last executing test programs: 2m42.560625827s ago: executing program 2 (id=1679): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r1, &(0x7f00000050c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 2m41.833094426s ago: executing program 2 (id=1683): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2m41.779498408s ago: executing program 2 (id=1684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x0) 2m37.353933366s ago: executing program 2 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r4, &(0x7f000000cb00)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x5) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 2m36.39513849s ago: executing program 2 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="c479d176b9a25ccfe5f2a0dc21e540c30598731135c81943281f7e8c686b1e3b56fd2409ae", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x18) creat(&(0x7f0000000200)='./file0\x00', 0x1c4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) socket$inet(0x2, 0x4, 0x40) 2m35.444519553s ago: executing program 2 (id=1700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x19) ioctl$TCSETSW2(r2, 0x80047456, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, r6}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000540)}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x8008) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000040), 0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0) 2m19.810019009s ago: executing program 32 (id=1700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x19) ioctl$TCSETSW2(r2, 0x80047456, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, r6}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000540)}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x8008) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000040), 0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0) 14.742090092s ago: executing program 1 (id=2151): unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c006100ff010000000000758241d0e87b07bc00", @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x3) unshare(0x22020600) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) getpeername$llc(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000000)={0x1, 0x10}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 14.126847897s ago: executing program 1 (id=2153): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 13.381350324s ago: executing program 5 (id=2156): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) (fail_nth: 2) 12.565392011s ago: executing program 5 (id=2159): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402312073f0000000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5509, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) (fail_nth: 2) 11.961761425s ago: executing program 3 (id=2161): r0 = socket$phonet(0x23, 0x2, 0x1) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000400)={0xf, r1, 0x20, {0xcb1, 0x2}, 0xc}, 0x1) io_setup(0x3, &(0x7f0000000180)=0x0) mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$nl_route_sched(r1, 0x0, 0x1) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0xbb6e9fe6aa012c38, 0xffffffffffffffff, 0x85750000) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write(r4, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0xda4, &(0x7f0000000440)={0x0, 0x97e8, 0x20000, 0xfffffffe, 0xad}, &(0x7f0000000140), &(0x7f0000000380)) io_submit(r2, 0x0, 0x0) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x2, 0xd5, 0x57}, 0x10) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000340)={0xd0, 0x100, 0x100d0ff, 0x7}) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x22) syz_emit_vhci(0x0, 0x7) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c80000cf23e81988e568b2b7300af66c2c7ba860f885f248587da15eefa71b9aff40967a8bd7f176ec74455a6717b3de4d78c6e45a0e34324801"], 0x4) (async) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0x1, 0xffff, 0xa, 0x89}) 11.508210484s ago: executing program 1 (id=2164): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000010cc0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000043d8a0870272091776c010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="e97d6334907c09b637540d1194d50ff18ac7bb067911bc4bf11b6d0b656a1f402ea4f72e26a8063a7d2543fc65", @ANYRES32=r2, @ANYRES64=r0], 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$inet(r4, 0x0, 0xfeb2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11.485059011s ago: executing program 3 (id=2165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = userfaultfd(0x80001) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], [0x10000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x5], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}, {0x1}, {}, {0xfffffff7}], '\x00', 0x1000}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010017b875d6e5354af12cae95670fe92bed4e96888312ade4d2820ce2a38e5dbe821582ec55e97155a9ba52856dfdd647c31c2eed682ecfad78fb297d21202635a59968c6d4135a5676bc2dacb844cd2a02bcf9ff0cbfe68b4fd849325c3c3911ca1bcaabb7b608170e19a377f784c31a34dd7fa8eff20a85f999cca95b93a81aaf1c77d632fcd56be42138f1fcb11dcda035cf138543c234bb0b71"], 0x18}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf25a5000000080001007063690011000200303030303a30303a31302e30faffffff07008a00e1c9d9217bd1518cb762ee7c87ac091d8e67b95b404238359112eb3aba6e4e846b8764354fda9f63c02659259dd03e151169098a28f962ce03d8be4985d2", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40005) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="003000000000000014001a80100005800c00"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 10.661294929s ago: executing program 3 (id=2167): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003880)={0x2020}, 0x2020) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000300)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 10.071267725s ago: executing program 5 (id=2168): mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x2022, &(0x7f0000000500)={[{@stats}]}) r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000100000224e0000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt(r1, 0x1, 0xe, 0x0, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000400)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) sched_getscheduler(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000ef55bfe175c32fdb0a00190001090000000000000000021800000002fd080000000008000100ac14140008000500ac1e0101100016800c00010000000000000000040600150001000000"], 0x44}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000003c00)='task\x00') fstat(r6, &(0x7f0000004240)) syz_io_uring_setup(0x4d3, &(0x7f00000002c0)={0x0, 0x84ed, 0x20, 0x2, 0x3bb}, &(0x7f0000000040), &(0x7f0000000100)) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r8, 0x607, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x12}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000812) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x8, 0x0, {0x0, 0x101}, {}, {}, {}, 0x0, 0x40, 0x0, 0x2, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 9.386350106s ago: executing program 3 (id=2169): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x1c) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.865114344s ago: executing program 1 (id=2174): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.69715076s ago: executing program 4 (id=2175): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x1, {0x2, @pix={0x204, 0x8, 0x71070474, 0x3, 0x20829, 0x4, 0x4, 0x6, 0x1, 0x0, 0x1, 0x3}}}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x2c004) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x80, 0x2, 0x4, 0x70000, 0x9, {}, {0x3, 0x1, 0x7f, 0x8, 0x8, 0x12, "63622ffa"}, 0x5, 0x1, {&(0x7f0000000240)=[{0x0, 0x81, {0x4}, 0x4}, {0x9160, 0x200, {0xf}, 0x8}]}, 0xfffffffb}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) fchmod(r0, 0x1b8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/128) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x20000000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e20, 0x5, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x24008810) 6.882179712s ago: executing program 3 (id=2177): r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x24ed, &(0x7f0000000340)={0x0, 0xfec9, 0x4000, 0x3, 0x125}, &(0x7f00000001c0), &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010402a972889831fff"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xcc7e, 0x0, 0x3, 0x80000002}]}) uname(&(0x7f0000000280)=""/33) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x202) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x40305828, &(0x7f0000000180)={0x1fd, 0x0, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001300"], 0x48) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) 6.625196979s ago: executing program 5 (id=2178): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x301) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x37084000) timer_gettime(0x0, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 5.580363437s ago: executing program 5 (id=2179): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003880)={0x2020}, 0x2020) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000300)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 5.042510608s ago: executing program 0 (id=2180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}], 0xdeadbeef, 0x8, 0x1}) 4.808019688s ago: executing program 1 (id=2181): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffe, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x42000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 4.771979781s ago: executing program 0 (id=2182): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x40303) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x81, 0x44}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x7031, 0x8a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) (async) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800, &(0x7f0000000240)={[{@verity_require, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800, &(0x7f0000000240)={[{@verity_require, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) mmap(&(0x7f0000b1d000/0x13000)=nil, 0x13000, 0x100000a, 0x10, r2, 0xb3d2d000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(&(0x7f00000002c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@verity_on, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xad58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) 3.573442085s ago: executing program 4 (id=2183): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000001c40)={0x2, 0xff, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4000, 0x4}]}]}, 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x400000, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0xe00, 0xe2df, 0xaa14, 0x1, 0x4, 0x9, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.462377934s ago: executing program 3 (id=2184): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000010cc0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000043d8a0870272091776c010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="e97d6334907c09b637540d1194d50ff18ac7bb067911bc4bf11b6d0b656a1f402ea4f72e26a8063a7d2543fc65fcc89a3728dcc9e5c78998fadb706a1e97f96a96e27a", @ANYRES32=r2, @ANYRES64=r0], 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$inet(r4, 0x0, 0xfeb2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.936498329s ago: executing program 0 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000340), 0xffffff64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 2.823971017s ago: executing program 4 (id=2186): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xac}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0xb001, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007ed0000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4a22, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.873559235s ago: executing program 4 (id=2187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x23a28000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="c479d176b9a25ccfe5f2a0dc21e540c30598731135c81943281f7e8c686b1e3b56fd2409ae", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x18) creat(&(0x7f0000000200)='./file0\x00', 0x1c4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffa5) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x80, 0x0, 0xffffffffffffff3d, &(0x7f0000000000)=[@mark={{0x0, 0x1, 0x24, 0x9}}], 0x18}, 0x810) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) socket$inet(0x2, 0x4, 0x40) 1.56620258s ago: executing program 5 (id=2188): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800300600fc000000000000000000000000000001fe8000000000000000000000000000aa00024001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r0], 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgget(0x0, 0x240) msgget(0x2, 0x400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x34d1d0f8, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x6576, 0x2000000f}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x3, 0x6576, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r4}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x6, 0x1, 0x0, "eef38fa706178749cb4dfd93e33c9b6b7bdc52e35ed734fc2ad17dcb4f1891e2", 0x43353039}) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_setup(0x10d4, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffc, 0xd3, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.469327183s ago: executing program 0 (id=2189): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x80000000009}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x4, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 1.355631654s ago: executing program 1 (id=2190): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x0, 0x2, 0x4000, 0x6, 0x21000005, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x8}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x13b) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 218.538315ms ago: executing program 4 (id=2191): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000000000007910a800000000009d4a00000000f80000950000000000000084669316ea18bcd02d09bef2243eefbee6fb3c11230ecdf2a8007aeb12f91f59d587de37962462c88c7702bd9ae26bf0eddadf6f71c09f5a5f8c76809605356b92a91ddb2862a15e241327f50ab8bcfbd10767c8ac1f5c946b040c7ece30b3bec250eec65c9788d834e8f101a7ce1ccc0bbc513be62879c0f9560a7578d4e1306de4d95f0aced6afd15cd88615b3c107d8"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0xb3, &(0x7f0000000300)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xe, 0x2, 0xfffffffe}, 0x10}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rename(0x0, 0x0) tkill(0x0, 0x16) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) r6 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x9) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0xc048aeca, &(0x7f0000000300)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000006c0)='./bus\x00', 0x192) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 189.600654ms ago: executing program 0 (id=2192): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.282068ms ago: executing program 4 (id=2193): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000000e0601020000000000000000010000010900020073797a3100000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) r3 = syz_usbip_server_init(0x5) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x7, 0x81, 0x7fffffff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0xa0200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f0000000100)={0x30, r11, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) ioctl$TCFLSH(r6, 0x80047456, 0xfffffffffffeffff) 0s ago: executing program 0 (id=2194): socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5e3b) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setpriority(0x0, r0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5601, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff000000007110a900000000009500000000000000657e100e84d96d8f3c1f796585f636514969f6b6f25c190359648eab15b4e3a5f2bc6e790b5fb16e7d7cec22f77f443259a508b9ac82acda8d32335da030ad67efe250518e19132fc6eb2459c71c74620c3c29454ea1f177c9674811316987c42c3053915f3faf4c59669fb267dea7c6893c70207a8aa11ad645ab4b6966614d0d7c82775435f6e8567b5330e0f4813c3c85ef6b437523bcd41cc8b1388542a0b22b18a0a5bbf07e355a9e8e7165c89b8706a99f92d7ad1c5d316da4df7be376828a93ead0dc5c0cbf12515e5a7fc43fc9aff1eed50dd74127e3cfa2e48b8bb193a5f37b5edba64c4d32eaf24809f7af36"], &(0x7f0000000480)='GPL\x00'}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x4000) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1f) kernel console output (not intermixed with test programs): h="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 455.664113][ T6397] Dev nbd0: unable to read RDB block 0 [ 455.689141][ T6397] nbd0: unable to read partition table [ 455.734148][T11445] lo speed is unknown, defaulting to 1000 [ 456.005560][T11448] nbd1: detected capacity change from 0 to 63 [ 456.133778][T11444] block nbd1: NBD_DISCONNECT [ 456.139487][T11444] block nbd1: Disconnected due to user request. [ 456.146348][T11444] block nbd1: shutting down sockets [ 456.327024][ T6398] ldm_validate_partition_table(): Disk read failed. [ 456.386215][ T6398] Dev nbd1: unable to read RDB block 0 [ 456.431950][ T6398] nbd1: unable to read partition table [ 456.454635][T11451] bond3: entered promiscuous mode [ 456.459786][T11451] bond3: entered allmulticast mode [ 456.474458][ T6398] ldm_validate_partition_table(): Disk read failed. [ 456.518525][T11451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.538465][ T6398] Dev nbd1: unable to read RDB block 0 [ 456.567472][T11441] lo speed is unknown, defaulting to 1000 [ 456.589236][ T6398] nbd1: unable to read partition table [ 456.817040][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 457.701500][ T5860] Bluetooth: hci5: command tx timeout [ 458.762405][T11441] chnl_net:caif_netlink_parms(): no params data found [ 459.036052][T11485] netlink: 'syz.3.1777': attribute type 5 has an invalid length. [ 459.577442][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 459.792463][ T5860] Bluetooth: hci5: command tx timeout [ 459.965453][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.972789][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.980009][T11441] bridge_slave_0: entered allmulticast mode [ 459.987361][T11441] bridge_slave_0: entered promiscuous mode [ 459.997466][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.005577][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.020424][T11441] bridge_slave_1: entered allmulticast mode [ 460.029462][T11441] bridge_slave_1: entered promiscuous mode [ 460.089004][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.193736][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.986832][T11441] team0: Port device team_slave_0 added [ 461.006632][T11441] team0: Port device team_slave_1 added [ 461.164370][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.180597][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.225714][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.248715][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.257935][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.291805][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.631982][T11441] hsr_slave_0: entered promiscuous mode [ 461.638155][T11441] hsr_slave_1: entered promiscuous mode [ 461.664013][T11441] debugfs: 'hsr0' already exists in 'hsr' [ 461.677223][T11441] Cannot create hsr debugfs directory [ 461.705414][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 461.862217][ T5860] Bluetooth: hci5: command tx timeout [ 462.703138][T11535] syzkaller0: entered promiscuous mode [ 462.718909][T11535] syzkaller0: entered allmulticast mode [ 462.845109][T11529] syzkaller0: entered promiscuous mode [ 462.850608][T11529] syzkaller0: entered allmulticast mode [ 463.752348][ T36] Bluetooth: Error in BCSP hdr checksum [ 463.941640][ T5858] Bluetooth: hci5: command tx timeout [ 464.565733][T11441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.588153][T11441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.610252][T11441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.669127][T11441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.996145][T11569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.005665][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.077113][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.110848][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.118034][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.206155][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.213314][T10708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.240020][T11569] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 465.541815][ T5858] Bluetooth: hci6: command 0x1003 tx timeout [ 465.549728][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 466.977377][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.379029][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 468.715703][ T1095] block nbd2: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 60 seconds [ 468.726370][ T1095] block nbd2: Possible stuck request ffff888026e25240: control (read@1024,1024B). Runtime 60 seconds [ 468.737914][ T1095] block nbd2: Possible stuck request ffff888026e25400: control (read@2048,1024B). Runtime 60 seconds [ 468.748839][ T1095] block nbd2: Possible stuck request ffff888026e255c0: control (read@3072,1024B). Runtime 60 seconds [ 468.761043][T10708] Bluetooth: Error in BCSP hdr checksum [ 468.995916][T11441] veth0_vlan: entered promiscuous mode [ 469.043407][T11441] veth1_vlan: entered promiscuous mode [ 469.096064][T11441] veth0_macvtap: entered promiscuous mode [ 469.113571][T11441] veth1_macvtap: entered promiscuous mode [ 469.133200][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.154713][T11621] tipc: Enabled bearer , priority 0 [ 469.166550][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.180249][T11621] syzkaller0: entered promiscuous mode [ 469.186220][T11621] syzkaller0: entered allmulticast mode [ 469.202753][ T1079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.213894][ T1079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.230097][T11621] tipc: Resetting bearer [ 469.237509][ T1079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.258758][ T1079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.269117][T11620] tipc: Resetting bearer [ 469.294793][T11620] tipc: Disabling bearer [ 469.311560][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 469.405274][T10708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.424460][T10708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.474697][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 469.534092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 469.600009][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 469.678992][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.437502][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.448004][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 470.467788][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.501242][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.536812][ T9] usb 1-1: config 0 descriptor?? [ 470.548101][T11619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.562476][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.586289][ T30] audit: type=1400 audit(1757417694.111:821): avc: denied { mount } for pid=11441 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 470.613241][ T30] audit: type=1400 audit(1757417694.111:822): avc: denied { mounton } for pid=11441 comm="syz-executor" path="/root/syzkaller.oeUXtX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 470.691265][ T30] audit: type=1400 audit(1757417694.181:823): avc: denied { mount } for pid=11441 comm="syz-executor" name="/" dev="gadgetfs" ino=7544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 470.711609][T11634] syzkaller0: entered promiscuous mode [ 470.761208][T11634] syzkaller0: entered allmulticast mode [ 471.060368][ T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 471.075318][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 471.659161][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 471.998453][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.032817][T11644] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.039964][T11644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.464242][ T5966] usb 1-1: USB disconnect, device number 9 [ 474.022571][T11674] lo speed is unknown, defaulting to 1000 [ 474.710873][T11678] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 475.692775][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 475.756632][ T5858] block nbd0: Receive control failed (result -32) [ 475.941988][T11676] nbd0: detected capacity change from 0 to 63 [ 475.950060][T11677] block nbd0: NBD_DISCONNECT [ 475.954957][T11677] block nbd0: Send disconnect failed -32 [ 475.960780][T11677] block nbd0: shutting down sockets [ 476.133281][ T6346] blk_print_req_error: 280 callbacks suppressed [ 476.133298][ T6346] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 476.150571][ T6346] buffer_io_error: 286 callbacks suppressed [ 476.150580][ T6346] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.164674][ T6346] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.172734][ T6346] Buffer I/O error on dev nbd0, logical block 2, async page read [ 476.180534][ T6346] Buffer I/O error on dev nbd0, logical block 3, async page read [ 476.632860][ T6398] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.651045][ T6398] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.658996][ T6398] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.671581][ T6398] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.679477][ T6398] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.688637][ T6398] Buffer I/O error on dev nbd0, logical block 2, async page read [ 476.704312][ T6398] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.717694][ T6398] Buffer I/O error on dev nbd0, logical block 3, async page read [ 476.736731][ T6398] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.763804][ T6398] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.772059][ T6398] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.781467][ T6398] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.789342][ T6398] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.799587][ T6398] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.810923][ T6398] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.825636][ T6398] ldm_validate_partition_table(): Disk read failed. [ 476.864249][ T6398] Dev nbd0: unable to read RDB block 0 [ 477.006329][ T6398] nbd0: unable to read partition table [ 477.076622][ T6398] ldm_validate_partition_table(): Disk read failed. [ 477.142152][ T6398] Dev nbd0: unable to read RDB block 0 [ 477.160687][ T6398] nbd0: unable to read partition table [ 477.226186][T11708] tipc: Started in network mode [ 477.237847][T11708] tipc: Node identity fe99124ef366, cluster identity 4711 [ 477.262544][T11708] tipc: Enabled bearer , priority 0 [ 477.289750][T11708] syzkaller0: entered promiscuous mode [ 477.295648][T11708] syzkaller0: entered allmulticast mode [ 477.307710][T11708] tipc: Resetting bearer [ 477.361650][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 477.415744][T11707] tipc: Resetting bearer [ 477.446573][T11707] tipc: Disabling bearer [ 477.704776][ T5858] Bluetooth: hci6: command 0x1003 tx timeout [ 477.711258][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 477.973821][ T5916] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 478.033224][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 478.072556][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 478.098180][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.132493][ T5916] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.149563][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.300246][ T5916] usb 4-1: config 0 descriptor?? [ 478.317702][T11710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 479.027444][ T5916] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 479.093510][ T30] audit: type=1326 audit(1757417702.621:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 479.188289][ T5916] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 479.225916][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 479.255532][ T30] audit: type=1326 audit(1757417702.641:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 479.326238][T11710] veth0_macvtap: left promiscuous mode [ 479.403412][ T30] audit: type=1326 audit(1757417702.651:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 479.438845][ T30] audit: type=1326 audit(1757417702.651:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 479.472198][ T30] audit: type=1326 audit(1757417702.651:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 479.480010][T11746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.506735][ T30] audit: type=1326 audit(1757417702.651:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 480.054432][ T30] audit: type=1326 audit(1757417702.651:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 480.119328][ T5966] usb 4-1: USB disconnect, device number 9 [ 480.155042][ T30] audit: type=1326 audit(1757417702.661:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 480.287638][ T30] audit: type=1326 audit(1757417702.671:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 480.418779][ T30] audit: type=1326 audit(1757417702.671:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 480.460603][T11753] syzkaller0: entered promiscuous mode [ 480.467071][T11753] syzkaller0: entered allmulticast mode [ 486.030898][T11814] netlink: 'syz.4.1858': attribute type 5 has an invalid length. [ 486.561414][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 486.742184][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 486.845799][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 487.226178][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 487.315022][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.355658][ T9] usb 4-1: Product: syz [ 487.363291][ T9] usb 4-1: Manufacturer: syz [ 487.368025][ T9] usb 4-1: SerialNumber: syz [ 487.384483][ T9] usb 4-1: config 0 descriptor?? [ 487.405178][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 488.056391][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 488.065912][ T9] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 490.230563][T11862] lo speed is unknown, defaulting to 1000 [ 490.521757][T11864] nbd1: detected capacity change from 0 to 63 [ 490.530206][T11865] block nbd1: NBD_DISCONNECT [ 490.535093][T11865] block nbd1: Disconnected due to user request. [ 490.541755][T11865] block nbd1: shutting down sockets [ 490.558045][ T6397] blk_print_req_error: 135 callbacks suppressed [ 490.558067][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.587705][ T5916] usb 4-1: USB disconnect, device number 10 [ 490.737637][ T6397] buffer_io_error: 138 callbacks suppressed [ 490.737659][ T6397] Buffer I/O error on dev nbd1, logical block 0, async page read [ 491.411402][ T6537] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 491.420524][ T6537] Buffer I/O error on dev nbd1, logical block 1, async page read [ 491.429618][ T6537] Buffer I/O error on dev nbd1, logical block 2, async page read [ 491.437505][ T6537] Buffer I/O error on dev nbd1, logical block 3, async page read [ 491.445589][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.454824][ T6397] Buffer I/O error on dev nbd1, logical block 0, async page read [ 491.461158][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 491.463281][ T6397] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.481546][ T6397] Buffer I/O error on dev nbd1, logical block 1, async page read [ 491.491495][ T6397] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.493568][T11862] bond4: entered promiscuous mode [ 491.501234][ T6397] Buffer I/O error on dev nbd1, logical block 2, async page read [ 491.517829][ T6397] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.527045][ T6397] Buffer I/O error on dev nbd1, logical block 3, async page read [ 491.535001][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.545349][ T6397] Buffer I/O error on dev nbd1, logical block 0, async page read [ 491.553562][ T6397] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.562711][ T6397] Buffer I/O error on dev nbd1, logical block 1, async page read [ 491.581341][ T6397] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.593049][T11862] bond4: entered allmulticast mode [ 491.601671][T11862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.661139][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 492.535885][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 492.901359][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.909402][ T9] usb 1-1: Product: syz [ 492.914302][ T9] usb 1-1: Manufacturer: syz [ 492.918903][ T9] usb 1-1: SerialNumber: syz [ 492.936425][ T9] usb 1-1: config 0 descriptor?? [ 492.944983][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 492.954975][ T6397] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.966436][ T6397] ldm_validate_partition_table(): Disk read failed. [ 492.974396][ T6397] Dev nbd1: unable to read RDB block 0 [ 492.983944][ T6397] nbd1: unable to read partition table [ 493.015587][ T6397] ldm_validate_partition_table(): Disk read failed. [ 493.020073][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 493.024081][ T6397] Dev nbd1: unable to read RDB block 0 [ 493.038589][ T6397] nbd1: unable to read partition table [ 493.546735][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 493.919536][ T9] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 494.442825][ T9] usb 1-1: USB disconnect, device number 10 [ 494.966817][T11896] tipc: Enabled bearer , priority 0 [ 495.003196][T11896] syzkaller0: entered promiscuous mode [ 495.008692][T11896] syzkaller0: entered allmulticast mode [ 496.081203][ T24] tipc: Node number set to 234820174 [ 496.921851][T11895] tipc: Resetting bearer [ 497.533413][T11895] tipc: Disabling bearer [ 499.024206][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 499.205733][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 499.215964][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 499.227691][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 500.009632][ T6537] block nbd2: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 90 seconds [ 500.020494][ T6537] block nbd2: Possible stuck request ffff888026e25240: control (read@1024,1024B). Runtime 90 seconds [ 500.032296][ T6537] block nbd2: Possible stuck request ffff888026e25400: control (read@2048,1024B). Runtime 90 seconds [ 500.046195][ T6537] block nbd2: Possible stuck request ffff888026e255c0: control (read@3072,1024B). Runtime 90 seconds [ 500.057244][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 500.291148][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 500.303978][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 500.317702][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.327199][ T24] usb 2-1: Product: syz [ 500.331852][ T24] usb 2-1: Manufacturer: syz [ 500.339460][ T24] usb 2-1: SerialNumber: syz [ 500.356393][ T24] usb 2-1: config 0 descriptor?? [ 500.470934][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 500.618644][T11946] netlink: 'syz.3.1892': attribute type 5 has an invalid length. [ 501.185792][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.210745][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.192070][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 502.499685][ T24] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 502.528626][ T24] usb 2-1: USB disconnect, device number 9 [ 503.313972][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 503.472377][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 503.587225][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 503.608452][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 503.619435][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 504.779084][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 504.815442][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 504.823031][T11983] netlink: 'syz.3.1903': attribute type 5 has an invalid length. [ 504.883121][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 504.923760][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.956251][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.985607][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.998195][ T9] usb 1-1: config 0 descriptor?? [ 505.010878][T11969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 505.461448][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 505.557175][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 505.577036][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 505.601152][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 505.633134][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 505.767104][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 505.898681][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 505.920416][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 505.975630][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.496874][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 506.548846][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 506.561278][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 506.572568][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.585793][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.594954][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.611694][ T24] usb 2-1: config 0 descriptor?? [ 506.619540][T11989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 506.700132][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.737801][T12000] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.744972][T12000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.915495][T11958] usb 1-1: USB disconnect, device number 11 [ 507.074803][ T24] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 507.106535][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 507.136131][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 507.179868][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 507.493305][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 507.697001][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.731901][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.739025][T12015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.782908][ T5929] usb 2-1: USB disconnect, device number 10 [ 508.834339][T12032] netlink: 'syz.3.1915': attribute type 5 has an invalid length. [ 512.979810][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 512.979830][ T30] audit: type=1326 audit(1757417736.451:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.120235][ T30] audit: type=1326 audit(1757417736.451:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.326975][ T30] audit: type=1326 audit(1757417736.451:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.420119][ T30] audit: type=1326 audit(1757417736.451:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.444802][ T30] audit: type=1326 audit(1757417736.451:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.468537][ T30] audit: type=1326 audit(1757417736.451:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.605335][ T5967] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 513.653396][ T30] audit: type=1326 audit(1757417736.451:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.717648][ T30] audit: type=1326 audit(1757417736.451:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 513.837710][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 513.869575][ T5967] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 513.873537][ T30] audit: type=1326 audit(1757417736.451:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 514.227450][ T30] audit: type=1326 audit(1757417736.461:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 514.261223][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.336346][ T5967] usb 4-1: Product: syz [ 514.340562][ T5967] usb 4-1: Manufacturer: syz [ 514.391240][ T5967] usb 4-1: SerialNumber: syz [ 514.424120][ T5967] usb 4-1: config 0 descriptor?? [ 514.558454][ T5967] gspca_main: sq905-2.14.0 probing 2770:9120 [ 515.101201][ T5967] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 515.108596][ T5967] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 515.406906][ T5860] Bluetooth: hci6: command 0x1003 tx timeout [ 515.414352][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 515.937729][ T6460] Bluetooth: hci6: Frame reassembly failed (-84) [ 516.031524][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 516.211396][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 516.274661][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 516.289682][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.322875][ T9] usb 4-1: USB disconnect, device number 11 [ 516.346301][ T24] usb 5-1: config 0 descriptor?? [ 517.306156][T12108] tipc: Enabled bearer , priority 0 [ 517.942164][ T5860] Bluetooth: hci6: command 0x1003 tx timeout [ 517.949518][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 518.087472][T12118] tipc: Resetting bearer [ 518.144033][T12116] lo speed is unknown, defaulting to 1000 [ 518.186068][T12107] tipc: Disabling bearer [ 518.288741][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 518.321123][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 518.333430][ T24] usb 5-1: USB disconnect, device number 8 [ 518.461535][ T5929] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 518.835185][ T5967] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 518.842804][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 518.860302][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 518.876038][ T5929] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 518.905315][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.920433][ T5929] usb 6-1: Product: syz [ 518.928253][ T5929] usb 6-1: Manufacturer: syz [ 518.933224][ T5929] usb 6-1: SerialNumber: syz [ 518.957158][ T5929] usb 6-1: config 0 descriptor?? [ 519.004674][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 519.030407][ T5967] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 519.068850][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.078174][ T5967] usb 5-1: Product: syz [ 519.085419][ T5967] usb 5-1: Manufacturer: syz [ 519.090214][ T5967] usb 5-1: SerialNumber: syz [ 519.157450][ T5967] usb 5-1: config 0 descriptor?? [ 519.173318][ T5967] gspca_main: sq905-2.14.0 probing 2770:9120 [ 519.190522][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.212565][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.331345][T12139] lo speed is unknown, defaulting to 1000 [ 519.496559][T12140] nbd1: detected capacity change from 0 to 63 [ 519.506874][T12143] block nbd1: NBD_DISCONNECT [ 519.513108][T12143] block nbd1: Disconnected due to user request. [ 519.519653][T12143] block nbd1: shutting down sockets [ 519.717084][ T6537] blk_print_req_error: 136 callbacks suppressed [ 519.717100][ T6537] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 519.746104][ T6537] buffer_io_error: 138 callbacks suppressed [ 519.746141][ T6537] Buffer I/O error on dev nbd1, logical block 0, async page read [ 519.764783][ T6537] Buffer I/O error on dev nbd1, logical block 1, async page read [ 519.774786][ T6537] Buffer I/O error on dev nbd1, logical block 2, async page read [ 519.784218][ T6537] Buffer I/O error on dev nbd1, logical block 3, async page read [ 519.809641][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 519.925391][ T6397] Buffer I/O error on dev nbd1, logical block 0, async page read [ 520.085836][ T6397] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.097221][T12140] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 520.123922][ T6397] Buffer I/O error on dev nbd1, logical block 1, async page read [ 520.124357][T12141] syzkaller0: entered promiscuous mode [ 520.132929][ T6397] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.168035][ T6397] Buffer I/O error on dev nbd1, logical block 2, async page read [ 520.170468][T12141] syzkaller0: entered allmulticast mode [ 520.176810][ T6397] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.192880][ T6397] Buffer I/O error on dev nbd1, logical block 3, async page read [ 520.194580][ T5929] usb 6-1: USB disconnect, device number 2 [ 520.201510][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.220026][ T6397] Buffer I/O error on dev nbd1, logical block 0, async page read [ 520.234175][ T6397] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.246166][ T5967] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 520.253568][ T5967] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 520.261472][ T6397] Buffer I/O error on dev nbd1, logical block 1, async page read [ 520.269248][ T6397] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.322273][ T6397] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.344502][ T5967] usb 5-1: USB disconnect, device number 9 [ 520.352076][ T6397] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.399292][ T6397] ldm_validate_partition_table(): Disk read failed. [ 520.429736][ T6397] Dev nbd1: unable to read RDB block 0 [ 520.452933][T12154] FAULT_INJECTION: forcing a failure. [ 520.452933][T12154] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 520.454011][ T6397] nbd1: unable to read partition table [ 520.477614][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.5.1949 Not tainted syzkaller #0 PREEMPT(full) [ 520.477638][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.477647][T12154] Call Trace: [ 520.477652][T12154] [ 520.477657][T12154] dump_stack_lvl+0x16c/0x1f0 [ 520.477683][T12154] should_fail_ex+0x512/0x640 [ 520.477708][T12154] _copy_from_user+0x2e/0xd0 [ 520.477732][T12154] io_register_rsrc+0xcd/0x250 [ 520.477756][T12154] ? __pfx_io_register_rsrc+0x10/0x10 [ 520.477781][T12154] ? __pfx___mutex_trylock_common+0x10/0x10 [ 520.477809][T12154] __io_uring_register+0x168d/0x2440 [ 520.477830][T12154] ? trace_contention_end+0xdd/0x130 [ 520.477846][T12154] ? __pfx___io_uring_register+0x10/0x10 [ 520.477870][T12154] ? __pfx___mutex_lock+0x10/0x10 [ 520.477897][T12154] ? __fget_files+0x20e/0x3c0 [ 520.477921][T12154] __x64_sys_io_uring_register+0x169/0x280 [ 520.477945][T12154] do_syscall_64+0xcd/0x4c0 [ 520.477970][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.477987][T12154] RIP: 0033:0x7f2d2558ebe9 [ 520.477999][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.478014][T12154] RSP: 002b:00007f2d26481038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 520.478031][T12154] RAX: ffffffffffffffda RBX: 00007f2d257c5fa0 RCX: 00007f2d2558ebe9 [ 520.478042][T12154] RDX: 0000200000000580 RSI: 000000000000000f RDI: 0000000000000003 [ 520.478052][T12154] RBP: 00007f2d26481090 R08: 0000000000000000 R09: 0000000000000000 [ 520.478062][T12154] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 520.478072][T12154] R13: 00007f2d257c6038 R14: 00007f2d257c5fa0 R15: 00007ffe32f33ef8 [ 520.478095][T12154] [ 520.489389][ T6082] udevd[6082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.784919][ T6397] ldm_validate_partition_table(): Disk read failed. [ 520.798829][ T6397] Dev nbd1: unable to read RDB block 0 [ 520.813061][ T6397] nbd1: unable to read partition table [ 521.346762][T12156] lo speed is unknown, defaulting to 1000 [ 521.961291][ T5967] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 522.619122][T12181] FAULT_INJECTION: forcing a failure. [ 522.619122][T12181] name failslab, interval 1, probability 0, space 0, times 0 [ 522.681738][T12181] CPU: 0 UID: 0 PID: 12181 Comm: syz.0.1959 Not tainted syzkaller #0 PREEMPT(full) [ 522.681756][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.681763][T12181] Call Trace: [ 522.681767][T12181] [ 522.681771][T12181] dump_stack_lvl+0x16c/0x1f0 [ 522.681789][T12181] should_fail_ex+0x512/0x640 [ 522.681803][T12181] ? fs_reclaim_acquire+0xae/0x150 [ 522.681819][T12181] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 522.681835][T12181] should_failslab+0xc2/0x120 [ 522.681847][T12181] __kmalloc_noprof+0xd2/0x510 [ 522.681861][T12181] tomoyo_realpath_from_path+0xc2/0x6e0 [ 522.681878][T12181] ? tomoyo_profile+0x47/0x60 [ 522.681895][T12181] tomoyo_path_number_perm+0x245/0x580 [ 522.681908][T12181] ? tomoyo_path_number_perm+0x237/0x580 [ 522.681922][T12181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 522.681938][T12181] ? find_held_lock+0x2b/0x80 [ 522.681979][T12181] ? find_held_lock+0x2b/0x80 [ 522.681992][T12181] ? hook_file_ioctl_common+0x145/0x410 [ 522.682006][T12181] ? __fget_files+0x20e/0x3c0 [ 522.682020][T12181] security_file_ioctl+0x9b/0x240 [ 522.682037][T12181] __x64_sys_ioctl+0xb7/0x210 [ 522.682054][T12181] do_syscall_64+0xcd/0x4c0 [ 522.682068][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.682079][T12181] RIP: 0033:0x7fb7dbb8ebe9 [ 522.682088][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.682099][T12181] RSP: 002b:00007fb7dc9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.682109][T12181] RAX: ffffffffffffffda RBX: 00007fb7dbdc5fa0 RCX: 00007fb7dbb8ebe9 [ 522.682115][T12181] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 522.682122][T12181] RBP: 00007fb7dc9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 522.682127][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.682133][T12181] R13: 00007fb7dbdc6038 R14: 00007fb7dbdc5fa0 R15: 00007ffd78a13ab8 [ 522.682148][T12181] [ 522.682153][T12181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.833321][T12184] lo speed is unknown, defaulting to 1000 [ 522.952078][ T5967] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 522.974301][ T5967] usb 5-1: config 0 has no interface number 0 [ 522.980485][ T5967] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 523.041131][ T5967] usb 5-1: New USB device found, idVendor=0b4c, idProduct=2003, bcdDevice=2f.61 [ 523.086974][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.129510][T12186] netlink: 'syz.0.1960': attribute type 5 has an invalid length. [ 523.132581][ T5967] usb 5-1: config 0 descriptor?? [ 524.309965][T12203] fuse: Bad value for 'fd' [ 525.191266][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 525.320873][T12212] lo speed is unknown, defaulting to 1000 [ 526.123354][T12214] nbd5: detected capacity change from 0 to 63 [ 526.131883][T12215] block nbd5: NBD_DISCONNECT [ 526.138131][T12215] block nbd5: Disconnected due to user request. [ 526.146306][T12215] block nbd5: shutting down sockets [ 526.251395][T12216] bond1: entered promiscuous mode [ 526.256461][T12216] bond1: entered allmulticast mode [ 526.276011][ T6346] blk_print_req_error: 135 callbacks suppressed [ 526.276031][ T6346] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 526.292335][ T6346] buffer_io_error: 138 callbacks suppressed [ 526.292385][ T6346] Buffer I/O error on dev nbd5, logical block 0, async page read [ 526.306239][ T6346] Buffer I/O error on dev nbd5, logical block 1, async page read [ 526.314070][ T6346] Buffer I/O error on dev nbd5, logical block 2, async page read [ 526.321830][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 526.326985][ T6346] Buffer I/O error on dev nbd5, logical block 3, async page read [ 526.335216][ T6398] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.344598][ T6398] Buffer I/O error on dev nbd5, logical block 0, async page read [ 526.353166][ T6398] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.362538][ T6398] Buffer I/O error on dev nbd5, logical block 1, async page read [ 526.371981][ T5916] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 526.381281][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.389663][ T5916] usb 2-1: Product: syz [ 526.395464][ T6398] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.411402][ T5916] usb 2-1: Manufacturer: syz [ 526.416947][ T6398] Buffer I/O error on dev nbd5, logical block 2, async page read [ 526.426027][ T5916] usb 2-1: SerialNumber: syz [ 526.432628][ T6398] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.461796][ T5916] usb 2-1: config 0 descriptor?? [ 526.469204][T12216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.476119][ T6398] Buffer I/O error on dev nbd5, logical block 3, async page read [ 526.490492][ T5916] gspca_main: sq905-2.14.0 probing 2770:9120 [ 526.499285][ T6398] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.509312][ T6398] Buffer I/O error on dev nbd5, logical block 0, async page read [ 527.377563][ T6398] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.391136][ T6398] Buffer I/O error on dev nbd5, logical block 1, async page read [ 527.399055][ T6398] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.409504][ T6398] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.419237][ T6398] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.439145][ T6398] ldm_validate_partition_table(): Disk read failed. [ 527.450926][ T6398] Dev nbd5: unable to read RDB block 0 [ 527.458359][ T6398] nbd5: unable to read partition table [ 527.480651][ T6398] ldm_validate_partition_table(): Disk read failed. [ 527.508808][ T6398] Dev nbd5: unable to read RDB block 0 [ 527.515265][ T5916] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 527.522758][ T5916] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 527.532462][ T6398] nbd5: unable to read partition table [ 527.541383][ T5916] usb 2-1: USB disconnect, device number 11 [ 527.720955][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1969'. [ 528.088350][T12233] lo speed is unknown, defaulting to 1000 [ 529.375991][T12243] netlink: 'syz.1.1973': attribute type 5 has an invalid length. [ 529.963608][ T5929] usb 5-1: USB disconnect, device number 10 [ 530.222898][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 530.222913][ T30] audit: type=1400 audit(1757417753.751:901): avc: denied { accept } for pid=12253 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.265452][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 530.523376][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 530.537909][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 530.548032][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 531.202742][ T6537] block nbd2: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 120 seconds [ 531.214493][ T6537] block nbd2: Possible stuck request ffff888026e25240: control (read@1024,1024B). Runtime 120 seconds [ 531.226783][ T6537] block nbd2: Possible stuck request ffff888026e25400: control (read@2048,1024B). Runtime 120 seconds [ 531.237841][ T6537] block nbd2: Possible stuck request ffff888026e255c0: control (read@3072,1024B). Runtime 120 seconds [ 531.315583][ T30] audit: type=1400 audit(1757417754.841:902): avc: denied { write } for pid=12259 comm="syz.3.1979" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 532.711641][T12272] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1982'. [ 533.127924][T12272] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 533.134467][T12272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 533.245367][T12272] vhci_hcd vhci_hcd.0: Device attached [ 533.531651][ T5929] usb 36-1: SetAddress Request (10) to port 0 [ 533.740155][ T5929] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 533.835051][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 534.027273][T12292] block nbd4: Attempted send on invalid socket [ 534.045833][T12292] blk_print_req_error: 135 callbacks suppressed [ 534.045851][T12292] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.256702][ T6346] block nbd4: Attempted send on invalid socket [ 534.257181][T12294] FAULT_INJECTION: forcing a failure. [ 534.257181][T12294] name failslab, interval 1, probability 0, space 0, times 0 [ 534.269078][ T6346] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.277980][T12294] CPU: 1 UID: 0 PID: 12294 Comm: syz.0.1989 Not tainted syzkaller #0 PREEMPT(full) [ 534.278001][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.278010][T12294] Call Trace: [ 534.278015][T12294] [ 534.278022][T12294] dump_stack_lvl+0x16c/0x1f0 [ 534.278045][T12294] should_fail_ex+0x512/0x640 [ 534.278064][T12294] ? fs_reclaim_acquire+0xae/0x150 [ 534.278085][T12294] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 534.278107][T12294] should_failslab+0xc2/0x120 [ 534.278123][T12294] __kmalloc_noprof+0xd2/0x510 [ 534.278143][T12294] tomoyo_realpath_from_path+0xc2/0x6e0 [ 534.278167][T12294] ? tomoyo_profile+0x47/0x60 [ 534.278183][T12294] tomoyo_path_number_perm+0x245/0x580 [ 534.278201][T12294] ? tomoyo_path_number_perm+0x237/0x580 [ 534.278221][T12294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 534.278241][T12294] ? find_held_lock+0x2b/0x80 [ 534.278279][T12294] ? find_held_lock+0x2b/0x80 [ 534.278295][T12294] ? hook_file_ioctl_common+0x145/0x410 [ 534.278316][T12294] ? __fget_files+0x20e/0x3c0 [ 534.278337][T12294] security_file_ioctl+0x9b/0x240 [ 534.278358][T12294] __x64_sys_ioctl+0xb7/0x210 [ 534.278382][T12294] do_syscall_64+0xcd/0x4c0 [ 534.278402][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.278417][T12294] RIP: 0033:0x7fb7dbb8ebe9 [ 534.278430][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.278444][T12294] RSP: 002b:00007fb7dc9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.278458][T12294] RAX: ffffffffffffffda RBX: 00007fb7dbdc5fa0 RCX: 00007fb7dbb8ebe9 [ 534.278468][T12294] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000005 [ 534.278476][T12294] RBP: 00007fb7dc9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 534.278485][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.278493][T12294] R13: 00007fb7dbdc6038 R14: 00007fb7dbdc5fa0 R15: 00007ffd78a13ab8 [ 534.278514][T12294] [ 534.278519][T12294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.287452][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 534.470414][T12298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.581395][T12292] block nbd4: Attempted send on invalid socket [ 534.587685][T12292] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.627183][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 534.732636][T12292] block nbd4: Attempted send on invalid socket [ 534.881184][T12292] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.920911][T12292] block nbd4: Attempted send on invalid socket [ 534.927415][T12292] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.931147][T12278] vhci_hcd: connection reset by peer [ 534.939488][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 534.963631][T12292] block nbd4: Attempted send on invalid socket [ 534.971252][T12292] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.981292][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 534.994891][T12292] block nbd4: Attempted send on invalid socket [ 535.001185][T12292] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.012456][T12292] block nbd4: Attempted send on invalid socket [ 535.019897][T12292] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.031209][ T5857] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 535.041247][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 535.041386][ T68] vhci_hcd: stop threads [ 535.050937][T12292] block nbd4: Attempted send on invalid socket [ 535.065330][T12292] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.076516][T12292] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 535.089754][T12292] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 535.212524][ T68] vhci_hcd: release socket [ 535.240528][ T68] vhci_hcd: disconnect device [ 535.251221][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 535.271331][ T5857] usb 1-1: unable to get BOS descriptor or descriptor too short [ 535.296447][ T5857] usb 1-1: config 7 has an invalid interface number: 148 but max is 0 [ 535.320732][ T5857] usb 1-1: config 7 has no interface number 0 [ 535.390675][ T5857] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76 [ 535.438659][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.464423][T12309] FAULT_INJECTION: forcing a failure. [ 535.464423][T12309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.471103][ T5857] usb 1-1: Product: syz [ 535.511115][ T5857] usb 1-1: Manufacturer: syz [ 535.516908][ T5857] usb 1-1: SerialNumber: syz [ 535.611295][ T30] audit: type=1400 audit(1757417759.071:903): avc: denied { watch watch_reads } for pid=12306 comm="syz.4.1991" path="/397/file1" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 535.641199][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.5.1992 Not tainted syzkaller #0 PREEMPT(full) [ 535.641226][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.641237][T12309] Call Trace: [ 535.641244][T12309] [ 535.641252][T12309] dump_stack_lvl+0x16c/0x1f0 [ 535.641279][T12309] should_fail_ex+0x512/0x640 [ 535.641304][T12309] _copy_from_user+0x2e/0xd0 [ 535.641331][T12309] copy_msghdr_from_user+0x98/0x160 [ 535.641352][T12309] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 535.641384][T12309] ___sys_sendmsg+0xfe/0x1d0 [ 535.641406][T12309] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.641456][T12309] __sys_sendmsg+0x16d/0x220 [ 535.641478][T12309] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.641515][T12309] do_syscall_64+0xcd/0x4c0 [ 535.641539][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.641557][T12309] RIP: 0033:0x7f2d2558ebe9 [ 535.641571][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.641587][T12309] RSP: 002b:00007f2d26481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.641604][T12309] RAX: ffffffffffffffda RBX: 00007f2d257c5fa0 RCX: 00007f2d2558ebe9 [ 535.641615][T12309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 535.641625][T12309] RBP: 00007f2d26481090 R08: 0000000000000000 R09: 0000000000000000 [ 535.641635][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.641645][T12309] R13: 00007f2d257c6038 R14: 00007f2d257c5fa0 R15: 00007ffe32f33ef8 [ 535.641669][T12309] [ 535.824670][ T5857] ldusb 1-1:7.148: Interrupt in endpoint not found [ 536.040419][ T5857] usb 1-1: USB disconnect, device number 12 [ 536.439628][T12324] FAULT_INJECTION: forcing a failure. [ 536.439628][T12324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.489734][T12324] CPU: 1 UID: 0 PID: 12324 Comm: syz.0.1996 Not tainted syzkaller #0 PREEMPT(full) [ 536.489751][T12324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.489761][T12324] Call Trace: [ 536.489765][T12324] [ 536.489770][T12324] dump_stack_lvl+0x16c/0x1f0 [ 536.489788][T12324] should_fail_ex+0x512/0x640 [ 536.489804][T12324] _copy_from_user+0x2e/0xd0 [ 536.489821][T12324] copy_msghdr_from_user+0x98/0x160 [ 536.489836][T12324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 536.489851][T12324] ? __pfx__kstrtoull+0x10/0x10 [ 536.489865][T12324] ___sys_sendmsg+0xfe/0x1d0 [ 536.489879][T12324] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.489898][T12324] ? find_held_lock+0x2b/0x80 [ 536.489921][T12324] __sys_sendmmsg+0x200/0x420 [ 536.489935][T12324] ? __pfx___sys_sendmmsg+0x10/0x10 [ 536.489952][T12324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 536.489974][T12324] ? fput+0x9b/0xd0 [ 536.489988][T12324] ? ksys_write+0x1ac/0x250 [ 536.490000][T12324] ? __pfx_ksys_write+0x10/0x10 [ 536.490012][T12324] __x64_sys_sendmmsg+0x9c/0x100 [ 536.490025][T12324] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.490037][T12324] do_syscall_64+0xcd/0x4c0 [ 536.490051][T12324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.490062][T12324] RIP: 0033:0x7fb7dbb8ebe9 [ 536.490071][T12324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.490081][T12324] RSP: 002b:00007fb7dc9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 536.490092][T12324] RAX: ffffffffffffffda RBX: 00007fb7dbdc5fa0 RCX: 00007fb7dbb8ebe9 [ 536.490098][T12324] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000004 [ 536.490104][T12324] RBP: 00007fb7dc9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 536.490110][T12324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.490116][T12324] R13: 00007fb7dbdc6038 R14: 00007fb7dbdc5fa0 R15: 00007ffd78a13ab8 [ 536.490129][T12324] [ 537.880841][T12340] FAULT_INJECTION: forcing a failure. [ 537.880841][T12340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.941288][T12340] CPU: 1 UID: 0 PID: 12340 Comm: syz.4.2001 Not tainted syzkaller #0 PREEMPT(full) [ 537.941312][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.941322][T12340] Call Trace: [ 537.941328][T12340] [ 537.941334][T12340] dump_stack_lvl+0x16c/0x1f0 [ 537.941360][T12340] should_fail_ex+0x512/0x640 [ 537.941386][T12340] _copy_from_user+0x2e/0xd0 [ 537.941411][T12340] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 537.941438][T12340] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 537.941468][T12340] mptcp_setsockopt+0xef7/0x3220 [ 537.941492][T12340] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 537.941522][T12340] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 537.941548][T12340] ? find_held_lock+0x2b/0x80 [ 537.941574][T12340] ? selinux_socket_setsockopt+0x6a/0x80 [ 537.941595][T12340] ? sock_common_setsockopt+0x2e/0xf0 [ 537.941620][T12340] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 537.941646][T12340] do_sock_setsockopt+0xf3/0x1d0 [ 537.941672][T12340] __sys_setsockopt+0x1a0/0x230 [ 537.941696][T12340] __x64_sys_setsockopt+0xbd/0x160 [ 537.941714][T12340] ? do_syscall_64+0x91/0x4c0 [ 537.941734][T12340] ? lockdep_hardirqs_on+0x7c/0x110 [ 537.941754][T12340] do_syscall_64+0xcd/0x4c0 [ 537.941777][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.941794][T12340] RIP: 0033:0x7f21cff8ebe9 [ 537.941807][T12340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.941824][T12340] RSP: 002b:00007f21d0db3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.941840][T12340] RAX: ffffffffffffffda RBX: 00007f21d01c5fa0 RCX: 00007f21cff8ebe9 [ 537.941851][T12340] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 537.941860][T12340] RBP: 00007f21d0db3090 R08: 0000000000000004 R09: 0000000000000000 [ 537.941870][T12340] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 537.941886][T12340] R13: 00007f21d01c6038 R14: 00007f21d01c5fa0 R15: 00007ffdf5846ff8 [ 537.941909][T12340] [ 538.219857][T12342] kvm: kvm [12341]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 538.372522][T12351] overlayfs: failed to resolve './file0': -2 [ 538.388611][T12342] kvm: kvm [12341]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 538.581205][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'. [ 538.638583][T12356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2005'. [ 538.681256][ T30] audit: type=1400 audit(1757417762.171:904): avc: denied { execute } for pid=12343 comm="syz.1.2003" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.758190][T12356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 538.764704][T12356] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 538.806026][T12356] vhci_hcd vhci_hcd.0: Device attached [ 538.912522][ T5929] usb 36-1: device descriptor read/8, error -110 [ 539.079241][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 539.086408][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 539.325938][ T5929] usb usb36-port1: attempt power cycle [ 539.870781][T12367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.100548][T12358] vhci_hcd: connection reset by peer [ 540.243188][ T5929] usb usb36-port1: unable to enumerate USB device [ 540.278280][ T49] vhci_hcd: stop threads [ 540.294729][ T49] vhci_hcd: release socket [ 540.322605][ T49] vhci_hcd: disconnect device [ 541.545019][T12377] syzkaller0: entered promiscuous mode [ 541.556806][T12377] syzkaller0: entered allmulticast mode [ 541.689081][T12380] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 541.716733][T12380] netlink: 'syz.1.2011': attribute type 4 has an invalid length. [ 541.742114][T12382] FAULT_INJECTION: forcing a failure. [ 541.742114][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.761413][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.0.2012 Not tainted syzkaller #0 PREEMPT(full) [ 541.761439][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.761447][T12382] Call Trace: [ 541.761453][T12382] [ 541.761459][T12382] dump_stack_lvl+0x16c/0x1f0 [ 541.761484][T12382] should_fail_ex+0x512/0x640 [ 541.761506][T12382] _copy_from_user+0x2e/0xd0 [ 541.761528][T12382] copy_msghdr_from_user+0x98/0x160 [ 541.761547][T12382] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 541.761576][T12382] ___sys_sendmsg+0xfe/0x1d0 [ 541.761594][T12382] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.761639][T12382] __sys_sendmsg+0x16d/0x220 [ 541.761657][T12382] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.761689][T12382] do_syscall_64+0xcd/0x4c0 [ 541.761710][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.761725][T12382] RIP: 0033:0x7fb7dbb8ebe9 [ 541.761738][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.761752][T12382] RSP: 002b:00007fb7dc9b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.761767][T12382] RAX: ffffffffffffffda RBX: 00007fb7dbdc5fa0 RCX: 00007fb7dbb8ebe9 [ 541.761777][T12382] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 541.761785][T12382] RBP: 00007fb7dc9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 541.761794][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.761802][T12382] R13: 00007fb7dbdc6038 R14: 00007fb7dbdc5fa0 R15: 00007ffd78a13ab8 [ 541.761824][T12382] [ 542.059047][ T30] audit: type=1400 audit(1757417765.571:905): avc: denied { setopt } for pid=12383 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 542.134278][ T30] audit: type=1400 audit(1757417765.571:906): avc: denied { ioctl } for pid=12383 comm="syz.1.2014" path="socket:[34153]" dev="sockfs" ino=34153 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 542.748053][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 542.911811][ T5929] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 542.921812][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.930749][ T5929] usb 2-1: Product: syz [ 542.935190][ T5929] usb 2-1: Manufacturer: syz [ 542.939816][ T5929] usb 2-1: SerialNumber: syz [ 542.960261][ T5929] r8152-cfgselector 2-1: Unknown version 0x0000 [ 542.967056][ T5929] r8152-cfgselector 2-1: config 0 descriptor?? [ 543.185136][T12392] overlay: Unknown parameter 'uid' [ 543.252515][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.264234][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.975288][T12402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.006784][T12402] FAULT_INJECTION: forcing a failure. [ 544.006784][T12402] name failslab, interval 1, probability 0, space 0, times 0 [ 544.046890][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.068278][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.3.2019 Not tainted syzkaller #0 PREEMPT(full) [ 544.068302][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.068311][T12402] Call Trace: [ 544.068316][T12402] [ 544.068322][T12402] dump_stack_lvl+0x16c/0x1f0 [ 544.068347][T12402] should_fail_ex+0x512/0x640 [ 544.068368][T12402] ? fs_reclaim_acquire+0xae/0x150 [ 544.068395][T12402] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 544.068419][T12402] should_failslab+0xc2/0x120 [ 544.068439][T12402] __kmalloc_noprof+0xd2/0x510 [ 544.068463][T12402] tomoyo_realpath_from_path+0xc2/0x6e0 [ 544.068489][T12402] ? tomoyo_profile+0x47/0x60 [ 544.068508][T12402] tomoyo_path_number_perm+0x245/0x580 [ 544.068528][T12402] ? tomoyo_path_number_perm+0x237/0x580 [ 544.068550][T12402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 544.068572][T12402] ? find_held_lock+0x2b/0x80 [ 544.068612][T12402] ? find_held_lock+0x2b/0x80 [ 544.068631][T12402] ? hook_file_ioctl_common+0x145/0x410 [ 544.068655][T12402] ? __fget_files+0x20e/0x3c0 [ 544.068678][T12402] security_file_ioctl+0x9b/0x240 [ 544.068703][T12402] __x64_sys_ioctl+0xb7/0x210 [ 544.068731][T12402] do_syscall_64+0xcd/0x4c0 [ 544.068756][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.068773][T12402] RIP: 0033:0x7fe88fd8ebe9 [ 544.068788][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.068812][T12402] RSP: 002b:00007fe890c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.068828][T12402] RAX: ffffffffffffffda RBX: 00007fe88ffc5fa0 RCX: 00007fe88fd8ebe9 [ 544.068839][T12402] RDX: 0000200000000280 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 544.068849][T12402] RBP: 00007fe890c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 544.068859][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.068868][T12402] R13: 00007fe88ffc6038 R14: 00007fe88ffc5fa0 R15: 00007ffc44a10688 [ 544.068891][T12402] [ 544.068920][T12402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.078374][T12406] tipc: Enabled bearer , priority 0 [ 544.078877][T12406] syzkaller0: entered promiscuous mode [ 544.146963][ T30] audit: type=1400 audit(1757417767.671:907): avc: denied { write } for pid=12403 comm="syz.0.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 544.155661][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.192145][T12406] syzkaller0: entered allmulticast mode [ 544.328009][ T9] usb 42-1: device descriptor read/8, error -110 [ 544.353248][T12406] tipc: Resetting bearer [ 544.363369][T12405] tipc: Resetting bearer [ 544.670461][T12405] tipc: Disabling bearer [ 544.742368][ T9] usb usb42-port1: attempt power cycle [ 545.209166][ T5929] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 545.660567][ T9] usb usb42-port1: unable to enumerate USB device [ 545.711245][ T30] audit: type=1400 audit(1757417769.231:908): avc: denied { nlmsg_read } for pid=12435 comm="syz.0.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 545.818042][T12444] capability: warning: `syz.1.2035' uses deprecated v2 capabilities in a way that may be insecure [ 546.145850][T12450] tipc: Enabled bearer , priority 0 [ 546.172212][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 546.221731][T12450] syzkaller0: entered promiscuous mode [ 546.227286][T12450] syzkaller0: entered allmulticast mode [ 546.235318][T12450] tipc: Resetting bearer [ 546.244136][T12449] tipc: Resetting bearer [ 546.336678][T12449] tipc: Disabling bearer [ 546.389773][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.407122][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.419745][ T5929] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 546.430899][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.442154][ T5929] usb 2-1: config 0 descriptor?? [ 546.452638][T12457] FAULT_INJECTION: forcing a failure. [ 546.452638][T12457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.486624][T12457] CPU: 0 UID: 0 PID: 12457 Comm: syz.4.2039 Not tainted syzkaller #0 PREEMPT(full) [ 546.486650][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.486663][T12457] Call Trace: [ 546.486669][T12457] [ 546.486676][T12457] dump_stack_lvl+0x16c/0x1f0 [ 546.486703][T12457] should_fail_ex+0x512/0x640 [ 546.486728][T12457] _copy_from_user+0x2e/0xd0 [ 546.486754][T12457] copy_msghdr_from_user+0x98/0x160 [ 546.486776][T12457] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 546.486817][T12457] ___sys_sendmsg+0xfe/0x1d0 [ 546.486853][T12457] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.486905][T12457] __sys_sendmsg+0x16d/0x220 [ 546.486927][T12457] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.486969][T12457] do_syscall_64+0xcd/0x4c0 [ 546.486994][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.487011][T12457] RIP: 0033:0x7f21cff8ebe9 [ 546.487025][T12457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.487041][T12457] RSP: 002b:00007f21d0db3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.487057][T12457] RAX: ffffffffffffffda RBX: 00007f21d01c5fa0 RCX: 00007f21cff8ebe9 [ 546.487068][T12457] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 546.487077][T12457] RBP: 00007f21d0db3090 R08: 0000000000000000 R09: 0000000000000000 [ 546.487087][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.487096][T12457] R13: 00007f21d01c6038 R14: 00007f21d01c5fa0 R15: 00007ffdf5846ff8 [ 546.487120][T12457] [ 547.356522][ T5929] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 547.384761][ T5929] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 548.877821][ T9] usb 2-1: USB disconnect, device number 13 [ 548.892932][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 550.152481][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 551.117501][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 551.132381][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 551.142553][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 551.152074][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 551.574687][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2056'. [ 551.586478][T12519] FAULT_INJECTION: forcing a failure. [ 551.586478][T12519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.599615][T12519] CPU: 0 UID: 0 PID: 12519 Comm: syz.5.2056 Not tainted syzkaller #0 PREEMPT(full) [ 551.599638][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.599648][T12519] Call Trace: [ 551.599654][T12519] [ 551.599661][T12519] dump_stack_lvl+0x16c/0x1f0 [ 551.599689][T12519] should_fail_ex+0x512/0x640 [ 551.599715][T12519] _copy_from_user+0x2e/0xd0 [ 551.599742][T12519] copy_msghdr_from_user+0x98/0x160 [ 551.599765][T12519] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 551.599791][T12519] ? __lock_acquire+0x62e/0x1ce0 [ 551.599822][T12519] ___sys_recvmsg+0xdb/0x1a0 [ 551.599843][T12519] ? __pfx____sys_recvmsg+0x10/0x10 [ 551.599866][T12519] ? find_held_lock+0x2b/0x80 [ 551.599902][T12519] do_recvmmsg+0x2fe/0x750 [ 551.599926][T12519] ? __pfx_do_recvmmsg+0x10/0x10 [ 551.599962][T12519] ? __fget_files+0x20e/0x3c0 [ 551.599988][T12519] __x64_sys_recvmmsg+0x22a/0x280 [ 551.600010][T12519] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 551.600039][T12519] do_syscall_64+0xcd/0x4c0 [ 551.600063][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.600080][T12519] RIP: 0033:0x7f2d2558ebe9 [ 551.600094][T12519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.600109][T12519] RSP: 002b:00007f2d2643f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 551.600125][T12519] RAX: ffffffffffffffda RBX: 00007f2d257c6180 RCX: 00007f2d2558ebe9 [ 551.600135][T12519] RDX: 0000000000000001 RSI: 00002000000077c0 RDI: 0000000000000009 [ 551.600144][T12519] RBP: 00007f2d2643f090 R08: 0000000000000000 R09: 0000000000000000 [ 551.600154][T12519] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 551.600163][T12519] R13: 00007f2d257c6218 R14: 00007f2d257c6180 R15: 00007ffe32f33ef8 [ 551.600186][T12519] [ 551.782392][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 551.897299][T12524] tipc: Enabled bearer , priority 0 [ 551.937894][T12524] syzkaller0: entered promiscuous mode [ 551.954040][ T5929] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 551.961286][T12524] syzkaller0: entered allmulticast mode [ 551.964175][ T5929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.978857][ T5929] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 551.989999][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.022446][ T5929] usb 4-1: config 0 descriptor?? [ 552.064850][ T6460] Bluetooth: Error in BCSP hdr checksum [ 552.360322][T12528] tipc: Resetting bearer [ 552.417367][T12523] tipc: Resetting bearer [ 552.489075][T12523] tipc: Disabling bearer [ 552.792398][T12530] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 553.040829][ T30] audit: type=1400 audit(1757417776.451:909): avc: denied { bind } for pid=12535 comm="syz.4.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.081180][ T30] audit: type=1400 audit(1757417776.511:910): avc: denied { listen } for pid=12535 comm="syz.4.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.293323][ T5857] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 553.511240][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 553.532586][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.574936][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.590177][ T5857] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 553.614673][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.627896][ T5857] usb 5-1: Product: syz [ 553.632682][ T5857] usb 5-1: Manufacturer: syz [ 553.637330][ T5857] usb 5-1: SerialNumber: syz [ 553.653026][ T5857] usb 5-1: config 0 descriptor?? [ 553.667031][ T5857] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 553.781410][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 554.144351][T12537] hub 9-0:1.0: USB hub found [ 554.154122][T12537] hub 9-0:1.0: 1 port detected [ 554.203141][ T5967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 554.214046][ T30] audit: type=1400 audit(1757417777.731:911): avc: denied { read } for pid=12535 comm="syz.4.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.381132][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 554.390032][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 554.402355][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 554.416887][ T5967] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 554.426710][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.435184][ T5967] usb 6-1: Product: syz [ 554.439666][ T5967] usb 6-1: Manufacturer: syz [ 554.446293][ T5967] usb 6-1: SerialNumber: syz [ 554.477288][ T5967] usb 6-1: config 0 descriptor?? [ 554.486470][ T5967] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 554.506587][ T5967] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 554.704348][ T5967] usb 6-1: USB disconnect, device number 3 [ 554.730399][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 554.769418][ T5967] kobil_sct 6-1:0.0: device disconnected [ 554.784541][ T5857] usb 4-1: USB disconnect, device number 12 [ 554.961455][T11958] usb 5-1: USB disconnect, device number 11 [ 555.082895][ T30] audit: type=1400 audit(1757417778.561:912): avc: denied { read append } for pid=12551 comm="syz.1.2066" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 555.133413][ T30] audit: type=1400 audit(1757417778.571:913): avc: denied { open } for pid=12551 comm="syz.1.2066" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 555.171730][ T30] audit: type=1400 audit(1757417778.571:914): avc: denied { ioctl } for pid=12551 comm="syz.1.2066" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 555.197453][ T30] audit: type=1326 audit(1757417778.581:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 555.221280][ T30] audit: type=1326 audit(1757417778.581:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 555.245284][ T30] audit: type=1326 audit(1757417778.581:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 556.059239][ T30] audit: type=1326 audit(1757417778.581:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df4d8ebe9 code=0x7ffc0000 [ 556.145159][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 556.160181][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 556.330567][T12568] FAULT_INJECTION: forcing a failure. [ 556.330567][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.344506][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.3.2072 Not tainted syzkaller #0 PREEMPT(full) [ 556.344523][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.344529][T12568] Call Trace: [ 556.344532][T12568] [ 556.344536][T12568] dump_stack_lvl+0x16c/0x1f0 [ 556.344554][T12568] should_fail_ex+0x512/0x640 [ 556.344570][T12568] _copy_from_user+0x2e/0xd0 [ 556.344586][T12568] do_fcntl+0xba2/0x15a0 [ 556.344601][T12568] ? __pfx_do_fcntl+0x10/0x10 [ 556.344617][T12568] ? selinux_file_fcntl+0x93/0x170 [ 556.344632][T12568] __x64_sys_fcntl+0x163/0x200 [ 556.344647][T12568] do_syscall_64+0xcd/0x4c0 [ 556.344662][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.344672][T12568] RIP: 0033:0x7fe88fd8ebe9 [ 556.344682][T12568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.344692][T12568] RSP: 002b:00007fe890c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 556.344702][T12568] RAX: ffffffffffffffda RBX: 00007fe88ffc5fa0 RCX: 00007fe88fd8ebe9 [ 556.344709][T12568] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000005 [ 556.344715][T12568] RBP: 00007fe890c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 556.344720][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.344726][T12568] R13: 00007fe88ffc6038 R14: 00007fe88ffc5fa0 R15: 00007ffc44a10688 [ 556.344739][T12568] [ 556.592305][ T5857] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 556.786237][T12574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.903531][T12573] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 556.947421][ T5857] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 556.955685][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 556.977760][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 557.198856][T12581] lo speed is unknown, defaulting to 1000 [ 557.999398][T12584] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 557.999450][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.022570][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.032424][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.223615][ T5857] usb 1-1: config 0 descriptor?? [ 558.233970][T12560] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 558.650301][T12586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.716673][ T5857] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 558.801442][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 558.801454][ T30] audit: type=1326 audit(1757417782.301:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 558.941609][ T5857] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 558.973023][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 558.981558][ T30] audit: type=1326 audit(1757417782.301:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.344371][ T30] audit: type=1326 audit(1757417782.301:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.650188][ T30] audit: type=1326 audit(1757417782.301:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.774823][ T30] audit: type=1326 audit(1757417782.301:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.848463][ T30] audit: type=1326 audit(1757417782.311:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.858107][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.931237][ T30] audit: type=1326 audit(1757417782.311:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 559.981461][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.988581][T12600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.998685][ T30] audit: type=1326 audit(1757417782.311:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d2558ebe9 code=0x7ffc0000 [ 560.126554][ T30] audit: type=1400 audit(1757417782.381:976): avc: denied { map } for pid=12590 comm="syz.5.2078" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.161564][ T30] audit: type=1400 audit(1757417782.381:977): avc: denied { execute } for pid=12590 comm="syz.5.2078" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.196114][ T5857] usb 1-1: USB disconnect, device number 13 [ 560.957384][T12596] loop6: detected capacity change from 0 to 63 [ 560.969907][ T6398] buffer_io_error: 138 callbacks suppressed [ 560.969921][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 561.159437][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 561.208164][T12628] kvm: emulating exchange as write [ 561.241503][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 561.297801][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 561.310577][ T6537] block nbd2: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 150 seconds [ 561.321560][ T6537] block nbd2: Possible stuck request ffff888026e25240: control (read@1024,1024B). Runtime 150 seconds [ 561.332781][ T6537] block nbd2: Possible stuck request ffff888026e25400: control (read@2048,1024B). Runtime 150 seconds [ 561.343839][ T6537] block nbd2: Possible stuck request ffff888026e255c0: control (read@3072,1024B). Runtime 150 seconds [ 561.382039][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 561.821462][T12638] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 562.590018][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.607910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.692837][T12642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.818427][T12642] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 564.200695][T12663] FAULT_INJECTION: forcing a failure. [ 564.200695][T12663] name failslab, interval 1, probability 0, space 0, times 0 [ 564.275795][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 564.275809][ T30] audit: type=1326 audit(1757417787.761:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.121259][ T30] audit: type=1326 audit(1757417787.761:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.131231][T12663] CPU: 1 UID: 0 PID: 12663 Comm: syz.1.2094 Not tainted syzkaller #0 PREEMPT(full) [ 565.131254][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.131263][T12663] Call Trace: [ 565.131269][T12663] [ 565.131275][T12663] dump_stack_lvl+0x16c/0x1f0 [ 565.131298][T12663] should_fail_ex+0x512/0x640 [ 565.131318][T12663] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 565.131336][T12663] should_failslab+0xc2/0x120 [ 565.131354][T12663] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 565.131373][T12663] ? __alloc_skb+0x2b2/0x380 [ 565.131393][T12663] __alloc_skb+0x2b2/0x380 [ 565.131408][T12663] ? __pfx___alloc_skb+0x10/0x10 [ 565.131426][T12663] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 565.131450][T12663] netlink_alloc_large_skb+0x69/0x130 [ 565.131470][T12663] netlink_sendmsg+0x6a1/0xdd0 [ 565.131492][T12663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.131519][T12663] ____sys_sendmsg+0xa98/0xc70 [ 565.131542][T12663] ? copy_msghdr_from_user+0x10a/0x160 [ 565.131560][T12663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.131591][T12663] ___sys_sendmsg+0x134/0x1d0 [ 565.131609][T12663] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.131653][T12663] __sys_sendmsg+0x16d/0x220 [ 565.131671][T12663] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.131702][T12663] do_syscall_64+0xcd/0x4c0 [ 565.131722][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.131737][T12663] RIP: 0033:0x7f4df4d8ebe9 [ 565.131750][T12663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.131763][T12663] RSP: 002b:00007f4df5bf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.131777][T12663] RAX: ffffffffffffffda RBX: 00007f4df4fc5fa0 RCX: 00007f4df4d8ebe9 [ 565.131787][T12663] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 565.131795][T12663] RBP: 00007f4df5bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 565.131804][T12663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.131812][T12663] R13: 00007f4df4fc6038 R14: 00007f4df4fc5fa0 R15: 00007ffd14330098 [ 565.131832][T12663] [ 565.532023][ T30] audit: type=1326 audit(1757417787.761:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.556550][ T30] audit: type=1326 audit(1757417787.761:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.645058][T12673] FAULT_INJECTION: forcing a failure. [ 565.645058][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 565.658158][T12673] CPU: 1 UID: 0 PID: 12673 Comm: syz.3.2097 Not tainted syzkaller #0 PREEMPT(full) [ 565.658184][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.658193][T12673] Call Trace: [ 565.658199][T12673] [ 565.658206][T12673] dump_stack_lvl+0x16c/0x1f0 [ 565.658233][T12673] should_fail_ex+0x512/0x640 [ 565.658254][T12673] ? __kvmalloc_node_noprof+0x124/0x620 [ 565.658274][T12673] should_failslab+0xc2/0x120 [ 565.658295][T12673] __kvmalloc_node_noprof+0x137/0x620 [ 565.658311][T12673] ? rcu_is_watching+0x12/0xc0 [ 565.658332][T12673] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 565.658364][T12673] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 565.658385][T12673] file_tty_write.constprop.0+0x6ef/0x9b0 [ 565.658408][T12673] ? vfs_write+0x69b/0x11d0 [ 565.658430][T12673] vfs_write+0x7d3/0x11d0 [ 565.658448][T12673] ? __pfx_tty_write+0x10/0x10 [ 565.658470][T12673] ? __pfx_vfs_write+0x10/0x10 [ 565.658486][T12673] ? find_held_lock+0x2b/0x80 [ 565.658524][T12673] ksys_write+0x12a/0x250 [ 565.658542][T12673] ? __pfx_ksys_write+0x10/0x10 [ 565.658567][T12673] do_syscall_64+0xcd/0x4c0 [ 565.658593][T12673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.658609][T12673] RIP: 0033:0x7fe88fd8ebe9 [ 565.658624][T12673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.658640][T12673] RSP: 002b:00007fe890c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.658657][T12673] RAX: ffffffffffffffda RBX: 00007fe88ffc6180 RCX: 00007fe88fd8ebe9 [ 565.658669][T12673] RDX: 0000000000001066 RSI: 0000200000001640 RDI: 0000000000000009 [ 565.658679][T12673] RBP: 00007fe890c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 565.658690][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.658700][T12673] R13: 00007fe88ffc6218 R14: 00007fe88ffc6180 R15: 00007ffc44a10688 [ 565.658725][T12673] [ 565.659634][ T5967] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 565.823393][ T30] audit: type=1326 audit(1757417787.761:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.925492][ T30] audit: type=1326 audit(1757417787.761:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.952121][ T30] audit: type=1326 audit(1757417787.761:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 565.977644][ T30] audit: type=1326 audit(1757417787.761:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 566.003351][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 566.009267][ T30] audit: type=1326 audit(1757417787.761:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 566.036975][ T5967] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.131093][T12680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.133701][ T5967] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.142927][T12680] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 566.258424][ T5967] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 566.329800][ T30] audit: type=1326 audit(1757417787.771:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cff8ebe9 code=0x7ffc0000 [ 566.354578][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.503961][ T5967] usb 2-1: config 0 descriptor?? [ 566.828253][ T5967] usbhid 2-1:0.0: can't add hid device: -71 [ 566.836244][ T5967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 566.887631][ T5967] usb 2-1: USB disconnect, device number 14 [ 568.211901][T12702] bridge_slave_0: left allmulticast mode [ 568.217550][T12702] bridge_slave_0: left promiscuous mode [ 568.272624][T12703] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 568.280561][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.350164][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2107'. [ 568.440378][T12702] bridge_slave_1: left allmulticast mode [ 568.464751][T12702] bridge_slave_1: left promiscuous mode [ 568.490599][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.545625][T12702] bond0: (slave bond_slave_0): Releasing backup interface [ 568.589301][T12702] bond0: (slave bond_slave_1): Releasing backup interface [ 568.627352][T12702] team0: Port device team_slave_0 removed [ 568.642309][T12702] team0: Port device team_slave_1 removed [ 568.649076][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.658770][T12702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.669662][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.695669][T12702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.727278][T12703] batman_adv: batadv0: Adding interface: virt_wifi0 [ 568.735492][T12703] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.767263][T12703] batman_adv: batadv0: Interface activated: virt_wifi0 [ 569.139416][T12722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.277331][T12722] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 569.611250][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 570.633327][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 570.641582][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 570.687282][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 570.698740][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.714521][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.723969][ T5967] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 570.732237][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.745513][ T9] usb 6-1: config 0 descriptor?? [ 570.753788][T12726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 570.874346][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 570.890308][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 570.905313][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 169, changing to 11 [ 570.923240][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50609, setting to 1024 [ 570.940264][ T5967] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 570.953930][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.964067][ T5967] usb 5-1: Product: syz [ 570.968339][ T5967] usb 5-1: Manufacturer: syz [ 570.980257][ T5967] usb 5-1: SerialNumber: syz [ 571.025016][ T5967] usb 5-1: config 0 descriptor?? [ 571.039869][T12735] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 571.177113][ T9] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 571.205121][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 571.286967][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 571.341193][ T5929] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 571.382218][T12748] FAULT_INJECTION: forcing a failure. [ 571.382218][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 571.419622][T12748] CPU: 0 UID: 0 PID: 12748 Comm: syz.3.2121 Not tainted syzkaller #0 PREEMPT(full) [ 571.419650][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.419661][T12748] Call Trace: [ 571.419666][T12748] [ 571.419673][T12748] dump_stack_lvl+0x16c/0x1f0 [ 571.419697][T12748] should_fail_ex+0x512/0x640 [ 571.419720][T12748] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 571.419742][T12748] should_failslab+0xc2/0x120 [ 571.419761][T12748] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 571.419778][T12748] ? __alloc_skb+0x2b2/0x380 [ 571.419796][T12748] ? avc_has_perm+0x144/0x1f0 [ 571.419811][T12748] __alloc_skb+0x2b2/0x380 [ 571.419822][T12748] ? __pfx___alloc_skb+0x10/0x10 [ 571.419832][T12748] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 571.419849][T12748] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 571.419872][T12748] netlink_alloc_large_skb+0x69/0x130 [ 571.419898][T12748] netlink_sendmsg+0x6a1/0xdd0 [ 571.419923][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.419952][T12748] ____sys_sendmsg+0xa98/0xc70 [ 571.419974][T12748] ? copy_msghdr_from_user+0x10a/0x160 [ 571.419987][T12748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.420008][T12748] ___sys_sendmsg+0x134/0x1d0 [ 571.420021][T12748] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.420067][T12748] __sys_sendmsg+0x16d/0x220 [ 571.420087][T12748] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.420121][T12748] do_syscall_64+0xcd/0x4c0 [ 571.420141][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.420152][T12748] RIP: 0033:0x7fe88fd8ebe9 [ 571.420161][T12748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.420170][T12748] RSP: 002b:00007fe890c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.420181][T12748] RAX: ffffffffffffffda RBX: 00007fe88ffc5fa0 RCX: 00007fe88fd8ebe9 [ 571.420187][T12748] RDX: 0000000004000010 RSI: 0000200000000d00 RDI: 0000000000000004 [ 571.420193][T12748] RBP: 00007fe890c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.420200][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.420208][T12748] R13: 00007fe88ffc6038 R14: 00007fe88ffc5fa0 R15: 00007ffc44a10688 [ 571.420231][T12748] [ 571.718898][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 571.718910][ T30] audit: type=1400 audit(1757417795.241:1032): avc: denied { nlmsg_tty_audit } for pid=12750 comm="syz.3.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 571.781476][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.790067][ T5929] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 571.792458][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.799672][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.806362][T12726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.816367][ T5929] usb 2-1: config 0 descriptor?? [ 571.829091][ T5929] pwc: Samsung MPC-C10 USB webcam detected. [ 571.858700][ T5857] usb 6-1: USB disconnect, device number 4 [ 572.031254][ T5929] pwc: send_video_command error -71 [ 572.036550][ T5929] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 572.046084][ T5929] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 572.074513][ T5929] usb 2-1: USB disconnect, device number 15 [ 572.450220][T12763] tipc: Enabled bearer , priority 0 [ 572.458984][T12763] syzkaller0: entered promiscuous mode [ 572.465469][T12763] syzkaller0: entered allmulticast mode [ 572.516175][T12759] FAULT_INJECTION: forcing a failure. [ 572.516175][T12759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.529477][T12759] CPU: 1 UID: 0 PID: 12759 Comm: syz.4.2125 Not tainted syzkaller #0 PREEMPT(full) [ 572.529493][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.529499][T12759] Call Trace: [ 572.529502][T12759] [ 572.529506][T12759] dump_stack_lvl+0x16c/0x1f0 [ 572.529525][T12759] should_fail_ex+0x512/0x640 [ 572.529541][T12759] _copy_to_user+0x32/0xd0 [ 572.529558][T12759] simple_read_from_buffer+0xcb/0x170 [ 572.529570][T12759] proc_fail_nth_read+0x197/0x240 [ 572.529586][T12759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.529599][T12759] ? rw_verify_area+0xcf/0x6c0 [ 572.529615][T12759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.529626][T12759] vfs_read+0x1e1/0xcf0 [ 572.529638][T12759] ? __pfx___mutex_lock+0x10/0x10 [ 572.529652][T12759] ? __pfx_vfs_read+0x10/0x10 [ 572.529667][T12759] ? __fget_files+0x20e/0x3c0 [ 572.529682][T12759] ksys_read+0x12a/0x250 [ 572.529692][T12759] ? __pfx_ksys_read+0x10/0x10 [ 572.529701][T12759] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 572.529718][T12759] do_syscall_64+0xcd/0x4c0 [ 572.529733][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.529743][T12759] RIP: 0033:0x7f21cff8d5fc [ 572.529752][T12759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 572.529763][T12759] RSP: 002b:00007f21d0db3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.529773][T12759] RAX: ffffffffffffffda RBX: 00007f21d01c5fa0 RCX: 00007f21cff8d5fc [ 572.529780][T12759] RDX: 000000000000000f RSI: 00007f21d0db30a0 RDI: 0000000000000005 [ 572.529785][T12759] RBP: 00007f21d0db3090 R08: 0000000000000000 R09: 0000000000000000 [ 572.529791][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.529797][T12759] R13: 00007f21d01c6038 R14: 00007f21d01c5fa0 R15: 00007ffdf5846ff8 [ 572.529810][T12759] [ 573.160723][T12763] tipc: Resetting bearer [ 573.188972][T12762] tipc: Resetting bearer [ 573.222433][T12770] FAULT_INJECTION: forcing a failure. [ 573.222433][T12770] name failslab, interval 1, probability 0, space 0, times 0 [ 573.245257][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.1.2129 Not tainted syzkaller #0 PREEMPT(full) [ 573.245283][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.245289][T12770] Call Trace: [ 573.245293][T12770] [ 573.245298][T12770] dump_stack_lvl+0x16c/0x1f0 [ 573.245317][T12770] should_fail_ex+0x512/0x640 [ 573.245332][T12770] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 573.245349][T12770] should_failslab+0xc2/0x120 [ 573.245369][T12770] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 573.245387][T12770] ? __alloc_skb+0x2b2/0x380 [ 573.245414][T12770] __alloc_skb+0x2b2/0x380 [ 573.245431][T12770] ? __pfx___alloc_skb+0x10/0x10 [ 573.245451][T12770] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 573.245468][T12770] netlink_alloc_large_skb+0x69/0x130 [ 573.245482][T12770] netlink_sendmsg+0x6a1/0xdd0 [ 573.245498][T12770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.245527][T12770] ____sys_sendmsg+0xa98/0xc70 [ 573.245555][T12770] ? copy_msghdr_from_user+0x10a/0x160 [ 573.245573][T12770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.245607][T12770] ___sys_sendmsg+0x134/0x1d0 [ 573.245624][T12770] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.245653][T12770] __sys_sendmsg+0x16d/0x220 [ 573.245666][T12770] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.245694][T12770] do_syscall_64+0xcd/0x4c0 [ 573.245719][T12770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.245735][T12770] RIP: 0033:0x7f4df4d8ebe9 [ 573.245749][T12770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.245763][T12770] RSP: 002b:00007f4df5bf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.245779][T12770] RAX: ffffffffffffffda RBX: 00007f4df4fc5fa0 RCX: 00007f4df4d8ebe9 [ 573.245786][T12770] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 573.245792][T12770] RBP: 00007f4df5bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 573.245798][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.245803][T12770] R13: 00007f4df4fc6038 R14: 00007f4df4fc5fa0 R15: 00007ffd14330098 [ 573.245816][T12770] [ 573.528219][T12762] tipc: Disabling bearer [ 573.644007][T12777] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 574.110512][T12784] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2134'. [ 574.328828][T12788] netlink: 'syz.0.2135': attribute type 5 has an invalid length. [ 574.597947][T12797] tipc: Enabled bearer , priority 0 [ 574.610404][T12797] syzkaller0: entered promiscuous mode [ 574.639444][T12797] syzkaller0: entered allmulticast mode [ 574.647940][T12798] netlink: 'syz.0.2136': attribute type 8 has an invalid length. [ 574.669442][T12798] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2136'. [ 574.692627][T12796] tipc: Resetting bearer [ 574.758989][T12796] tipc: Disabling bearer [ 574.781285][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 574.944388][ T5929] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 574.960044][T12803] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2139'. [ 574.983728][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 575.007537][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 575.034697][T12801] lo speed is unknown, defaulting to 1000 [ 575.042415][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.096362][ T5929] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.351147][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.538831][ T5929] usb 2-1: config 0 descriptor?? [ 575.566704][T12795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.016243][ T5929] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 576.044774][ T5929] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 576.074731][T12822] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 576.476901][T12827] netlink: 'syz.3.2146': attribute type 1 has an invalid length. [ 576.604638][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.621642][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.628827][T12830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.659381][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 576.703345][T11958] usb 2-1: USB disconnect, device number 16 [ 576.905451][ T30] audit: type=1400 audit(1757417800.431:1033): avc: denied { write } for pid=12839 comm="syz.3.2148" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 576.945283][ T30] audit: type=1400 audit(1757417800.471:1034): avc: denied { ioctl } for pid=12839 comm="syz.3.2148" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 577.672304][T12848] lo speed is unknown, defaulting to 1000 [ 579.730953][T12868] FAULT_INJECTION: forcing a failure. [ 579.730953][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 579.828550][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.5.2156 Not tainted syzkaller #0 PREEMPT(full) [ 579.828578][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.828587][T12868] Call Trace: [ 579.828593][T12868] [ 579.828602][T12868] dump_stack_lvl+0x16c/0x1f0 [ 579.828627][T12868] should_fail_ex+0x512/0x640 [ 579.828647][T12868] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 579.828669][T12868] should_failslab+0xc2/0x120 [ 579.828690][T12868] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 579.828707][T12868] ? __alloc_skb+0x2b2/0x380 [ 579.828732][T12868] __alloc_skb+0x2b2/0x380 [ 579.828750][T12868] ? __pfx___alloc_skb+0x10/0x10 [ 579.828773][T12868] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 579.828800][T12868] netlink_alloc_large_skb+0x69/0x130 [ 579.828824][T12868] netlink_sendmsg+0x6a1/0xdd0 [ 579.828851][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.828883][T12868] ____sys_sendmsg+0xa98/0xc70 [ 579.828912][T12868] ? copy_msghdr_from_user+0x10a/0x160 [ 579.828932][T12868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.828969][T12868] ___sys_sendmsg+0x134/0x1d0 [ 579.828991][T12868] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.829043][T12868] __sys_sendmsg+0x16d/0x220 [ 579.829066][T12868] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.829102][T12868] do_syscall_64+0xcd/0x4c0 [ 579.829137][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.829155][T12868] RIP: 0033:0x7f2d2558ebe9 [ 579.829169][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.829185][T12868] RSP: 002b:00007f2d26481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.829201][T12868] RAX: ffffffffffffffda RBX: 00007f2d257c5fa0 RCX: 00007f2d2558ebe9 [ 579.829211][T12868] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 579.829220][T12868] RBP: 00007f2d26481090 R08: 0000000000000000 R09: 0000000000000000 [ 579.829230][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.829239][T12868] R13: 00007f2d257c6038 R14: 00007f2d257c5fa0 R15: 00007ffe32f33ef8 [ 579.829262][T12868] [ 580.045473][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 580.727263][ T5909] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 581.052270][ T5909] usb 6-1: config 0 has no interfaces? [ 581.062600][ T5909] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 581.104951][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.127850][ T5909] usb 6-1: config 0 descriptor?? [ 581.353917][ T30] audit: type=1400 audit(1757417804.881:1035): avc: denied { module_load } for pid=12883 comm="syz.0.2162" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 581.393113][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.414089][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.428697][T12874] FAULT_INJECTION: forcing a failure. [ 581.428697][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 581.457118][T12874] CPU: 0 UID: 0 PID: 12874 Comm: syz.5.2159 Not tainted syzkaller #0 PREEMPT(full) [ 581.457146][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.457155][T12874] Call Trace: [ 581.457161][T12874] [ 581.457166][T12874] dump_stack_lvl+0x16c/0x1f0 [ 581.457193][T12874] should_fail_ex+0x512/0x640 [ 581.457215][T12874] ? fs_reclaim_acquire+0xae/0x150 [ 581.457237][T12874] ? tomoyo_encode2+0x100/0x3e0 [ 581.457260][T12874] should_failslab+0xc2/0x120 [ 581.457280][T12874] __kmalloc_noprof+0xd2/0x510 [ 581.457298][T12874] ? d_absolute_path+0x136/0x1a0 [ 581.457327][T12874] tomoyo_encode2+0x100/0x3e0 [ 581.457353][T12874] tomoyo_encode+0x29/0x50 [ 581.457376][T12874] tomoyo_realpath_from_path+0x18f/0x6e0 [ 581.457407][T12874] tomoyo_path_number_perm+0x245/0x580 [ 581.457427][T12874] ? tomoyo_path_number_perm+0x237/0x580 [ 581.457452][T12874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.457473][T12874] ? find_held_lock+0x2b/0x80 [ 581.457515][T12874] ? find_held_lock+0x2b/0x80 [ 581.457532][T12874] ? hook_file_ioctl_common+0x145/0x410 [ 581.457554][T12874] ? __fget_files+0x20e/0x3c0 [ 581.457576][T12874] security_file_ioctl+0x9b/0x240 [ 581.457602][T12874] __x64_sys_ioctl+0xb7/0x210 [ 581.457627][T12874] do_syscall_64+0xcd/0x4c0 [ 581.457651][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.457668][T12874] RIP: 0033:0x7f2d2558ebe9 [ 581.457683][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.457699][T12874] RSP: 002b:00007f2d26481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.457715][T12874] RAX: ffffffffffffffda RBX: 00007f2d257c5fa0 RCX: 00007f2d2558ebe9 [ 581.457725][T12874] RDX: 0000200000000140 RSI: 0000000000005509 RDI: 0000000000000004 [ 581.457736][T12874] RBP: 00007f2d26481090 R08: 0000000000000000 R09: 0000000000000000 [ 581.457744][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.457753][T12874] R13: 00007f2d257c6038 R14: 00007f2d257c5fa0 R15: 00007ffe32f33ef8 [ 581.457776][T12874] [ 581.457792][T12874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.921112][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 582.136864][ T5966] usb 6-1: USB disconnect, device number 5 [ 582.257585][T12902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2166'. [ 582.281144][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 582.423212][T12902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 582.426272][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 582.429761][T12902] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 582.431172][T12902] vhci_hcd vhci_hcd.0: Device attached [ 582.439985][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.461315][ T24] usb 2-1: Product: syz [ 582.466541][ T24] usb 2-1: Manufacturer: syz [ 582.537287][ T24] usb 2-1: SerialNumber: syz [ 582.556068][ T24] usb 2-1: config 0 descriptor?? [ 582.568589][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 582.731321][ T9] usb 34-1: SetAddress Request (10) to port 0 [ 582.737624][ T9] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 582.884997][T12910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.909933][ T30] audit: type=1400 audit(1757417806.431:1036): avc: denied { remount } for pid=12911 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 582.910024][T12912] binder: Binderfs stats mode cannot be changed during a remount [ 583.147047][T12905] vhci_hcd: connection reset by peer [ 583.191991][ T36] vhci_hcd: stop threads [ 583.201199][ T36] vhci_hcd: release socket [ 583.437159][ T36] vhci_hcd: disconnect device [ 583.833116][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 583.886582][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 583.895518][ T24] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 584.094114][ T24] usb 2-1: USB disconnect, device number 17 [ 584.332430][ T36] Bluetooth: Error in BCSP hdr checksum [ 585.086666][ T30] audit: type=1400 audit(1757417808.611:1037): avc: denied { write } for pid=12928 comm="syz.0.2173" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.112290][T12929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2173'. [ 585.389565][ T30] audit: type=1400 audit(1757417808.911:1038): avc: denied { map } for pid=12934 comm="syz.4.2175" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 585.566239][ T30] audit: type=1400 audit(1757417808.911:1039): avc: denied { execute } for pid=12934 comm="syz.4.2175" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 585.695149][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'. [ 585.951132][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 586.061911][ T13] Bluetooth: Error in BCSP hdr checksum [ 586.201208][ T30] audit: type=1400 audit(1757417809.701:1040): avc: denied { setattr } for pid=12934 comm="syz.4.2175" name="L2TP/IPv6" dev="sockfs" ino=35551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.781283][ T5860] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 587.791868][ T9] usb 34-1: device descriptor read/8, error -110 [ 587.987037][T12955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.222409][ T9] usb usb34-port1: attempt power cycle [ 588.371329][T12961] lo speed is unknown, defaulting to 1000 [ 589.224950][T12962] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 589.262529][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2182'. [ 589.388253][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2182'. [ 589.432143][T12968] ======================================================= [ 589.432143][T12968] WARNING: The mand mount option has been deprecated and [ 589.432143][T12968] and is ignored by this kernel. Remove the mand [ 589.432143][T12968] option from the mount to silence this warning. [ 589.432143][T12968] ======================================================= [ 589.553610][T12972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.586170][T12972] comedi comedi3: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 589.590201][ T30] audit: type=1400 audit(1757417813.111:1041): avc: denied { mount } for pid=12959 comm="syz.0.2182" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 589.877318][ T9] usb usb34-port1: unable to enumerate USB device [ 589.995067][ T30] audit: type=1400 audit(1757417813.521:1042): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 590.290230][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 591.071289][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 591.089402][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 591.355728][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.374298][ T9] usb 4-1: Product: syz [ 591.388110][ T9] usb 4-1: Manufacturer: syz [ 591.391531][ T5967] iguanair 5-1:0.0: failed to get version [ 591.406693][ T5967] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 591.426475][ T5967] usb 5-1: USB disconnect, device number 12 [ 591.432461][ T6537] block nbd2: Possible stuck request ffff888026e25080: control (read@0,1024B). Runtime 180 seconds [ 591.443290][ T6537] block nbd2: Possible stuck request ffff888026e25240: control (read@1024,1024B). Runtime 180 seconds [ 591.454249][ T6537] block nbd2: Possible stuck request ffff888026e25400: control (read@2048,1024B). Runtime 180 seconds [ 591.465260][ T6537] block nbd2: Possible stuck request ffff888026e255c0: control (read@3072,1024B). Runtime 180 seconds [ 591.504951][ T9] usb 4-1: SerialNumber: syz [ 591.540577][ T9] usb 4-1: config 0 descriptor?? [ 591.600779][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 593.001092][ T30] audit: type=1400 audit(1757417816.381:1043): avc: denied { unlink } for pid=13001 comm="syz.4.2191" name="#1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.050107][T13008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2193'. [ 593.289223][T13008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 593.295773][T13008] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 593.402126][ T30] audit: type=1400 audit(1757417816.391:1044): avc: denied { mount } for pid=13001 comm="syz.4.2191" name="/" dev="overlay" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 593.447334][T13008] vhci_hcd vhci_hcd.0: Device attached [ 593.487175][ T30] audit: type=1400 audit(1757417816.391:1045): avc: denied { read } for pid=12998 comm="syz.1.2190" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 593.588166][ T30] audit: type=1400 audit(1757417816.391:1046): avc: denied { open } for pid=12998 comm="syz.1.2190" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 593.615015][ T9] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 593.622974][ T9] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 593.656751][ T9] usb 4-1: USB disconnect, device number 13 [ 593.677188][ T30] audit: type=1800 audit(1757417816.391:1047): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2191" name="bus" dev="overlay" ino=2305 res=0 errno=0 [ 593.711183][ T5857] usb 42-1: SetAddress Request (6) to port 0 [ 593.738039][ T5857] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 593.892644][T13015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.947221][ T30] audit: type=1400 audit(1757417817.461:1048): avc: denied { mount } for pid=13005 comm="syz.0.2194" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 593.970380][ T31] INFO: task syz.2.1700:11239 blocked for more than 144 seconds. [ 593.978696][ T31] Not tainted syzkaller #0 [ 593.984077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.001122][ T31] task:syz.2.1700 state:D stack:27000 pid:11239 tgid:11228 ppid:5848 task_flags:0x400140 flags:0x00004004 [ 594.017549][ T31] Call Trace: [ 594.020917][ T31] [ 594.024098][ T31] __schedule+0x1190/0x5de0 [ 594.028752][T13010] vhci_hcd: connection reset by peer [ 594.037549][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 594.042727][ T31] ? __pfx___schedule+0x10/0x10 [ 594.047676][ T31] ? find_held_lock+0x2b/0x80 [ 594.210192][ T36] vhci_hcd: stop threads [ 594.217595][ T36] vhci_hcd: release socket [ 594.220437][ T31] ? schedule+0x2d7/0x3a0 [ 594.234475][ T36] vhci_hcd: disconnect device [ 594.251120][ T31] ? bdev_open+0xa2/0xe40 [ 594.261214][ T31] schedule+0xe7/0x3a0 [ 594.268864][ T31] schedule_preempt_disabled+0x13/0x30 [ 594.280700][ T31] __mutex_lock+0x81b/0x1060 [ 594.289789][ T31] ? bdev_open+0xa2/0xe40 [ 594.294363][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 594.300399][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 594.309649][ T31] ? file_init_path+0x5e8/0x760 [ 594.314686][ T31] ? bdev_open+0xa2/0xe40 [ 594.319165][ T31] bdev_open+0xa2/0xe40 [ 594.326329][ T31] bdev_file_open_by_dev+0x182/0x210 [ 594.334899][ T31] setup_bdev_super+0x39b/0x730 [ 594.339818][ T31] get_tree_bdev_flags+0x363/0x620 [ 594.349924][ T31] ? __pfx_minix_fill_super+0x10/0x10 [ 594.356808][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 594.364167][ T31] ? security_capable+0xb0/0x260 [ 594.370160][ T31] ? bpf_lsm_capable+0x9/0x10 [ 594.375588][ T31] ? security_capable+0x7e/0x260 [ 594.387739][ T31] vfs_get_tree+0x8b/0x340 [ 594.392504][ T31] path_mount+0x1513/0x2000 [ 594.397226][ T31] ? __pfx_path_mount+0x10/0x10 [ 594.404322][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 594.410620][ T31] ? putname+0x154/0x1a0 [ 594.415608][ T31] ? putname+0x154/0x1a0 [ 594.427108][ T31] ? __x64_sys_mount+0x28d/0x310 [ 594.496908][ T31] __x64_sys_mount+0x28d/0x310 [ 594.504903][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 594.512707][ T31] do_syscall_64+0xcd/0x4c0 [ 594.519003][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.526995][ T31] RIP: 0033:0x7f93f0f8ebe9 [ 594.540816][ T31] RSP: 002b:00007f93ef1ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 594.571147][ T31] RAX: ffffffffffffffda RBX: 00007f93f11c6180 RCX: 00007f93f0f8ebe9 [ 594.579899][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00002000000000c0 [ 594.589750][ T31] RBP: 00007f93f1011e19 R08: 0000000000000000 R09: 0000000000000000 [ 594.598123][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.606310][ T31] R13: 00007f93f11c6218 R14: 00007f93f11c6180 R15: 00007ffe032e41f8 [ 594.614501][ T31] [ 594.617614][ T31] [ 594.617614][ T31] Showing all locks held in the system: [ 594.628424][ T31] 1 lock held by khungtaskd/31: [ 594.635907][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 594.646056][ T31] 2 locks held by getty/5612: [ 594.650786][ T31] #0: ffff88803205c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 594.672481][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 594.683054][ T31] 5 locks held by kworker/0:3/5857: [ 594.689814][ T31] #0: ffff888022abc148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 594.700860][ T31] #1: ffffc90003167d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 594.712212][ T31] #2: ffff88802a7c1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 594.721488][ T31] #3: ffff888146714518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 594.731724][ T31] #4: ffff888145b4c168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 594.741750][ T31] 1 lock held by udevd/6170: [ 594.746389][ T31] #0: ffff888026ced358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 594.756218][ T31] 2 locks held by kworker/u8:12/10708: [ 594.761961][ T31] #0: ffff88801f3dd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 594.773267][ T31] #1: ffffc90005627d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 594.784913][ T31] 2 locks held by syz.2.1700/11239: [ 594.791238][ T31] #0: ffff888052a1a0e0 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 594.801480][ T31] #1: ffff888026ced358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 594.810744][ T31] [ 594.814115][ T31] ============================================= [ 594.814115][ T31] [ 594.827134][ T31] NMI backtrace for cpu 0 [ 594.827150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 594.827170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.827180][ T31] Call Trace: [ 594.827186][ T31] [ 594.827193][ T31] dump_stack_lvl+0x116/0x1f0 [ 594.827224][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 594.827242][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.827270][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 594.827289][ T31] watchdog+0xf0e/0x1260 [ 594.827313][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.827330][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.827351][ T31] ? __kthread_parkme+0x19e/0x250 [ 594.827378][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.827396][ T31] kthread+0x3c2/0x780 [ 594.827413][ T31] ? __pfx_kthread+0x10/0x10 [ 594.827431][ T31] ? rcu_is_watching+0x12/0xc0 [ 594.827452][ T31] ? __pfx_kthread+0x10/0x10 [ 594.827470][ T31] ret_from_fork+0x5d4/0x6f0 [ 594.827485][ T31] ? __pfx_kthread+0x10/0x10 [ 594.827502][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.827535][ T31] [ 594.827541][ T31] Sending NMI from CPU 0 to CPUs 1: [ 594.943970][ C1] NMI backtrace for cpu 1 [ 594.943986][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 594.944003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.944011][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 594.944032][ C1] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 594.944044][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 594.944056][ C1] RAX: 00000000022d1f7d RBX: 0000000000000001 RCX: ffffffff8b945c29 [ 594.944065][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 594.944073][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 594.944081][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 594.944089][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 594.944097][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 594.944110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.944119][ C1] CR2: 00007ffdf5845ff8 CR3: 000000005e72f000 CR4: 00000000003526f0 [ 594.944127][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.944134][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 594.944142][ C1] Call Trace: [ 594.944147][ C1] [ 594.944152][ C1] default_idle+0x13/0x20 [ 594.944170][ C1] default_idle_call+0x6d/0xb0 [ 594.944186][ C1] do_idle+0x391/0x510 [ 594.944203][ C1] ? __pfx_do_idle+0x10/0x10 [ 594.944218][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 594.944234][ C1] cpu_startup_entry+0x4f/0x60 [ 594.944253][ C1] start_secondary+0x21d/0x2b0 [ 594.944272][ C1] ? __pfx_start_secondary+0x10/0x10 [ 594.944291][ C1] common_startup_64+0x13e/0x148 [ 594.944309][ C1] [ 594.945920][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 595.137693][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 595.146770][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.156794][ T31] Call Trace: [ 595.160045][ T31] [ 595.162948][ T31] dump_stack_lvl+0x3d/0x1f0 [ 595.167516][ T31] vpanic+0x6e8/0x7a0 [ 595.171472][ T31] ? __pfx_vpanic+0x10/0x10 [ 595.175964][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 595.181927][ T31] panic+0xca/0xd0 [ 595.185633][ T31] ? __pfx_panic+0x10/0x10 [ 595.190031][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 595.195378][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 595.201523][ T31] ? watchdog+0xd78/0x1260 [ 595.205926][ T31] ? watchdog+0xd6b/0x1260 [ 595.210322][ T31] watchdog+0xd89/0x1260 [ 595.214538][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.219183][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.224369][ T31] ? __kthread_parkme+0x19e/0x250 [ 595.229376][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.234023][ T31] kthread+0x3c2/0x780 [ 595.238060][ T31] ? __pfx_kthread+0x10/0x10 [ 595.242632][ T31] ? rcu_is_watching+0x12/0xc0 [ 595.247381][ T31] ? __pfx_kthread+0x10/0x10 [ 595.251941][ T31] ret_from_fork+0x5d4/0x6f0 [ 595.256500][ T31] ? __pfx_kthread+0x10/0x10 [ 595.261063][ T31] ret_from_fork_asm+0x1a/0x30 [ 595.265805][ T31] [ 595.269009][ T31] Kernel Offset: disabled [ 595.273304][ T31] Rebooting in 86400 seconds..