1bea6090 R08: 0000000000000000 R09: 00007f2f1bea5df7 [ 1057.355552][T15476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1057.355562][T15476] R13: 00007f2f1b1e6218 R14: 00007f2f1b1e6180 R15: 00007ffe33f57178 [ 1057.355576][T15476] [ 1058.531595][T15476] CPU: 0 UID: 0 PID: 15476 Comm: syz.0.2413 Not tainted syzkaller #0 PREEMPT(full) [ 1058.531617][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1058.531626][T15476] Call Trace: [ 1058.531632][T15476] [ 1058.531637][T15476] dump_stack_lvl+0x116/0x1f0 [ 1058.531659][T15476] should_fail_ex+0x512/0x640 [ 1058.531679][T15476] strncpy_from_user+0x3b/0x2e0 [ 1058.531695][T15476] strncpy_from_user_nofault+0x7f/0x180 [ 1058.531714][T15476] bpf_probe_read_compat_str+0xe8/0x180 [ 1058.531737][T15476] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1058.531748][T15476] bpf_trace_run4+0x252/0x5b0 [ 1058.531770][T15476] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1058.531793][T15476] ? plist_check_prev_next+0x12a/0x1a0 [ 1058.531815][T15476] ? kvm_sched_clock_read+0x11/0x20 [ 1058.531830][T15476] ? sched_clock+0x38/0x60 [ 1058.531845][T15476] __bpf_trace_sched_switch+0x145/0x190 [ 1058.531868][T15476] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1058.531890][T15476] ? __schedule+0x1861/0x5de0 [ 1058.531907][T15476] ? psi_task_switch+0x457/0xb10 [ 1058.531923][T15476] __schedule+0x183b/0x5de0 [ 1058.531937][T15476] ? find_held_lock+0x2b/0x80 [ 1058.531951][T15476] ? get_pid_task+0x106/0x250 [ 1058.531969][T15476] ? find_held_lock+0x2b/0x80 [ 1058.531981][T15476] ? __pfx___schedule+0x10/0x10 [ 1058.531998][T15476] ? mark_held_locks+0x49/0x80 [ 1058.532015][T15476] preempt_schedule_irq+0x51/0x90 [ 1058.532031][T15476] irqentry_exit+0x36/0x90 [ 1058.532046][T15476] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1058.532061][T15476] RIP: 0010:__f_unlock_pos+0x4/0x20 [ 1058.532082][T15476] Code: ff e9 fb fe ff ff e8 6b 48 e4 ff e9 15 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <53> 48 89 fb e8 d3 c0 7b ff 48 8d bb 90 00 00 00 5b e9 76 f9 25 09 [ 1058.532096][T15476] RSP: 0018:ffffc9000c387e78 EFLAGS: 00000293 [ 1058.532110][T15476] RAX: 0000000000000000 RBX: ffff888034c8fa43 RCX: ffffffff8237e00e [ 1058.532119][T15476] RDX: ffff88807b7c8000 RSI: ffffffff8237e018 RDI: ffff888034c8fa40 [ 1058.532129][T15476] RBP: ffff888034c8fa40 R08: 0000000000000007 R09: 0000000000000000 [ 1058.532137][T15476] R10: 0000000000000002 R11: 0000000000000001 R12: 1ffff92001870fd0 [ 1058.532146][T15476] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1058.532157][T15476] ? ksys_write+0x17e/0x250 [ 1058.532174][T15476] ? ksys_write+0x188/0x250 [ 1058.532192][T15476] ksys_write+0x190/0x250 [ 1058.532209][T15476] ? __pfx_ksys_write+0x10/0x10 [ 1058.532229][T15476] do_syscall_64+0xcd/0xfa0 [ 1058.532246][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.532260][T15476] RIP: 0033:0x7f2f1af8d97f [ 1058.532271][T15476] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1058.532284][T15476] RSP: 002b:00007f2f1bea6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1058.532297][T15476] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f2f1af8d97f [ 1058.532306][T15476] RDX: 0000000000000001 RSI: 00007f2f1bea6090 RDI: 0000000000000008 [ 1058.532314][T15476] RBP: 00007f2f1bea6090 R08: 0000000000000000 R09: 00007f2f1bea5df7 [ 1058.532323][T15476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1058.532332][T15476] R13: 00007f2f1b1e6218 R14: 00007f2f1b1e6180 R15: 00007ffe33f57178 [ 1058.532346][T15476] [ 1058.855870][T11365] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1058.866178][T11365] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1058.875259][T11365] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1058.884745][T11365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.906077][T11365] usb 4-1: config 0 descriptor?? [ 1058.908256][ T10] usb 2-1: unable to read config index 0 descriptor/all [ 1058.918041][ T10] usb 2-1: can't read configurations, error -71 [ 1058.995787][ T978] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1059.256828][ T978] usb 5-1: config index 0 descriptor too short (expected 36, got 15) [ 1059.264962][ T978] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1059.275083][ T978] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1059.284173][ T978] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 1059.293216][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.303730][ T978] usb 5-1: config 0 descriptor?? [ 1059.307182][ T5866] usb 4-1: USB disconnect, device number 64 [ 1059.346432][T15466] vhci_hcd: connection reset by peer [ 1059.352009][ T1163] vhci_hcd: stop threads [ 1059.356296][ T1163] vhci_hcd: release socket [ 1059.360727][ T1163] vhci_hcd: disconnect device [ 1059.599652][T15478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1059.627546][T15478] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 1061.271771][ T5866] usb 5-1: USB disconnect, device number 65 [ 1062.395949][T11204] vhci_hcd: vhci_device speed not set