last executing test programs: 3m51.703578971s ago: executing program 1 (id=1050): r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000027c0)={0x1, 0xe1a5, 0xd, 0x80000}) 3m51.527508602s ago: executing program 1 (id=1052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(r1, &(0x7f0000000180)='./file1/file2\x00', 0x24) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/70, 0x1000, 0x1000}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYRESHEX=r7, @ANYRES64=r3, @ANYRES64=r10, @ANYRES64=r5, @ANYRES16=r9], 0x84}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r13, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 3m50.922267583s ago: executing program 1 (id=1053): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000800010000001a"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m48.325888331s ago: executing program 1 (id=1062): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001940)="6292988c6f985269926fff98016dcb2571b447ffc260564132fa187c773fcd8d2f1375d4345cafda174b46251678efa25d459497656a60f02e3d0a224894b8ad476e1f71aa533a18a7073ab746af023c7698ed416ea33ad79ac7ad51db0283ab4c10e2b6a396d25f3aa5d402d1c8120e9e", 0x71}, {&(0x7f0000000480)="198fa1c4bcbb73f9cde0c98bacd6c6404d02883c5e43368b284209cd8957dd7784197058ae514701dc5c1e26e4e0754d4d2e8d1b65f066bebb", 0x39}, {&(0x7f0000001a00)}, {&(0x7f0000002a80)="d1e865c1a4aa7d72497f8d1f79cfbb2f53a05ae8fcab162eb6e79865baf59ad786ea81a09727ad6f6a57401d92f6b1c55610b9e59a9149aa812596cbe8bbd3ea62793602e6f3b4f660112bd0c675e5be1765dc57f243cdb71e6c2e9c0331f6c1358adbdd74dcac4a456a2a605bc24e0998492c849cad96ae025636962c15130f87f981228cb1bb06dc25c3b9fa0002963c55fa0fd6dbe70151eea002dc8a27c13307e096065fe8798ac0c586f712dea1bc8a4b1cd216b28d8108f7739a49b0a4f6b569fbc0dd3e94933dac7578a6ca5ce4fd2492c75498691889b98b0036787aa85ec08f28e1", 0xe6}, {&(0x7f0000000700)}, {&(0x7f0000002c00)="44dc32117a076ceec5c7d7eb9bbf288135a5d633fcd14b5abd11185d1019f25c07da4105f132bfc3fe5de542f12bed454bd708b34ead18eb8e1a78c2b0f19fd18d8fa0af9a770e84e37190cf9fc2e77d57ed6be7d47b0563189685e9b6d7a7", 0x5f}], 0x6, &(0x7f0000002e80)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{&(0x7f0000002ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f40)="58610bad9b5e2a944c749552609db7984a47828b89c842954fb4930029c641491e4ae0af8aaaea5b3b5bdb9790451b00f7d9365cfd44ff636836c8eccc6ec535d344546801fb8c0537c7abcbb04ba4abad23db21a0123823b3c7bbd78caa7b9ee21fef0da495957dc203f9dfc910984239216b29dea150f0d529d356b94806d340cf44a87fac52a1b1c7f072d256ebabcc4f993248803cfd9c5fc40792b27cd8c4f9e747bd888c61790328d17af5779767f1e0ca93adf23dab834cb0d2f7a7e64da3", 0xc2}, {&(0x7f0000003040)="43b7d59ee3f98b3157f2c0d567f9b1c6d531b3", 0x13}], 0x2, &(0x7f0000003240)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68, 0x4}}, {{&(0x7f00000032c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003340)="e629a223e7bbf3ab5a1f48f46e3cb4c5ffb611887f", 0x15}, {&(0x7f0000003380)="10740d8427b60dcf4439e5de5080820d988c58de04918d6ff73a7e01c816205fc67ed9f6494c84d6fa9fa02304130de48b92b49239ee79aa5122ea2bcff95746d69f82758a799fa7fc3d093c18bc99dfd04fc7437ab125bd40d63125004d7ff663bb47039581fc073a255d55ad4239f8658f256cbfb63d19c8f23cfa3b", 0x7d}, {&(0x7f0000003400)="d0c708a3d754e62ccae0c589841750ea2ef960fb53b98c18c77ae34ecd9e55d7f5623c7aa86f232fdd90833085353b62666557be5296a3b810b1", 0x3a}, {&(0x7f0000003440)="ca496ce1a5dbf098bd4bbe8248af92c857404877c1d0194db6e1139538aaad6c8b8eed82be76dca573afacd87994a39326d8714a7ec5ee7afd5496012c830fc08303d949e6b8f2b724e0972349b0754c009514a62b1ab0cc3e0874f957e10cc975713cea9954e8fed6d3a44b0180bb913e871f2cc36902509127d3eb6d673bab072719af17b5561ad0b1379d51c9bc71c3b24456efa48ab6af98fc4c5c6806102d", 0xa1}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f0000003540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004740)=[{&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="b59083f2fb83ecaaab354e6dc2cfcba2a0f85bfb8d6a2107a18bfa786fcddfc4e116bb9578510ead1dda46a86c21b42b19ef56dc7a8f294f3c284f3d19851601f4b8ce3b7e43ab991fb707d3ec5a059a520de9c1edb1f5e139a757714c44886002161ecacce0e7d549ba4554cad6a7932c9c318ce6bc7c299c9f83f0e09bb6222f385e65f2727cd557d0755ecc33f9c1289729872d2781823ab678cd2dfd67dbfdfa476855bfd893410f532346a22350219ff9e2ea96", 0xb6}, {&(0x7f0000004680)="6adde4f9ea363340561f014de2a2e7a12e4f739b6305b05f14156aadf3e33f3fc3e366c9d4d4fcbf5222a15939df4866649cf2ba58ba9f85ff3a038c48cf17c1b0b246311e4dc9d919ce677eb2382061a2a24fb35946f8d0f0c65cfb4c2cc3b78b8bca7b4282b55853c7af22ff3510f1e4580ee90f2fff2e872cb7d23175fa993c649f", 0x83}], 0x3, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000004780)="368f37cd2d016dc5b6998b5ed3c0d20c9a4d4f33d1d6df02bbd5a49c5d90447d5795cd3bd6b073cd1bf30542c51f461a4b11c509b65e4b5195c419fe28d8ef1562ef548b8af63a6ced4e43c815e8c4068f650b9e671778cb1810f19bfc145163ce07ec65bb80774af614228b6b1c393fe07b5297043845f0fd5d2d0532819be79c94a79b669b888d18fa7a1fc22690549886dc89e338a9d83ed7cd2bf87405f44cc0d30bbebd800743e75abe5ecf9f177785c4b8696c45662d07751f171adbb2667a8a54c31d89e5cd479201bc7ad606d44a63da13f5abcbcce53aeda2", 0xdd}, {&(0x7f0000004880)="73556988da2ece1c21f12647a3fbcadbd8ea0f60742e6d7863e4b10e2e9edeaeae7137eda0fe2503a512df69dfeee0a5dd55abf0c7e3b6fe49a9950e4a7e6b075b080f1fff7477d75db7630fbd6531cf77d0049b1b9b918a88b16b5750733d2161f37ee6bde1783ba8723ea827", 0x6d}, {&(0x7f0000004900)="65a008d9a28ceaf23a28cd8773ae087b0e635265a30169", 0x17}, {&(0x7f0000004940)="fea391dd4ef8bb3f5331ee1c838d68c0e103724166f4843446283f9764e2218a43e9825c1d3b6b8c74435189cac1ec7decec9c987d60caf6530f82a4614101c604f4ad7aaebc6d1aedd17399bb7a4fac3c1996f210af6a9bcc67dcba8de55f10f10b044e9d45904b74758bf75ee005cf9575a4a41c045547e5c6dfc355bfe037922dd0e2b27a50d91e3e5cd6ed203fc34b6026eb612e77caa4671a14b46cb36770f9de45608e60f4a3553b6ad73fd20c9191a2ff4f83482c080437bfb4a7c5a5a5e13a0e35f792258352a2b4ccca9f0cd96244cd56152786ba", 0xd9}, {&(0x7f0000004a40)="c918b640839ccc4b0c798500f5a9", 0xe}, {&(0x7f0000004a80)="da1051a18cc586a04746bba2c95e97233c8303255b59755b33d55ba68d887b2ae261ea9f816d02a622b95bb1054a3dfc878ae9faa63a", 0x36}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="66636eaad2808c21aec7604bb0f1ba6bd947e003894a90623654ba53eb3bf71b982e535e066ac9f29b078d4ca744800d67ce8e862c460959a12d34", 0x3b}], 0x8, &(0x7f0000005d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40}}, {{&(0x7f0000005d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000005dc0)="bad131b69832d7c79f35a7b936da34e08884608b2946b10e5da450110454c632fa5d217e99f10a631b0110fb2f4079744e5035508e24ab03f49a47feacffb57fc46cabff3abc24a31b25b2883ecce6c0d8b8e11d75660e967f1f948ae61b6a71a7a6bec813dbaeac25e5f5af1d7d27a0168337e116fe46a90a98fdb7ef", 0x7d}, {&(0x7f0000005e80)="0eb8d4475a08e4ffb29ce8c8e6c45050ac66055dfde72341ebff0bd7de7a25d85c4eda30708122e3b77b1eabbb13e4ebcb13d3fd9adb0f60a1fa6b420ad0d869ada67d2adc4f32ea55724b63e7c88eb87de201fdb33227f78b7e054acfd18aab58676a6130cd55913e79c62c24f4e71828a62cbde57433e1f75a2cddf7cd5310741a1495de52bbb1193afe3194fdedc0a5bff7f19b5083dfdfb450c356c4351d93ce7f642a4377b25f0e6154a9ec87ce34e805176e3fbd2c15e7e491e6ce5d177f58", 0xc2}, {&(0x7f0000005f80)="dd8324b39dbc937746eacb1b668170217f93b94261b9d64fcaa1df6fe73bc41991cbd767761a915a712dd1c5554c95035d8cf1571840362aac8092b6cd1dced616bb536c37aa9124c2425b41a7bc5e3390f82cc34d326988d0c149b8f2a4562f80308df76d22b7c9cb089cbbc9a756a8a8b830b2ead339b30c61d1", 0x7b}], 0x3, &(0x7f0000006100)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18, 0x4008001}}, {{&(0x7f0000006140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006340)=[{&(0x7f00000061c0)="cc453c8259a0e87d41971b07b949adfae73adc0de762fc58fbd1da7e260e302dd9841041b639951fffc6dd9727c1d15097082a4ce5bd3fa81676651e7765a8fd83fef22d20a6c839c9947641425baf55ca2520f6996969a2cf2c2ea814ee7cf0c6c3d0b868961358bc32d08c8e8760fc0fb761d112681e15685321b7", 0x7c}, {&(0x7f00000062c0)}], 0x2, &(0x7f00000063c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r1, r1]}}], 0x30, 0x40}}], 0x8, 0x40010) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@hyper}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) 3m47.207665907s ago: executing program 1 (id=1065): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffc, 0x29, 0x20000000, 0x0, 0x2a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xb}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, &(0x7f0000000180)) unlinkat(r7, &(0x7f0000000280)='./file0\x00', 0x200) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r6, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) epoll_pwait2(r1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@pktinfo={{0x24, 0x29, 0x3e, {@loopback}}}], 0x28}, 0x40) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m44.132625108s ago: executing program 1 (id=1074): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x6, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[], 0x42) 3m28.856934032s ago: executing program 32 (id=1074): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x6, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0x9b, 0x4, 0x3, 0x0, 0x0, 0x2, 0x6, 0x44, 0x0, [0x0, 0x800001]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[], 0x42) 15.638318815s ago: executing program 5 (id=1849): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffdfc, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 15.398642575s ago: executing program 5 (id=1850): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x8, 0x14, 0x40, 0x403, 0x6010, 0x172f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0xf4, 0x85}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x7, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x1, 0x2a}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x7, 0x9, 0xb6, 0x20, 0xd}, 0x34, &(0x7f0000000540)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xfe, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x871}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "876f0d591eb52e5f70fe7f1e4b923e0b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6c, 0x0, 0x8000}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40e}}, {0xb0, &(0x7f00000005c0)=@string={0xb0, 0x3, "577cde4f5847b0cd66571533dccdebbb238658fab0e40b90bd1e72d040656712411bcbf27a623279e44ba0f093c492a29b0f5962d542dc8813a2b7dba4bc070050a0e7ec5aca73a04a1a26f307ee0d90ca6dde8a27223fee778fa020e6eaf744df6ab2ee6d590c3ff6116473341e4b63bdc5e3c6e144eb86dae4053cc9956391f5e6627c89cee1f258d488bd82c7ff37b14469f62c8bafc359719c9816bc9737511444024fb5a4ff9e495eda153c"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@local, @broadcast, 0x0}, &(0x7f0000000400)=0xc) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000ec0)={0x1494, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0xf, 0x4, 0xe, 0x5, {0x4e24, 0x4e20, [0x4, 0x2, 0x4, 0x7], [0x4, 0x5, 0x80, 0x4a], r3, [0xc]}, 0x7, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "bbd8408e422e3e886aa65d6353457be0e46c5f259f3694673df5f87beb81d964cc9ec1c8cdb80c76589e799ec0c5107bd664a2e84be76902f0c4d710b6f28dff3147125e9094be9fde267b65806580008695a9b4c5c5fa060c5b98d88191cf9a60668e55b69bda108a1baa0a454357bba9c4b6f7a2b2ad40075ed86ebdfbf3ea3c66e204a585555c882b05733c27c03505b9a8e476d223d488b16db548dc47ce6b99fa689c61890703e438133416ae5d4c3725c93e538d2d772d3d81278faa06a1"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "f1951d2036828f7ed22d4f2ee1382ee9d6df94"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "33c35240390f0b51cad870628cab84f92f35569aeebd800622b4769c27e462525df6e9ee694a85eb5588b7c86fd120605545658044e4324731603ed17c534dd4fb999717e0d44a7ce7a6b60773217e1e4bf98dada35c1052a9ea4a1edd733ab5506569"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "77b47660a88630bfe3c62f9aaa223a14f8cd2644e17543f37325f972ac9bbec2fee2918ef295e07b742453d2999048a45ed756eabe73f73ad68875c6e3e8e113159829e49c4db582478604d5e3b91b27560c349efa9caadfbffefeb1b799c876b8453af2ea0a60d507808b51f6e57ecd466c23149ef76c248a98e637e057476e728d1477f66ff411b326f8fdf1c3b2f4768a0258f243566c61bdae4ca0bbbd0f7dc602a3971d"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "18618c6a653769fd9daa6db4c9a92b8757f8cfc0aeafd2d6b2f4cbdb0804d4ef27700ace63cbece25d4fa6dd95f7e25960e069563bdacdd58c04e31dee5d7767dc305e5ee8e87db7968002327aa1b1dbdad0283b38ba0e8af365173b85f3fe0f540fa7f4d39db240e4694209ff71095dd8328de1715c216cbfc259b05299c52f0713d9b3bb79cd136756617e3c3df10bde10"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "fb3a495bddbfd45d30e6d9a5eb264f1b729c7efd94a6169894829741"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "22408873c4c4abbea5240f90c6ccc2846bc6645d37272b06709a7750b2676c5aa131da813a99e4205fa547e04b106be1ab5af4b7cb7d524d4bddf9e9c72a1928480f154534807074436e7c330edeea6689d5cffd3b1f1c206570a3796b80acfbf6a5da92e87e158570fcfd2fd76181b9960a3b256d0e03190627ef994e7b612f7df60c7630104337bffdae000ae44eef38a76f2e9687732dfa37ce4a75283b90af378914906e5be1f2dcb2d5e2f3ec46c20d24745c49953f6530ab9b0c846045bf876e80b5ed8f1f64ed1f43d974b994bdf3476a7a997a83fb806ac2ecef9186a25b0ceae14d1c31b9d2303cda0c56b18aafc5870a926e598c505a6186f7a2a35b61c3c341c0bacf97900fc9006e0e62ee966581e671606981a406a11fb961a200e0ebb72fd1b773abce71cd3b70da649577b950481d82c534743d70c5e75d2163f3e1f88daf376d75a2ea2e88c1c6c407080e13f7ec1a38ebfcb4b725f8e84b3c91565b4e32059aedabddc68e0a78181f813dc1c9c8d65cf3e28a11a6ced075ca493133225fd1b50e7cb2f2f241beb79bdeb4bac2d0cb00463dc4b0a3a20289c4cd472dc0afe9ff97606e384813d2a94478e1b49be7672aa1a18c84ac95e7b821cb12f86484ba9f0ec8fb987e6ad40623547e50d916cef876a0c8ec1865799db1ac50bfd156c9d9e1e368e77a836f93b91cfcbdc5bb1e446df28d3fc6ce716eec10a2c4975ea2164d5fee0da26b60e4ac5bd3cc211af347b108ed3035c031671240302ab1ed85391d3c1dd4b48710c3213d1edcc30de1a05ac9cb0aea36aa24bf72378dae79035b6b1f9a8c8c3883db1ef899f7902231cfaf185f77c8a6bce904907bd3d7a2abbf5cfa8d7b84e87d5411a1ee8d827a39753465fc8f2dfa641949fa03775aaee935013bc3d52212af7bd0be01fcb174ad1d9308657a1c0c6907c7b123e83b32440f6ec370d28f8e098b5f94ca834ddccf4f6f3bd9dab8f40ec94f1f0ac932b06dd7279ed063e62d4e7ec25cf18007679ec0c7fd624a13df9951fd2fcbaf611d4d8ef625a0d3d16755b24521dae7474483c410b02ddd0fb6131fcb42308c2b209c10201fc76f32b314347c1185ff0e2c9e0846f9fafa9102b1206b1adb88bab13a5735d04cc6a5ef55ef5b5aabaac42b7080b988ff0ac3460eb21e2d27ff2adf3f9b738a05a51640e835d385fa41201cd290acc58121832edbde3de2bcdab84bf1c85fbee160e6d708aa7f69116144370c2c63639cac34e68b7d34fc591d5e3aeee443a6333700085efa91034b4c95dd731da93fab88bc7f33126eb1b78eabe8e222c07d36ed3be2d0710fd5c41bd4556b300b237b96cb78d9461cb5f019b55277bdfb4c0167e4300d2e4b8ce0d491080c61bab1b07731b6a319c7f39014dfd91dad3d7af0558bd296352fb1ea8d7f2d1d94cbbad54476d3f11a7f8c4f9b9630441b247fe976f0e25f5897adf6cc74924b3db2aca473051a6b35008f0ae983c8ccacd1429279646609d475ea6bb59f89aab0f8febd652c1f8c069bab197c008e045163226f798d32dac8ce1beaedba4823ac8d01cacc7388afd446764a929fc33220ef9ad2238de413873a10aeddf4ab93a2d14dee1720183f1bebb093c24ec9712a698137503444aaacbb52d91c2b40da48ae0fb01d6eaa2d1e6cc891f9c59938de3d44cc37c03f5a510b08a947b0ddb7923a1ff5ff94f8cbd4018ba99cbe8014c72b989eff7e48ccebe70a427294eec7ab22f7dc2f62494a57294e043b827a3d0e9c7d87d289e13274d8c9f041888df7b0b5a3f40c61f5da5de6539925c0c43c8c583b8d65d2805e50af490f9c786680b457fe59a16affacaf77a276297de16a73dc82108aa153982e92f10f1251228993aa348ca558feb707044099ccd3ec17a0d598d28ecc81d1d228769260c18452150290007f2fa152a50affa8160d575944cc5570fc8087bc2be6cb7558bf3dcc791aea9564263e057fa21699698e2e03c8731e13940675079a75965a58eebf492ab2688bfa9642f6c9dae25104fc6bdb4dd3b4b4c65e56e000a36709b216982ae4a4be6650669c1e9833c7e26193a2a617501b7fdbd69da34b3e13ecedd3caac782bc745d2e609c600e84028a1ac82d30b52552fdc38c043db5b749b9a18f698e74e47064451bdf4a0268f589c2a6bafb82eec9130ef3166ea33ab6e6e7b2cf448afd3d158ddacc67b059f63c4eeef247b0158663ed2782ef73b587708318a4224258dfa4241456d60222305efeb6ecfc60e9a891778ef34e7b8efce19faf081e25babdd4862bd9b505e7711299106a07694eb07f1628ff9e95301cb1ca959950bf171c97617ecbdbcbaf0b4f9218bea9dbbac63faca30127a6a0ecc38f239defbc730833fb3937ca3458e135ae6f311ad4d22e1192d700ac5e4c5cf0c4c2017694e9e80284f0d2b2677eef9a87548b9197e76e1f334792358a8e2a4d70d264477643f32a0f315b88efbd2d63bb745f516f96217791790b68153c25d53e187cb811b02739d8765deb0a3ec6e613450d4d52c1a7fc784ac0fffa9cfd7097ae1fde9d723eb2529bb066875dd472cee90f420e14dd350a1a998ad854811f7b3b69b4672dd88c8881ccf57454093f9836f99dfa2ac5f842373b9452913658e7ce31f856902a7ea0c534d1a3b52148fdd377cd91ee910b0c9c10d4a9a6e138a8f11baf775ee8d72f00e3e718cca2a49fe13cc728e01fc6bc9b01b50aeca02061caa1f95d14852bcf8823717ba03da9f250adab49499bf4fc18565a51ad8efd5df3808133e4da111ba7f1615c48cdbdd63a665e4bebf9a01b00b3811f1ec46b9e642c2d40413db08313af9c66e414c330510eeb89578d33916fbaf2d25562ac4fb0170a87f855caebb0e599164a4c659bfbdd59f36cfc9d1f467668218ac9f84f95e347894926ae563a24543c68b316aab20f84e0557ffc2c3cc06447b62cb1bf79b081fe72620b95a68aa81eeaee9be7a86c2ed9ca1b9c089ccf72acce0dbabef1c56e727a8f0b1411714dfd581b08ffa2c9b4d71fa33961b733d80c6a9c190bbd27f2badf041ee5c8f3c13eafd33027ab38cbb50db2c60ea1e057ac903d25cd34138f2ff88443db037113d73b4b9ee75eb712d305a60cbab2c69f006881dd58fa6ed365f71e2210c5dd5c41c2c0181db7faf9dfe453e03a0b469691690a98537f9b256558836b2ed6dc8f302a6e66744d0df7e81670da63844b463d43a7a3f6de40bb6e818b887cc939ff4bc38b010b80caebdca609e8a1fc6d33e5634b0137ad626243db6f818de1f8edd70115514cdb378b3ef75859f5f87fbed266b623e90f0985d8d38f8f3d77b5b0216529d8260edb20281ffa0384910e9fd434b02ca454608ddf00f3f4126687c9a173a410ffcc4f28201a66f745e5117bdafac8a2a70f81672715d205c5121dbb25e0dd6b020aff261798040e398f53dc25bfbf5e6b916faff99d8a4b57cba764bba5dfd56cb6c20da9e5f0c67b1697c3a51d84336d19471da30d7456c1ef847a4421b17fb0c0b800b1f7021abe21aa86f3230b690939677248b8cb72f12de26f53341d9a898046b405851f3ff6209be77bd04ad02126466b1c6d3240628705b6f67afda9f4a4799a04fa868790c3239b9ccac0d9048c11fed0b6c72590935db97cb311214badfbbe5e4d8b8a824173180cab7ca3b578f887cc7cb7db7d9584d6a2f739f684f7fa82dd561720fee86a9805840179984d0953187deae5c46a3a14ea20aa5c1871ae53eadb9e133a98dea9447b6be3b6e313d86156b8cd217a394dd49e117364a69461bca701fe328586657142929ce4b29ceda8899399a4b42762b7044ba706d7b0397a153992d8174e4422c9608ed73225347828f114d7fc64951bc01673d626ce2e2d5636d61e05b790d4e03abd3cd8c372dfb615e7e3b1f2d926d653331442052c700b8eca14e1759eff9069eace9d1f66bc89c8fa3367347312b77f322ee8392960c269ecf33916062f884846945377df81132ca75d6e2f655e6cd2ee910f75e1e324a6f120e739ff22774b64a0e6c36116d1a8aa615ec0a3327b01e0f0c360d09e4d571b6fb8ebc22a5a9b20c4d5b3591468ee93fa38e7b65b80950cfa5338e5f912668cd2219e1f783521e1f98ae3e23f5a5d1bf52376a5ba69dcb8befe6e42cfb9b0bec591291bb49ac20a726e3c7d454c363f65e835a7ca9b2ab8abbfd2b4fda28d183ab3540ba77720fffb67658f4a7e094c095fe0ffc7d6ea504b165a555eef2046f9f9684f9fe472cd83578df5340f5bfbe83bc0dd71b25b4cc82c0edb0ad3c44f67378e1888d634cec473e1feba0a46d695bc562134df65d69190aab95cad404410db3ae980a6fadc4b65f5dc26d5193bdc87a36a27d0f7f9175c6439c6833deac8f7f5229869d5ec180871ce9abea7982f13468d333001d4f4e79ac8e63601aedafd363c738d4b3317472e8d4dc08db992657fd23d17f49fd53e6fb8539af08f571dc484812c6999990c52099cb04807202fdb1ac299567d8fe539322fbae4df6d684b8351371d9221b7763acf77952e445a77dc12ee8146f27cf109d36c6d2527d0803b3bdc14b305b502fb32d888417264c83e2c51c33971a9cb506ad88133d4d809257b23baa1436eeebbac17ac41b133374cdda157e77427c94aac35fd8e816e913220045f300f5509b7649e7d68f39eaa451cd47d3ba684bd6c13f39d2eedd40088faa55e4d08c6d522e25db22840756056b9a72ac103199413326dab27318418884a629e24c1dacf33ffdc7b119cbbd11bf8fbacea2e1d24f1da1978cc8994a2462d9d1ad072045e4752bf2035161f6058f3e2bf7a1b40608f4fa7bd70e2b86baf5a756e88e34d1df0cb80324dfd768312e1640b0a991efe453e33b168ee5a1f0d821e0df75453464003c865463e2e0b8dfe63281e55929804781682f4e7201c9226be1f561ca5d60572b1f0675e0f96dbcbc0d90f063e9b0c0da9655a63107440735e43bcc4559c0abab7f486675b8dc39f47ec799fa1a1be755cc671e2ea4efbe79fbbda55a0950e96d2756376b7165bdd5accfaffe21a0759e1b6b81c479a51bc4dc478a30c13f7da1d3fa68eced3c85fd505a953531c24120294bc11b8b4f03b3c64ae28911ec8228e599352f2619a3aa5af5650d0b5ca17b41bd2592ad469e23dba715e101beefc10f00e88dfc5e7159373bc711ccdaaf492f331004108f0ffeecf0ae0012c876458d38a0896129370526e75e55776d473f96b0b35e2992b8cb75013031aed88f3d5dbd07c24e7523d93e302eeff2c3c8605774033746a8f0b49963f55841fd5d4f5c0256a66f249ba2b4de4948c6e39906331478512942808256a721b683837cc45a0858a4e2b46e9c9dbc3a1fd87bbc59f9751eea2dedefabcda0e3115ec61260a8b0acc6ac661ea78e6ae4746ba686b04079d43f6f24227f20dc2a002dd4cdfd233391ce485c6b38f8746127e6c7ed05b51147e97f44efc0a764908420eb84bbe5455ef58f582a19323d8d5e1ebbb0e201ceb01e434919e89d5aebb5a881a58852d1f61037fe13e6f7950f60b7c2fd2994fdde28958b08c73d07c73464fa008a6cb33b670a7c2981abfd22474245ef51f80151e111e6cf61e873040a48b66b0ef1b07c716fe921739917e30280cb7a26c9265752e7b04ef587455173d467eeba64a8d5fa3dd6e71cab3a17fb6135f7d9276b2ddc6065ccf18b43131a27d29b9d2b12ece0835858c0320038119ad767b7dbe8eefa94bbd54f7c12026f84d8b842ad5d58ffa20cd3"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "a5487b90f623ad8fcfd1ff9cf03542d4c3d2a5b6b55acead2be1300f114013b0eeae6453ca6499134f924f73c4b9bae891736c4e1b86ffc6b9386d88405fab9f07415023037403e44ed225d7d79796af0829d838393a2284011ec5b84d590c551d1fc1f3d39670b553c3f02e82c6d0a03464d123fdeacb651b885821d33df8f7a51a2ad62dcec6b70e2fefcc8e873334c46d"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "b5902a574d810f66e931adcc164329b70e0dfc1aaff8e4c1708d8927b1b453b0580a86314e571d4e83b11eee74ace6894cd5d40d593b29c4d77b8511c7f48f05986af2d8e9988a886f12324ddf7016723c23cdc26331e6ea2914c575e3ab3c6fb894147fab02f4324c390fb7b1949fa893c06d85210b3a09eff5a47ee69c93d22a7186dee638fb256ec905ba2e0783102eae37d731c8c4972cb3086dac6e474d81ec2f0cade39136a4ea6ce26c06b3ecb564050d6b52bd72b268e901cfc9206a03f56090bc4b033d35b869510d79a946a6803fa2e24d86e1231b42f485a2dfcc208bbb6490a9ac988d3a19e26ae66a0f55dc30bdb2585ee47b61"}]}, 0x1494}}, 0x200400c0) syz_usb_disconnect(r0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xee, 0x533c009c}, 0x5}, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d952c8085e047507d6f60102030109023f0001000000040904cd0005ff277f0009050b08100004040909050900200002fdff09050c0010000609430905060020000e030509050110ff030005042dead09d83f5a75e3e6201512b26ef5c4b1530704c3884de8c6a3cb77bbcfdc65def035f94afa1750daade88e5a7fea0a71dc2a2f6bdbc051fb52948a75f2df2437f5fc34b8b6b6546a25c8fd719ab168c2cb58226de004a1fb0c9cb036fb552d910e63fbe5a2482abd481da7206c2c3ffef48e486a48f6cca40000000000000000000"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x3, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "df"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@country_functional={0x12, 0x24, 0x7, 0x5, 0x4, [0x401, 0x9, 0xfffc, 0x0, 0xfffa, 0x10]}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x11c7}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x9c, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xf8, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x450, 0x3, 0x7, 0x8}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf5, 0x3, 0x0, 0x40, 0x1}, 0x35, &(0x7f0000000100)={0x5, 0xf, 0x35, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x300000, 0x0, 0x3, [0xf, 0x30, 0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xe3, 0x2, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x46, 0x5, 0x0, 0x5, 0x7}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}]}) 12.006271987s ago: executing program 5 (id=1859): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x800, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) 10.905530258s ago: executing program 3 (id=1861): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) sendto$inet6(r7, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x40, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x30, 0x6, 0x3, 0x40, 0x5}, 0xfa, &(0x7f0000000100)={0x5, 0xf, 0xfa, 0x1, [@generic={0xf5, 0x10, 0x2, "f8ab4f4c605d4ad8b51c6e9b56cc6f4a5a0263ad40332656bb4bde1a9041921eb387284e869055a47277b2c5c96543f0dd63a4d71010547d2dbcfca8d0955669e9d40de716bedd13f09802ef9a599014d95e5e4b761bd4d190c62c1e230521266961c3f567f4f8af7ecdfa1b416471540812ce7104f2efeaedebf0f56a25eab154c456c7f26f56afc652365142ce537f549a6f396e53fcf9e4d11c111400b37aedc000aa6c98636d61c3ac37fb27c2c75f9a275bba21951b97e990673cf8191d8887488f53307ec0fa270010715adcd914a2533e6dfcd902784d40d482800f272a7ae12b5b767ce85227baee000000000000"}]}, 0x6, [{0x17, &(0x7f0000000200)=@string={0x17, 0x3, "ff5f0b9064882e80b9fe9d4adfaa764a1416b8bbed"}}, {0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "707c8e5e532a9b39eeaaae9012cbeade1e17b8c4d648205187eac8ccdb520699628675d8269986a419d8d08c28900d4ea36424489afeeca08f7dad648f753989410cd8008d0defd883eb941ec2c79686f8163f03c8bd149c5561ba42aa4fda6800f8ce5c306c4639d55878e085a49e4cc14bb52d44ca6667ee0a96505d6d4b8d1b8661bb98cad15e5221a4be1f826b5f194330a14f0c44781c515c192ff3efcd36af06cbe12902a2018eea8e812be9"}}, {0xe9, &(0x7f0000000300)=@string={0xe9, 0x3, "9d8d6bed65012027e6e09c5fe6d95f6e39aa2a2072e196f73e241c279c56ac093d55e61e96b719af3c26d5e056d35225709ad7cc064e0b7c2ce204860fab48933f8d76e10308d7158d9cb72061609d91abd090d3ff4ddffd5c08c064f8d505af19f0f645696392c87f15a5a60620ce6eca1f0221465237942cb4be532b3cb1ad11a3f3e1348ce7213edbb1df98a9ec6e573090c0b188eda60fdec19ae78be58e1dfca946a5f235ef212574d6ba1e6dfb4fa7d7a4dee77f6dc9d39d60f8569c41d4e331109f19485643297baf5d15c8e3e9407337fd457380246a55bbd831443fcf8862d44ded7b"}}, {0x2d, &(0x7f0000000400)=@string={0x2d, 0x3, "aa905f0472e0d371973f577d409855b3c39ea3ff7b5ff6fdbd43f25ce28a3eb70558d366888a785be3cf27"}}, {0xb8, &(0x7f0000000440)=@string={0xb8, 0x3, "26d948b61d00fd6072b4b0ea7793bf8c610aaaa9032127022fabb7cd2a2ae7d68bc36bb593d15d84030175ce438c7d2be2c9cddeaed77607483f01f033152400b0b4911b52a5f890e370a8bcd670aa14a366d1dfb2923e3719ece4a1f0aa8f87d162964a57823576ef700489bce6a317fd2ccb45e21003fe71981416a2f8d94e29775462b86b46487b9f1c88bd5594311775ea39b8b83598f1538347bb0b0493ee73e243436ff95f8fa7b45ac0d06d00e76d2ec2da5a"}}, {0x2e, &(0x7f00000005c0)=@string={0x2e, 0x3, "518201cc1a0055ab91fad46bc299cc553524770081d60002bb851731eff267667920847924c8c0798895e181"}}]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) 9.909387752s ago: executing program 5 (id=1863): mount(0x0, 0x0, 0x0, 0x8000, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "2107e3f8"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) 9.883598232s ago: executing program 2 (id=1864): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=r2], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f61641e65637279707446d014c8c46846d50400000020303030303030303030303030303030303030303220366600"], 0x30, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 8.724554447s ago: executing program 2 (id=1865): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20281, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000081) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x20000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x7dad, 0x3180, 0x8001, 0x40024e}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x400000000000, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x3c) 8.661410969s ago: executing program 0 (id=1867): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0xc38f, 0x4) 8.454131454s ago: executing program 2 (id=1869): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x0, 0x2, {0x5, @vbi={0x10000b5, 0x4, 0x3, 0x20363059, [0x0, 0x18000000], [0x8200, 0x1], 0x1}}, 0xe}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x3a, 0xea5, './file0\x00'}}) 8.052313283s ago: executing program 0 (id=1870): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102379, &(0x7f00000000c0)=0x18feb) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = syz_io_uring_setup(0x4bfe, &(0x7f00000000c0)={0x0, 0x705d, 0x400, 0x3, 0xa}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_setup(0x171c, &(0x7f0000000340)={0x0, 0x80ff, 0x4, 0x2, 0x38e, 0x0, r2}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34c}}, 0x0) 7.114736302s ago: executing program 3 (id=1872): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r6, 0x0, 0x5}, 0x18) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) 7.025735931s ago: executing program 4 (id=1873): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)="873d610c99", 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="abe6b4a73959569e286432d09c0ad0705fbc1e6e3b2c592d1c6faca5df4791caf437a59fcaad001ed09ae34a4f9d55702ee5f0744aaccdc61c2a37c3be39173ff83919dd6884d39b000524ac57beca15a86e61d6b7d68d36334a27eed4d1600c7c04f71e2be79c8b5b22f8fbe2fe7a3dcd6bd7846cb2f648b5da51c1940a45afb2952ebb4f6bd8814056080b2c280994fbfc6f686c143fb7a0e437109726440a5a7369469d874cc7ed89cf5396c22705bfc40436eccdbd22737bb8b937956cddc4064bd6496b5a82575fbc9fee820e5e8ca7dcfabc08cc81bf6b8bb7763b1680928c3bff93b15f234ef4b6bbb7640054071a", 0xf2}], 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa40000000000000704", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008f6ffff4500000076000000bf910000000000007608ffff000000008500000085000000b700"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.942217777s ago: executing program 2 (id=1874): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x800, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) 6.702226296s ago: executing program 0 (id=1875): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) close_range(r3, r3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20048005) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) 6.129801161s ago: executing program 3 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100826bd7000fddbdf25180000000c00990004000000230000000a000600080211000000ff000a001a0008021100000000000a001a00f63eb2ec000100000a001a00ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x87) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x80003, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019080)=""/102352, 0x18fd0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0xab) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20000023896) close(r4) 5.998283018s ago: executing program 4 (id=1877): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x1f}], 0x1}, 0x0) 5.630659372s ago: executing program 2 (id=1878): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000e00000000000000009fee91249591b81700000015c1c503aaacc09f82d6b9c1722cec870264db619b47fcda8acd7414e0e0e09dd9c86e4024dcce49b25d331063d95e98a1f62a4de9cd237a98"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000500) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000003c0)='syz0\x00', &(0x7f0000000400)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TCFLSH(r5, 0x80045439, 0xfffffffffffffffa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xa0, 0x81, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x6, 0x5}}}}}]}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r6}, 0x10) close(r7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x30, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5.07800267s ago: executing program 4 (id=1879): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setown(r6, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x1f, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r15, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="05475300", @ANYRES16=r14, @ANYBLOB="010026bd700001dcdf25070000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r16, 0x894b, 0xfffffffffffffffe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="e6b2d1543d53acc35c85a19c9f8bcfc203e97744192281ec46e6b0d9e3a00e2b4552b7c6309e5dc9e60e70b128eeb35acdbe3deb7a53895dc8cdcecdbcc3b7c2bafee2a722656dd0e5b597675ebcd52e0520f3f03f1a01ab1738b7f75721953c401e77e26cc460f3b281ab4cb8071b1e33ee240846af11097eb3397beb741fd60ddc725642044b6310507d32ea7b06ee24ab272a90b356255a5afb55d23a3bc583cbccd4ac2cc316ebbb462df8e50f57a537d9f04767ef8345815215e4ddd702b7a342a2e3", 0xc5}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="00010000000000000e010000060000005e798525d697b19514ff847bb316ef0980e82e9b66cba52ebf905820de372e8cf7f49835b03ad363c294f2115aa4dd6eb6b1cbdb81724f13df75e08317d939f7178cb2783647e0469f6898bc95db46ad74bedb20c873c4fa2cc489413a9f85f180b4d6c3cf2f8ae43305b0e93f91e10abb6cada43508553aaeaf5b71ae9398fa6e0dc57cd63917a6d8f42a17ec354942ccdc437f1dfc73446eecb6f86bda20d0de5ab48c488b086e908d15645b6949a19f221ad5f13b09768af5245ff52b8e346cd3e41b04fe8fb83c320dd9af688464a449d5a78e1b530455e06c42f235788d5f51c63ba1b621d37851d082a985a2dc48000000000000000901000080000000a93700139831b61908d56d4d9c11c42e19fbdc25e33d61f04586b1d542cabac6e2fff42db6eba08a0f62a8640b07871d24fb1b8700000000e80000000000000000000000e107000080487d458a45fed6e92574839582ebb1f3cad6a960e4f8a7a3c05ab4a691bcfac9d4fac2b507714f5542b050a7d4967586abc816e692ee535ca44ea5f49dceb7500925e0755aa7418ec87874b0c955f2fe4db336aa7fe9c810d21789c6d3bd99f5b0372b84ac0f220c1bf5f1cf993d3d128f75591a8a0257cc04bde80b595cb2ce71e23c0cf7dbcbcda30a03b45cd3ca8c884866ebb5db06aa6b582d57d0f2f00fce7d9e6b218ade6432ddb943d451967b6eedb8d92d50b3a331cace952901c01287342174199f7e9046eeee9d2bd97c229ec20000000000700000000000000011010000e100000014560e170922b19308f0c87cd2434f606ef05ced0397aa85d9b7d9c871a0e46f16dd234593a9783ef3caff4a8b269090c1db37b64b896ebec420d87bc5241688bb20bec607d9691d7e3b71efc9a51638addfc403429d350d5aab1a2000000000f0000000000000001100000008000000550dda2b23039678b267888fe011f5e69497262683c301188b5426aad90ad787ab4e373261ff57b35d292e6b792fd1f7e59f43872fea7fe0f01d94237e77b21566d9cf60c626fc8ea21c100946f15f53edf779a57f01d6f944b264b844791f2143d4f97b58dde482fe064bfa0adc4418c06b48640afb60a62227308a4902558ebd9634e2ddfc2f3a395f233f651c7bd0d5c196347570cc506578925038714d2df79a3377467ecf8d80aa346b25097ddb73bc52f759212344cdd2b3b09152a369e94d555ee6268fd9ad40c27166189c8000ba545579bc219a79130000000000005000000000000000030100000400000088c69a8d2517d6e845a1b7fde4aa443b596204ed47329460dc1aadd4f2b92d3ec01d18c94cea17bf4adb50d861815fb65c99cf69ff77bd5b0f288f3a70d99500f8000000000000000f010000a78f00008f46ded622590c59eee529344e2993acec1092dd729bd087c4b309aa2940c8fcf8c722bd6b75a1833feac75a4f1740c8489fba3448794ba90e0756b6922c56cbc3bdc28c2af56d48d1c3e4f0ba146f9d6c7a6a7026f15175bc646d9dd977aea948998baee1b9174592bbd50ed6ffb7ddcd9c6101187bd005c14c5ddcc0bab319ad753a22b1d7fde4509d247af4861c469447305b8bffdc87a224492b003f5c42179d090118f05e6ed7418383ed4cbef41959d3e6c0ab0f37a4edd7d663fc273cde79f611858f098f83642ffd9bb0cf06065bd8434a2b80bf8b81f4cecd779ad78963b31778f7e03b"], 0x4d8}, 0x44040) 5.055791197s ago: executing program 0 (id=1880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x4, 0x7, 0x7, 0x6, 0x4}, 0x14) r2 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) tee(r3, r7, 0x8f5, 0x100000000000000) write(r5, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000340)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r12, 0x28, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="08000132f4b9a0ea3f041e9360a7a35fb8d4926cfe905830b5110ca982aa3f845fcd000000a18a345e7fe59eabf2fc7fd3761846b9d1c30c91c0812e7d9a4089490347dc322f308dfe920000"], 0x30}}, 0x0) r13 = fsmount(r9, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r13, &(0x7f0000000140)='./file0\x00') 5.037883794s ago: executing program 5 (id=1881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000000), 0x8) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0xc38f, 0x4) 4.96231507s ago: executing program 3 (id=1882): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) sendto$inet6(r7, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x40, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x30, 0x6, 0x3, 0x40, 0x5}, 0xfa, &(0x7f0000000100)={0x5, 0xf, 0xfa, 0x1, [@generic={0xf5, 0x10, 0x2, "f8ab4f4c605d4ad8b51c6e9b56cc6f4a5a0263ad40332656bb4bde1a9041921eb387284e869055a47277b2c5c96543f0dd63a4d71010547d2dbcfca8d0955669e9d40de716bedd13f09802ef9a599014d95e5e4b761bd4d190c62c1e230521266961c3f567f4f8af7ecdfa1b416471540812ce7104f2efeaedebf0f56a25eab154c456c7f26f56afc652365142ce537f549a6f396e53fcf9e4d11c111400b37aedc000aa6c98636d61c3ac37fb27c2c75f9a275bba21951b97e990673cf8191d8887488f53307ec0fa270010715adcd914a2533e6dfcd902784d40d482800f272a7ae12b5b767ce85227baee000000000000"}]}, 0x6, [{0x17, &(0x7f0000000200)=@string={0x17, 0x3, "ff5f0b9064882e80b9fe9d4adfaa764a1416b8bbed"}}, {0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "707c8e5e532a9b39eeaaae9012cbeade1e17b8c4d648205187eac8ccdb520699628675d8269986a419d8d08c28900d4ea36424489afeeca08f7dad648f753989410cd8008d0defd883eb941ec2c79686f8163f03c8bd149c5561ba42aa4fda6800f8ce5c306c4639d55878e085a49e4cc14bb52d44ca6667ee0a96505d6d4b8d1b8661bb98cad15e5221a4be1f826b5f194330a14f0c44781c515c192ff3efcd36af06cbe12902a2018eea8e812be9"}}, {0xe9, &(0x7f0000000300)=@string={0xe9, 0x3, "9d8d6bed65012027e6e09c5fe6d95f6e39aa2a2072e196f73e241c279c56ac093d55e61e96b719af3c26d5e056d35225709ad7cc064e0b7c2ce204860fab48933f8d76e10308d7158d9cb72061609d91abd090d3ff4ddffd5c08c064f8d505af19f0f645696392c87f15a5a60620ce6eca1f0221465237942cb4be532b3cb1ad11a3f3e1348ce7213edbb1df98a9ec6e573090c0b188eda60fdec19ae78be58e1dfca946a5f235ef212574d6ba1e6dfb4fa7d7a4dee77f6dc9d39d60f8569c41d4e331109f19485643297baf5d15c8e3e9407337fd457380246a55bbd831443fcf8862d44ded7b"}}, {0x2d, &(0x7f0000000400)=@string={0x2d, 0x3, "aa905f0472e0d371973f577d409855b3c39ea3ff7b5ff6fdbd43f25ce28a3eb70558d366888a785be3cf27"}}, {0xb8, &(0x7f0000000440)=@string={0xb8, 0x3, "26d948b61d00fd6072b4b0ea7793bf8c610aaaa9032127022fabb7cd2a2ae7d68bc36bb593d15d84030175ce438c7d2be2c9cddeaed77607483f01f033152400b0b4911b52a5f890e370a8bcd670aa14a366d1dfb2923e3719ece4a1f0aa8f87d162964a57823576ef700489bce6a317fd2ccb45e21003fe71981416a2f8d94e29775462b86b46487b9f1c88bd5594311775ea39b8b83598f1538347bb0b0493ee73e243436ff95f8fa7b45ac0d06d00e76d2ec2da5a"}}, {0x2e, &(0x7f00000005c0)=@string={0x2e, 0x3, "518201cc1a0055ab91fad46bc299cc553524770081d60002bb851731eff267667920847924c8c0798895e181"}}]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) 4.637888864s ago: executing program 4 (id=1883): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x55) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) r5 = msgget(0x0, 0x2ca) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000080)=""/136) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x10000000000, 0x0, 0x5, 0x0, 0x0, {0x0, 0x1, 0x101, 0x8000000000000000, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r6, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) 3.757432391s ago: executing program 5 (id=1884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.704495412s ago: executing program 0 (id=1885): socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x2, &(0x7f0000002400)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket(0x2b, 0x1, 0x0) (async) r7 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) (async) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0xfeffffff, r6, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) (async, rerun: 32) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (rerun: 32) 2.922278822s ago: executing program 0 (id=1886): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x6a, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.666758483s ago: executing program 4 (id=1887): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r6, 0x0, 0x5}, 0x18) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) 1.898391004s ago: executing program 3 (id=1888): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x800, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r10, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) 1.713222909s ago: executing program 2 (id=1889): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r4, 0x6000000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "e9b804bbcb23c2e693fe92d641f0a6e3b446dcc9aa90e10fcc975a59919474397742d3c58fd9a28157cc2fac3fd43e62f48e487c6c9a886c005455ddcc57da86", 0x5}, 0x48, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, &(0x7f0000000300)=""/4096, 0x1000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r9, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000892e79105e042107259c0102030109022200010000000009040000000e0100000824020101020000082402010000000020bd1e"], 0x0) 1.692722538s ago: executing program 4 (id=1890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) socket(0x1, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 0s ago: executing program 3 (id=1891): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) map_shadow_stack(&(0x7f00008fb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x14802, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x9, 0x7, 0x3, 0x6}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x25, 0x0, 0x0) eventfd2(0xb6b0, 0xc0001) r7 = timerfd_create(0x0, 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000340)) mount_setattr(r1, &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={0xc5, 0x1000fc, 0x40000, {r8}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='drans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) mmap$snddsp(&(0x7f000021d000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0xf000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x40, 0x0, 0xfd, 0x60fa}) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.868054][ T5951] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 424.916200][ T5951] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 425.180839][ T5951] usb 1-1: USB disconnect, device number 54 [ 425.180906][ C0] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb [ 425.263045][ T5951] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 425.278789][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.286349][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.299630][ T5951] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 425.347872][ T30] audit: type=1400 audit(1752350117.588:1321): avc: denied { relabelfrom } for pid=10968 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 425.367815][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.387036][ T5951] io_edgeport 1-1:162.209: device disconnected [ 425.434941][ T30] audit: type=1400 audit(1752350117.588:1322): avc: denied { relabelto } for pid=10968 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 425.792682][ T5932] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 425.951373][ T5932] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 426.038455][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.088486][ T5932] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.088766][T10987] macsec1: entered promiscuous mode [ 426.101701][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.111897][ T5932] usb 4-1: Product: syz [ 426.117770][ T5932] usb 4-1: Manufacturer: syz [ 426.126948][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 426.144254][ T5932] usb 4-1: SerialNumber: syz [ 426.174650][ T5932] usb 4-1: config 0 descriptor?? [ 426.185736][ T5932] usb 4-1: selecting invalid altsetting 0 [ 426.319049][T10995] FAULT_INJECTION: forcing a failure. [ 426.319049][T10995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.353040][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.4.1323 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 426.353067][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.353077][T10995] Call Trace: [ 426.353082][T10995] [ 426.353089][T10995] dump_stack_lvl+0x16c/0x1f0 [ 426.353114][T10995] should_fail_ex+0x512/0x640 [ 426.353141][T10995] _copy_from_iter+0x29f/0x16f0 [ 426.353168][T10995] ? __alloc_skb+0x200/0x380 [ 426.353189][T10995] ? __pfx__copy_from_iter+0x10/0x10 [ 426.353208][T10995] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 426.353236][T10995] netlink_sendmsg+0x829/0xdd0 [ 426.353252][T10995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.353272][T10995] ____sys_sendmsg+0xa95/0xc70 [ 426.353286][T10995] ? copy_msghdr_from_user+0x10a/0x160 [ 426.353303][T10995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.353325][T10995] ___sys_sendmsg+0x134/0x1d0 [ 426.353344][T10995] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.353365][T10995] ? __lock_acquire+0x622/0x1c90 [ 426.353407][T10995] __sys_sendmsg+0x16d/0x220 [ 426.353425][T10995] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.353455][T10995] do_syscall_64+0xcd/0x4c0 [ 426.353474][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.353488][T10995] RIP: 0033:0x7fa302d8e929 [ 426.353499][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.353512][T10995] RSP: 002b:00007fa303b0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.353525][T10995] RAX: ffffffffffffffda RBX: 00007fa302fb5fa0 RCX: 00007fa302d8e929 [ 426.353533][T10995] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 426.353541][T10995] RBP: 00007fa303b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.353549][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.353556][T10995] R13: 0000000000000000 R14: 00007fa302fb5fa0 R15: 00007fff23d64158 [ 426.353574][T10995] [ 426.556240][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.671406][ T5932] usb 4-1: USB disconnect, device number 36 [ 427.322630][ T43] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 427.523101][ T43] usb 1-1: device descriptor read/64, error -71 [ 427.568770][T11026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.121254][ T43] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 428.303240][ T43] usb 1-1: device descriptor read/64, error -71 [ 428.511846][ T43] usb usb1-port1: attempt power cycle [ 428.828223][T11064] openvswitch: netlink: Flow actions attr not present in new flow. [ 428.875284][ T43] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 428.928075][T11064] md: md2 stopped. [ 429.005352][ T43] usb 1-1: device descriptor read/8, error -71 [ 429.348721][ T43] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 429.368618][ T5933] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 429.456796][ T43] usb 1-1: device descriptor read/8, error -71 [ 429.549083][T11071] 9pnet_fd: Insufficient options for proto=fd [ 429.597610][ T30] audit: type=1400 audit(1752350121.838:1323): avc: denied { connect } for pid=11069 comm="syz.5.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.612897][ T43] usb usb1-port1: unable to enumerate USB device [ 429.617185][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.626240][ T5933] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 429.641673][ T5933] usb 3-1: config 0 has no interface number 0 [ 429.692013][ T5933] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 429.737282][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.756571][ T5933] usb 3-1: Product: syz [ 429.762364][ T5933] usb 3-1: Manufacturer: syz [ 429.868044][ T5933] usb 3-1: SerialNumber: syz [ 429.887881][ T5933] usb 3-1: config 0 descriptor?? [ 429.990761][ T30] audit: type=1400 audit(1752350122.228:1324): avc: denied { write } for pid=11081 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.183199][T11092] capability: warning: `syz.0.1340' uses deprecated v2 capabilities in a way that may be insecure [ 430.436934][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 430.594684][ T5933] usb 3-1: Firmware: major: 219, minor: 252, hardware type: HULUSB (4) [ 431.716913][ T5933] usb 3-1: failed to fetch extended address, random address set [ 431.984514][T11122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.173182][ T30] audit: type=1400 audit(1752350124.058:1325): avc: denied { bind } for pid=11112 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.288133][ T30] audit: type=1400 audit(1752350124.528:1326): avc: denied { bind } for pid=11124 comm="syz.3.1345" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 432.335008][ T30] audit: type=1400 audit(1752350124.528:1327): avc: denied { name_bind } for pid=11124 comm="syz.3.1345" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 432.385129][ T30] audit: type=1400 audit(1752350124.528:1328): avc: denied { node_bind } for pid=11124 comm="syz.3.1345" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 432.413937][ T5933] usb 3-1: USB disconnect, device number 45 [ 433.275618][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 433.283635][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 434.553413][T11159] block nbd2: NBD_DISCONNECT [ 434.562736][T11159] block nbd2: Send disconnect failed -4 [ 434.568994][T11159] block nbd2: Disconnected due to user request. [ 434.575333][T11159] block nbd2: shutting down sockets [ 435.774617][ T5951] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 438.314905][T11190] openvswitch: netlink: Flow actions attr not present in new flow. [ 438.369658][ T30] audit: type=1400 audit(1752350130.598:1329): avc: denied { read } for pid=11191 comm="syz.0.1358" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 438.552410][ T30] audit: type=1400 audit(1752350130.598:1330): avc: denied { open } for pid=11191 comm="syz.0.1358" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 438.710928][ T30] audit: type=1400 audit(1752350130.608:1331): avc: denied { map } for pid=11191 comm="syz.0.1358" path="socket:[29657]" dev="sockfs" ino=29657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 438.956575][ T30] audit: type=1400 audit(1752350130.608:1332): avc: denied { read } for pid=11191 comm="syz.0.1358" path="socket:[29657]" dev="sockfs" ino=29657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 439.004278][T11203] lo speed is unknown, defaulting to 1000 [ 439.116711][ T30] audit: type=1400 audit(1752350131.298:1333): avc: denied { setopt } for pid=11187 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 439.236024][T11152] delete_channel: no stack [ 439.336684][ T30] audit: type=1400 audit(1752350131.578:1334): avc: denied { ioctl } for pid=11208 comm="syz.2.1362" path="socket:[30038]" dev="sockfs" ino=30038 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.400101][T11212] ufs: You didn't specify the type of your ufs filesystem [ 439.400101][T11212] [ 439.400101][T11212] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 439.400101][T11212] [ 439.400101][T11212] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 439.485612][ T30] audit: type=1400 audit(1752350131.618:1335): avc: denied { write } for pid=11208 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.545511][T11212] ufs: ufstype=old is supported read-only [ 439.571906][T11212] ufs: ufs_fill_super(): bad magic number [ 439.756013][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.762345][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.303487][T11225] block nbd4: NBD_DISCONNECT [ 440.378768][T11225] block nbd4: Send disconnect failed -22 [ 440.483831][T11217] block nbd4: Disconnected due to user request. [ 440.490720][T11217] block nbd4: shutting down sockets [ 440.733932][ T30] audit: type=1400 audit(1752350132.978:1336): avc: denied { listen } for pid=11238 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 440.778300][ T30] audit: type=1400 audit(1752350132.998:1337): avc: denied { accept } for pid=11238 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 440.915976][ T30] audit: type=1400 audit(1752350133.058:1338): avc: denied { bind } for pid=11238 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.297228][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1371'. [ 441.737149][T11258] syz.2.1373: attempt to access beyond end of device [ 441.737149][T11258] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 441.800024][T11260] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1376'. [ 441.871350][T11262] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 442.201922][ T5933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 442.735376][ T5933] usb 6-1: device descriptor read/64, error -71 [ 442.980540][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 442.989531][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 443.022606][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 443.184017][ T5933] usb 6-1: device descriptor read/64, error -71 [ 443.258481][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1385'. [ 443.267664][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 443.349729][ T5933] usb usb6-port1: attempt power cycle [ 443.953248][ T5933] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 443.984026][ T5933] usb 6-1: device descriptor read/8, error -71 [ 444.582550][ T5933] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 444.603818][ T5933] usb 6-1: device descriptor read/8, error -71 [ 444.722827][ T5933] usb usb6-port1: unable to enumerate USB device [ 445.183336][T11309] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.320133][T11314] block device autoloading is deprecated and will be removed. [ 445.351643][T11309] md: md2 stopped. [ 446.397442][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 446.397457][ T30] audit: type=1400 audit(1752350138.288:1343): avc: denied { mount } for pid=11320 comm="syz.3.1398" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 446.426142][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.321203][T11318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.336219][T11318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.347844][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 447.359106][T11318] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 447.779378][ T30] audit: type=1400 audit(1752350140.018:1344): avc: denied { append } for pid=11342 comm="syz.3.1404" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 447.804983][T11345] 9pnet_fd: Insufficient options for proto=fd [ 448.191484][ T30] audit: type=1400 audit(1752350140.058:1345): avc: denied { ioctl } for pid=11342 comm="syz.3.1404" path="socket:[30997]" dev="sockfs" ino=30997 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.742934][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 448.852547][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 448.904747][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 448.952282][ T30] audit: type=1400 audit(1752350141.188:1346): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 448.972314][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.980595][ T43] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 448.995830][ T43] usb 5-1: config 6 has no interface number 0 [ 449.008067][ T43] usb 5-1: config 6 interface 57 has no altsetting 0 [ 449.018927][ T43] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 449.032478][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.043654][ T43] usb 5-1: Product: syz [ 449.048148][ T43] usb 5-1: Manufacturer: syz [ 449.053175][ T43] usb 5-1: SerialNumber: syz [ 449.181006][ T30] audit: type=1400 audit(1752350141.418:1347): avc: denied { accept } for pid=11369 comm="syz.0.1413" lport=41498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.466451][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 449.472567][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 449.557464][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 449.567413][T11375] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 449.632690][ T43] usb-storage 5-1:6.57: USB Mass Storage device detected [ 449.731861][ T43] usb 5-1: USB disconnect, device number 37 [ 449.915824][T11395] lo speed is unknown, defaulting to 1000 [ 450.152984][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 450.314074][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.348226][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.359063][ T30] audit: type=1400 audit(1752350142.608:1348): avc: denied { setopt } for pid=11404 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.407925][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 450.444482][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.485976][ T9] usb 1-1: config 0 descriptor?? [ 451.091114][ T9] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 451.118596][ T9] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x2 [ 451.136342][ T9] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 451.236689][ T9] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 451.628915][ T30] audit: type=1400 audit(1752350143.868:1349): avc: denied { connect } for pid=11421 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 451.690626][T11422] netlink: 'syz.2.1426': attribute type 5 has an invalid length. [ 451.831230][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 451.853034][ T30] audit: type=1400 audit(1752350144.098:1350): avc: denied { create } for pid=11426 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 451.856655][ T9] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 451.886090][T11429] delete_channel: no stack [ 451.894586][T11429] 9pnet: p9_errstr2errno: server reported unknown error M·Ö [ 452.736137][ T9] usb 1-1: USB disconnect, device number 59 [ 452.903587][T11433] loop2: detected capacity change from 0 to 7 [ 452.939959][T11433] Dev loop2: unable to read RDB block 7 [ 452.967604][T11433] loop2: unable to read partition table [ 452.977666][T11433] loop2: partition table beyond EOD, truncated [ 453.002884][ T30] audit: type=1400 audit(1752350145.238:1351): avc: denied { kexec_image_load } for pid=11432 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 453.025817][T11433] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.547202][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 453.951296][T11447] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.299355][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 454.360023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.426112][ T9] usb 3-1: config 0 descriptor?? [ 454.450744][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 454.707708][ T1205] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 455.205528][ T9] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 455.264627][ T1205] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.275977][ T1205] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 455.287006][ T1205] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.299269][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.323479][T11464] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 455.341710][ T1205] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.808195][T11486] overlayfs: failed to resolve './file0': -2 [ 455.958224][ T5899] usb 1-1: USB disconnect, device number 60 [ 456.431549][T11493] block nbd4: NBD_DISCONNECT [ 456.455109][ T9] gspca_cpia1: usb_control_msg 02, error -110 [ 456.474803][T11493] block nbd4: Send disconnect failed -22 [ 456.644705][ T9] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 456.789687][ T30] audit: type=1400 audit(1752350149.028:1352): avc: denied { checkpoint_restore } for pid=11495 comm="syz.3.1448" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 456.882913][ T1205] usb 3-1: USB disconnect, device number 46 [ 456.904947][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 456.932562][T11489] block nbd4: Disconnected due to user request. [ 456.938853][T11489] block nbd4: shutting down sockets [ 457.014752][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 457.068355][T11501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 457.360605][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.404726][T11512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1455'. [ 457.685895][T11519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.813803][ T5151] Bluetooth: hci3: command 0x1003 tx timeout [ 457.820174][ T5838] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 457.889216][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1454'. [ 458.051927][T11527] syz.5.1458 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 458.335069][ T5892] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 458.541325][ T30] audit: type=1400 audit(1752350150.778:1353): avc: denied { append } for pid=11532 comm="syz.0.1460" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.541776][T11533] loop6: detected capacity change from 0 to 2098 [ 458.607148][ T5892] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 458.647138][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.673292][ T5892] usb 5-1: config 0 descriptor?? [ 458.685908][ T5892] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 459.230148][ T5892] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 459.437877][ T30] audit: type=1400 audit(1752350151.678:1354): avc: denied { write } for pid=11541 comm="syz.2.1463" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 460.526608][ T5892] gspca_cpia1: usb_control_msg 02, error -110 [ 460.692737][ T5892] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 460.729477][T11553] input: syz0 as /devices/virtual/input/input28 [ 460.963141][T11556] @: renamed from vlan0 (while UP) [ 461.438933][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 461.450699][T11566] IPVS: Error joining to the multicast group [ 461.479468][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'. [ 461.713697][ T1205] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 461.730041][ T9] usb 5-1: USB disconnect, device number 38 [ 461.892784][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 461.905285][ T1205] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 461.941606][ T1205] usb 6-1: config 0 interface 0 has no altsetting 0 [ 462.176488][ T1205] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 462.186025][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=13 [ 462.194492][ T30] audit: type=1400 audit(1752350154.418:1355): avc: denied { setopt } for pid=11571 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.432042][ T5885] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 462.838520][ T1205] usb 6-1: SerialNumber: syz [ 462.861505][ T1205] usb 6-1: config 0 descriptor?? [ 463.026857][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.038761][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 22831, setting to 1024 [ 463.052251][ T5885] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 463.084485][ T5885] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.100410][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.224657][T11575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.240963][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.275225][ T1205] usbhid 6-1:0.0: can't add hid device: -71 [ 463.281236][ T1205] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 463.330554][ T1205] usb 6-1: USB disconnect, device number 7 [ 463.435425][T11595] lo speed is unknown, defaulting to 1000 [ 463.452570][ T43] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 463.556560][ T5885] usb 3-1: USB disconnect, device number 47 [ 463.564268][ T30] audit: type=1400 audit(1752350155.798:1356): avc: denied { shutdown } for pid=11571 comm="syz.2.1472" lport=55083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.612543][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 463.626510][ T43] usb 5-1: config 1 has too many interfaces: 233, using maximum allowed: 32 [ 463.647150][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.678641][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 233 [ 463.704816][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.718152][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.733963][ T43] usb 5-1: Product: syz [ 463.741407][ T43] usb 5-1: Manufacturer: syz [ 463.748195][ T43] usb 5-1: SerialNumber: syz [ 463.969232][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.990666][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.033085][T11602] kvm: kvm [11601]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 464.046643][T11602] kvm: kvm [11601]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 465.458620][T11619] binder: 11618:11619 ioctl 4018620d 0 returned -22 [ 465.593198][T11622] binder: 11618:11622 ioctl c018620c 0 returned -14 [ 465.712525][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 466.062845][ T1205] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 466.220369][ T5933] usb 5-1: USB disconnect, device number 39 [ 466.264290][ T1205] usb 3-1: device descriptor read/64, error -71 [ 466.271745][ T43] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 466.282129][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.295351][ T43] usb 4-1: config 0 descriptor?? [ 466.303768][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 466.522663][ T1205] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 466.789077][ T43] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 466.852645][ T1205] usb 3-1: device descriptor read/64, error -71 [ 466.962795][ T1205] usb usb3-port1: attempt power cycle [ 467.285279][ T43] gspca_cpia1: usb_control_msg 02, error -71 [ 467.296614][ T43] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 467.308577][ T43] usb 4-1: USB disconnect, device number 37 [ 467.343622][ T1205] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 467.373070][ T1205] usb 3-1: device descriptor read/8, error -71 [ 467.602684][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 467.632539][ T1205] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 467.654032][ T1205] usb 3-1: device descriptor read/8, error -71 [ 467.754113][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.765520][ T1205] usb usb3-port1: unable to enumerate USB device [ 467.771870][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50991, setting to 1024 [ 467.783780][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 467.793909][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.803196][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.816513][T11646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.825343][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.300948][ T9] usb 5-1: USB disconnect, device number 40 [ 469.035983][T11655] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 469.127958][T11662] syz.5.1495: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 469.146088][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.5.1495 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 469.146116][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.146123][T11662] Call Trace: [ 469.146128][T11662] [ 469.146133][T11662] dump_stack_lvl+0x16c/0x1f0 [ 469.146152][T11662] warn_alloc+0x248/0x3a0 [ 469.146168][T11662] ? __pfx_warn_alloc+0x10/0x10 [ 469.146182][T11662] ? __pfx_stack_trace_save+0x10/0x10 [ 469.146197][T11662] ? stack_depot_save_flags+0x28/0xa40 [ 469.146217][T11662] ? kasan_save_stack+0x42/0x60 [ 469.146230][T11662] ? kasan_save_stack+0x33/0x60 [ 469.146243][T11662] ? kasan_save_track+0x14/0x30 [ 469.146255][T11662] ? xskq_create+0x52/0x1d0 [ 469.146267][T11662] ? xsk_setsockopt+0x640/0x840 [ 469.146277][T11662] ? do_sock_setsockopt+0x221/0x470 [ 469.146294][T11662] ? xskq_create+0xfb/0x1d0 [ 469.146307][T11662] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 469.146323][T11662] ? xskq_create+0xfb/0x1d0 [ 469.146338][T11662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.146354][T11662] ? xskq_create+0xfb/0x1d0 [ 469.146366][T11662] vmalloc_user_noprof+0x9e/0xe0 [ 469.146377][T11662] ? xskq_create+0xfb/0x1d0 [ 469.146389][T11662] xskq_create+0xfb/0x1d0 [ 469.146402][T11662] xsk_setsockopt+0x640/0x840 [ 469.146415][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.146425][T11662] ? __lock_acquire+0x622/0x1c90 [ 469.146438][T11662] ? selinux_socket_setsockopt+0x6a/0x80 [ 469.146452][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.146469][T11662] do_sock_setsockopt+0x221/0x470 [ 469.146495][T11662] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 469.146529][T11662] __sys_setsockopt+0x1a0/0x230 [ 469.146544][T11662] __x64_sys_setsockopt+0xbd/0x160 [ 469.146556][T11662] ? do_syscall_64+0x91/0x4c0 [ 469.146571][T11662] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.146585][T11662] do_syscall_64+0xcd/0x4c0 [ 469.146600][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.146611][T11662] RIP: 0033:0x7f250698e929 [ 469.146620][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.146629][T11662] RSP: 002b:00007f250783a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.146639][T11662] RAX: ffffffffffffffda RBX: 00007f2506bb5fa0 RCX: 00007f250698e929 [ 469.146646][T11662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 469.146652][T11662] RBP: 00007f2506a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 469.146659][T11662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.146665][T11662] R13: 0000000000000000 R14: 00007f2506bb5fa0 R15: 00007ffe0a4e5ed8 [ 469.146678][T11662] [ 469.146683][T11662] Mem-Info: [ 469.494562][T11662] active_anon:14602 inactive_anon:0 isolated_anon:0 [ 469.494562][T11662] active_file:19703 inactive_file:41100 isolated_file:0 [ 469.494562][T11662] unevictable:768 dirty:249 writeback:0 [ 469.494562][T11662] slab_reclaimable:8804 slab_unreclaimable:108635 [ 469.494562][T11662] mapped:32544 shmem:4260 pagetables:1564 [ 469.494562][T11662] sec_pagetables:0 bounce:0 [ 469.494562][T11662] kernel_misc_reclaimable:0 [ 469.494562][T11662] free:1262736 free_pcp:19833 free_cma:0 [ 469.543666][T11662] Node 0 active_anon:58408kB inactive_anon:0kB active_file:78716kB inactive_file:164204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130104kB dirty:996kB writeback:0kB shmem:15504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12776kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.628224][T11662] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.664957][T11662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.695890][T11662] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 469.701884][T11662] Node 0 DMA32 free:1129768kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58224kB inactive_anon:0kB active_file:78716kB inactive_file:162888kB unevictable:1536kB writepending:1024kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:64256kB local_pcp:43884kB free_cma:0kB [ 469.743087][T11662] lowmem_reserve[]: 0 0 1 1 1 [ 469.785372][T11662] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 469.814659][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.007153][ T5892] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 470.131697][T11678] block device autoloading is deprecated and will be removed. [ 470.189348][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 470.218556][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 470.263449][ T5892] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 470.327414][T11662] Node 1 Normal free:3903332kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14848kB local_pcp:11744kB free_cma:0kB [ 470.359032][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.413070][ T5892] usb 5-1: config 254 has no interface number 0 [ 470.463483][ T5892] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 470.509941][ T30] audit: type=1400 audit(1752350162.718:1357): avc: denied { open } for pid=11679 comm="syz.2.1500" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 470.533637][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.582144][ T5892] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.595938][T11680] /dev/nullb0: Can't open blockdev [ 470.623588][ T5892] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.644706][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 470.649778][ T5892] usb 5-1: config 254 interface 235 has no altsetting 0 [ 470.672040][T11662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.717974][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 470.806516][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 470.828267][ T30] audit: type=1400 audit(1752350163.048:1358): avc: denied { bind } for pid=11679 comm="syz.2.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 470.882529][T11662] Node 0 DMA32: 14*4kB (UM) 5*8kB (M) 195*16kB (UME) 228*32kB (UME) 230*64kB (UME) 170*128kB (UME) 95*256kB (UME) 39*512kB (UME) 15*1024kB (UME) 8*2048kB (UM) 245*4096kB (UM) = 1126544kB [ 470.901077][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 470.901104][ T5892] usb 5-1: Product: syz [ 470.901118][ T5892] usb 5-1: Manufacturer: syz [ 470.901132][ T5892] usb 5-1: SerialNumber: syz [ 470.942341][T11672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.994432][T11662] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 471.361452][T11662] Node 1 Normal: 187*4kB (UME) 55*8kB (UE) 42*16kB (UME) 203*32kB (UME) 61*64kB (UE) 17*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3903332kB [ 471.392811][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 471.582562][T11662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.623930][T11662] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 471.664945][T11662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.735029][T11676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.763077][T11676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 471.771735][T11676] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 471.784855][T11662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 471.820844][T11662] 73090 total pagecache pages [ 471.856376][T11662] 0 pages in swap cache [ 471.882538][T11662] Free swap = 124996kB [ 471.886745][T11662] Total swap = 124996kB [ 471.890896][T11662] 2097051 pages RAM [ 471.960295][T11662] 0 pages HighMem/MovableOnly [ 471.992461][T11662] 430054 pages reserved [ 471.998872][T11662] 0 pages cma reserved [ 473.052471][ T5838] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 473.182278][T11707] lo speed is unknown, defaulting to 1000 [ 473.575785][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 473.586559][ T5892] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 473.593583][ T5892] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 473.628740][ T5892] usb 5-1: USB disconnect, device number 41 [ 473.757008][T11720] FAULT_INJECTION: forcing a failure. [ 473.757008][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.772016][T11720] CPU: 0 UID: 0 PID: 11720 Comm: syz.4.1509 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 473.772041][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.772050][T11720] Call Trace: [ 473.772055][T11720] [ 473.772061][T11720] dump_stack_lvl+0x16c/0x1f0 [ 473.772090][T11720] should_fail_ex+0x512/0x640 [ 473.772115][T11720] _copy_from_user+0x2e/0xd0 [ 473.772138][T11720] generic_map_update_batch+0x3e9/0x610 [ 473.772164][T11720] ? __pfx_generic_map_update_batch+0x10/0x10 [ 473.772191][T11720] ? __pfx_generic_map_update_batch+0x10/0x10 [ 473.772215][T11720] bpf_map_do_batch+0x5b4/0x680 [ 473.772236][T11720] __sys_bpf+0x15f3/0x4d80 [ 473.772267][T11720] ? __pfx___sys_bpf+0x10/0x10 [ 473.772290][T11720] ? ksys_write+0x190/0x250 [ 473.772314][T11720] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 473.772350][T11720] ? fput+0x70/0xf0 [ 473.772365][T11720] ? ksys_write+0x1ac/0x250 [ 473.772386][T11720] ? __pfx_ksys_write+0x10/0x10 [ 473.772411][T11720] __x64_sys_bpf+0x78/0xc0 [ 473.772432][T11720] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.772451][T11720] do_syscall_64+0xcd/0x4c0 [ 473.772476][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.772493][T11720] RIP: 0033:0x7fa302d8e929 [ 473.772507][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.772521][T11720] RSP: 002b:00007fa303b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.772538][T11720] RAX: ffffffffffffffda RBX: 00007fa302fb5fa0 RCX: 00007fa302d8e929 [ 473.772549][T11720] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 473.772558][T11720] RBP: 00007fa303b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 473.772568][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.772578][T11720] R13: 0000000000000000 R14: 00007fa302fb5fa0 R15: 00007fff23d64158 [ 473.772600][T11720] [ 473.983056][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 473.989237][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 475.626629][ T5892] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 475.858442][ T5892] usb 5-1: device descriptor read/64, error -71 [ 476.169737][ T5892] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 476.322821][ T5892] usb 5-1: device descriptor read/64, error -71 [ 476.338643][ T30] audit: type=1400 audit(1752350168.578:1359): avc: denied { mount } for pid=11741 comm="syz.2.1515" name="/" dev="overlay" ino=1622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 476.444362][ T5892] usb usb5-port1: attempt power cycle [ 476.823295][ T5892] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 477.839563][ T5892] usb 5-1: device descriptor read/8, error -71 [ 478.410265][ T30] audit: type=1400 audit(1752350170.638:1360): avc: denied { mounton } for pid=11759 comm="syz.5.1524" path="/proc/199/task" dev="proc" ino=32366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 478.472589][ T30] audit: type=1400 audit(1752350170.708:1361): avc: denied { wake_alarm } for pid=11762 comm="syz.3.1522" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 478.983294][ T30] audit: type=1400 audit(1752350172.218:1362): avc: denied { map } for pid=11759 comm="syz.5.1524" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.112281][T11778] evm: overlay not supported [ 479.119805][ T30] audit: type=1400 audit(1752350172.218:1363): avc: denied { execute } for pid=11759 comm="syz.5.1524" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.208879][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'. [ 479.788139][T11797] input: syz1 as /devices/virtual/input/input29 [ 480.642859][ T5892] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 480.831874][T11798] FAULT_INJECTION: forcing a failure. [ 480.831874][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 480.844643][T11798] CPU: 1 UID: 0 PID: 11798 Comm: syz.0.1533 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 480.844666][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.844676][T11798] Call Trace: [ 480.844682][T11798] [ 480.844689][T11798] dump_stack_lvl+0x16c/0x1f0 [ 480.844717][T11798] should_fail_ex+0x512/0x640 [ 480.844739][T11798] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 480.844765][T11798] should_failslab+0xc2/0x120 [ 480.844791][T11798] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 480.844814][T11798] ? alloc_empty_file+0x55/0x1e0 [ 480.844834][T11798] alloc_empty_file+0x55/0x1e0 [ 480.844851][T11798] path_openat+0xda/0x2cb0 [ 480.844872][T11798] ? __schedule+0x1181/0x5de0 [ 480.844903][T11798] ? __pfx_path_openat+0x10/0x10 [ 480.844933][T11798] do_filp_open+0x20b/0x470 [ 480.844956][T11798] ? __pfx_do_filp_open+0x10/0x10 [ 480.844997][T11798] ? _raw_spin_unlock+0x3e/0x50 [ 480.845017][T11798] ? alloc_fd+0x471/0x7d0 [ 480.845047][T11798] do_sys_openat2+0x11b/0x1d0 [ 480.845063][T11798] ? __pfx_do_sys_openat2+0x10/0x10 [ 480.845080][T11798] ? __fget_files+0x20e/0x3c0 [ 480.845109][T11798] __x64_sys_creat+0xcc/0x120 [ 480.845127][T11798] ? __pfx___x64_sys_creat+0x10/0x10 [ 480.845149][T11798] ? rcu_is_watching+0x12/0xc0 [ 480.845170][T11798] ? do_syscall_64+0x91/0x4c0 [ 480.845195][T11798] do_syscall_64+0xcd/0x4c0 [ 480.845220][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.845237][T11798] RIP: 0033:0x7ff21298e929 [ 480.845252][T11798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.845267][T11798] RSP: 002b:00007ff213818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 480.845284][T11798] RAX: ffffffffffffffda RBX: 00007ff212bb6080 RCX: 00007ff21298e929 [ 480.845294][T11798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 480.845304][T11798] RBP: 00007ff213818090 R08: 0000000000000000 R09: 0000000000000000 [ 480.845314][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.845323][T11798] R13: 0000000000000000 R14: 00007ff212bb6080 R15: 00007fff863acc58 [ 480.845346][T11798] [ 480.859672][ T30] audit: type=1400 audit(1752350174.058:1364): avc: denied { watch_reads } for pid=11792 comm="syz.0.1533" path="/302/bus" dev="overlay" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 481.317422][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 482.154639][ T5892] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 482.164882][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.173370][ T5892] usb 4-1: Product: syz [ 482.177542][ T5892] usb 4-1: Manufacturer: syz [ 482.182134][ T5892] usb 4-1: SerialNumber: syz [ 482.233947][T11814] tipc: Can't bind to reserved service type 0 [ 482.251598][ T30] audit: type=1400 audit(1752350175.468:1365): avc: denied { associate } for pid=11813 comm="syz.4.1539" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 482.263061][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 482.440337][ T5892] usb 4-1: config 0 descriptor?? [ 482.461788][ T5892] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 482.499938][ T5892] cyphidcom ttyUSB0: required endpoint is missing [ 482.531250][ T5892] usb 4-1: USB disconnect, device number 38 [ 482.554053][ T5892] cypress_m8 4-1:0.0: device disconnected [ 483.060736][ T5151] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 483.072709][ T5151] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 483.331657][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 483.595025][ T30] audit: type=1400 audit(1752350176.838:1366): avc: denied { create } for pid=11849 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 485.263726][T11836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.269854][T11836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.278661][T11836] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.333238][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 485.532625][ T1205] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 485.743566][ T1205] usb 6-1: device descriptor read/64, error -71 [ 486.052621][ T1205] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 486.349437][ T1205] usb 6-1: device descriptor read/64, error -71 [ 486.523227][ T1205] usb usb6-port1: attempt power cycle [ 486.952945][ T1205] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 486.990615][ T1205] usb 6-1: device descriptor read/8, error -71 [ 487.128919][ T30] audit: type=1400 audit(1752350180.368:1367): avc: denied { read } for pid=11886 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 487.175975][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 487.246736][T11888] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 487.347598][ T5151] Bluetooth: hci5: command 0x0c1a tx timeout [ 487.368102][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 487.474034][ T1205] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 487.993300][ T1205] usb 6-1: device descriptor read/8, error -71 [ 488.104285][ T1205] usb usb6-port1: unable to enumerate USB device [ 488.298802][ T30] audit: type=1400 audit(1752350181.538:1368): avc: denied { write } for pid=11892 comm="syz.3.1560" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 488.667952][ T30] audit: type=1400 audit(1752350181.908:1369): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 489.552923][T11908] sp0: Synchronizing with TNC [ 489.568889][T11914] fuse: Bad value for 'fd' [ 489.620122][T11906] [U] è [ 490.121805][T11923] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.641458][T11926] lo speed is unknown, defaulting to 1000 [ 490.702034][T11932] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1570'. [ 490.942495][ T5899] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 491.124448][T11943] binder: 11942:11943 ioctl c018937d 200000000080 returned -22 [ 491.132855][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 491.143308][ T5899] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 491.151686][ T5899] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 491.282760][ T5899] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 491.597031][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.606902][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.697150][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 491.730380][ T5899] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 491.740369][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.753308][ T5899] usb 3-1: config 0 descriptor?? [ 491.785719][T11944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.799723][T11957] fuse: Bad value for 'fd' [ 491.802929][T11944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 491.812916][T11944] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 492.068143][T11963] openvswitch: netlink: Flow actions attr not present in new flow. [ 492.688673][ T5899] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 492.766451][ T5899] usb 3-1: USB disconnect, device number 52 [ 492.810108][ T5899] usblp0: removed [ 493.182936][ T5899] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 493.701553][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 493.762595][ T5892] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 493.942905][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 493.942927][ T5151] Bluetooth: hci5: command 0x0c1a tx timeout [ 494.041153][ T5892] usb 4-1: device descriptor read/64, error -71 [ 494.054526][ T5899] usb 3-1: device not accepting address 53, error -71 [ 494.359629][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 494.368749][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 494.422762][ T5892] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 494.582680][ T5892] usb 4-1: device descriptor read/64, error -71 [ 494.694379][ T5892] usb usb4-port1: attempt power cycle [ 495.394094][T12005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 495.440362][T11998] Unsupported ieee802154 address type: 0 [ 495.449284][ T30] audit: type=1400 audit(1752350188.678:1370): avc: denied { bind } for pid=11997 comm="syz.0.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.762718][ T5892] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 495.783688][ T5892] usb 4-1: device descriptor read/8, error -71 [ 496.313944][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 496.803689][ T30] audit: type=1400 audit(1752350190.048:1371): avc: denied { getopt } for pid=12017 comm="syz.5.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 496.845676][T12023] input: syz0 as /devices/virtual/input/input33 [ 497.071064][T12032] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 497.335729][T12043] FAULT_INJECTION: forcing a failure. [ 497.335729][T12043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.355851][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.2.1603 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 497.355876][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.355886][T12043] Call Trace: [ 497.355891][T12043] [ 497.355897][T12043] dump_stack_lvl+0x16c/0x1f0 [ 497.355923][T12043] should_fail_ex+0x512/0x640 [ 497.355955][T12043] _copy_to_user+0x32/0xd0 [ 497.355980][T12043] simple_read_from_buffer+0xcb/0x170 [ 497.356004][T12043] proc_fail_nth_read+0x197/0x270 [ 497.356026][T12043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.356049][T12043] ? rw_verify_area+0xcf/0x680 [ 497.356068][T12043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.356089][T12043] vfs_read+0x1e4/0xc60 [ 497.356113][T12043] ? __pfx___mutex_lock+0x10/0x10 [ 497.356138][T12043] ? __pfx_vfs_read+0x10/0x10 [ 497.356171][T12043] ? __fget_files+0x20e/0x3c0 [ 497.356199][T12043] ksys_read+0x12a/0x250 [ 497.356219][T12043] ? __pfx_ksys_read+0x10/0x10 [ 497.356247][T12043] do_syscall_64+0xcd/0x4c0 [ 497.356272][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.356289][T12043] RIP: 0033:0x7fe44518d33c [ 497.356303][T12043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 497.356318][T12043] RSP: 002b:00007fe4460c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.356335][T12043] RAX: ffffffffffffffda RBX: 00007fe4453b5fa0 RCX: 00007fe44518d33c [ 497.356346][T12043] RDX: 000000000000000f RSI: 00007fe4460c50a0 RDI: 0000000000000004 [ 497.356356][T12043] RBP: 00007fe4460c5090 R08: 0000000000000000 R09: 0000000000000000 [ 497.356365][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.356375][T12043] R13: 0000000000000000 R14: 00007fe4453b5fa0 R15: 00007ffe0b4741b8 [ 497.356398][T12043] [ 497.543415][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.202922][ T5899] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 498.315170][ T30] audit: type=1400 audit(1752350191.558:1372): avc: denied { map } for pid=12044 comm="syz.4.1602" path="socket:[34042]" dev="sockfs" ino=34042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 498.353106][ T5899] usb 1-1: device descriptor read/64, error -71 [ 498.616037][ T5899] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 499.930620][ T5899] usb 1-1: device descriptor read/64, error -71 [ 500.413723][T12037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.498365][ T5899] usb usb1-port1: attempt power cycle [ 500.531405][T12037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.546259][T12037] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 500.773884][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 500.991638][ T30] audit: type=1400 audit(1752350194.228:1373): avc: denied { write } for pid=12082 comm="syz.0.1611" name="file0" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 501.034351][ T30] audit: type=1400 audit(1752350194.228:1374): avc: denied { open } for pid=12082 comm="syz.0.1611" path="/321/file0" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 501.176598][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.662895][ T30] audit: type=1400 audit(1752350194.498:1375): avc: denied { ioctl } for pid=12082 comm="syz.0.1611" path="/321/file0" dev="tmpfs" ino=1721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 501.716314][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.188044][T12098] 9pnet_fd: Insufficient options for proto=fd [ 502.533374][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 502.612484][ T5151] Bluetooth: hci5: command 0x0c1a tx timeout [ 503.373180][T12115] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1619'. [ 503.487147][T12120] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.496492][T12120] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.505260][T12120] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.514029][T12120] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.472584][ T5892] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 504.690775][ T5892] usb 1-1: device descriptor read/64, error -71 [ 505.012562][ T5892] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 505.142703][ T5892] usb 1-1: device descriptor read/64, error -71 [ 505.252890][ T5892] usb usb1-port1: attempt power cycle [ 505.631513][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 505.673507][ T5892] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 505.717020][ T5892] usb 1-1: device descriptor read/8, error -71 [ 505.760743][ T30] audit: type=1400 audit(1752350198.998:1376): avc: denied { write } for pid=12138 comm="syz.5.1625" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.788012][ T30] audit: type=1400 audit(1752350199.028:1377): avc: denied { map } for pid=12138 comm="syz.5.1625" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.815952][ T30] audit: type=1400 audit(1752350199.058:1378): avc: denied { call } for pid=12138 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 505.841739][ T30] audit: type=1400 audit(1752350199.058:1379): avc: denied { listen } for pid=12138 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 505.843472][T12144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.864608][ T30] audit: type=1400 audit(1752350199.058:1380): avc: denied { accept } for pid=12138 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 505.894210][T12144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.901205][T12144] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 506.002754][ T5892] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 506.046273][ T5892] usb 1-1: device descriptor read/8, error -71 [ 506.071687][ T5899] IPVS: starting estimator thread 0... [ 506.142603][ T5933] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 506.172931][ T5892] usb usb1-port1: unable to enumerate USB device [ 506.180473][T12159] IPVS: using max 76 ests per chain, 182400 per kthread [ 506.289240][ T30] audit: type=1400 audit(1752350199.528:1381): avc: denied { ioctl } for pid=12162 comm="syz.5.1632" path="socket:[34445]" dev="sockfs" ino=34445 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 506.345007][ T5933] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 506.378473][ T5933] usb 5-1: config 0 has no interface number 0 [ 506.394576][ T5933] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 506.412513][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.420587][ T5933] usb 5-1: Product: syz [ 506.425093][ T5933] usb 5-1: Manufacturer: syz [ 506.429685][ T5933] usb 5-1: SerialNumber: syz [ 506.470477][ T5933] usb 5-1: config 0 descriptor?? [ 506.692586][ T5933] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 506.711845][ T5933] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 506.730747][ T5933] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 506.753166][ T5933] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 507.207244][ T30] audit: type=1400 audit(1752350200.048:1382): avc: denied { bind } for pid=12166 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.256568][ T5933] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 507.392860][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 507.418345][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 507.426004][ T30] audit: type=1400 audit(1752350200.588:1383): avc: denied { write } for pid=12172 comm="syz.0.1635" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 507.481976][ T5899] usb 5-1: USB disconnect, device number 46 [ 507.536410][ T5899] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 507.574786][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 507.586664][ T5899] keyspan 5-1:0.133: device disconnected [ 507.610806][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 507.640808][ T9] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 507.655613][ T9] usb 6-1: config 7 has an invalid descriptor of length 146, skipping remainder of the config [ 507.678707][ T9] usb 6-1: config 7 has no interface number 0 [ 507.715246][ T9] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 508.113890][ T5151] Bluetooth: hci5: command 0x0c1a tx timeout [ 508.119995][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 508.132658][ T9] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x7 has invalid maxpacket 53792, setting to 1024 [ 508.166893][ T9] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 1024 [ 508.183671][ T9] usb 6-1: config 7 interface 128 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 508.382883][ T9] usb 6-1: config 7 interface 128 has no altsetting 0 [ 508.415529][ T9] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 508.425025][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.433720][ T9] usb 6-1: Product: syz [ 508.438985][ T9] usb 6-1: Manufacturer: syz [ 508.447309][ T9] usb 6-1: SerialNumber: syz [ 508.461723][T12169] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 508.853466][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.863508][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 508.883205][ T5899] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 508.902576][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 508.907117][ T9] usb 6-1: USB disconnect, device number 12 [ 508.966129][ T5828] udevd[5828]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 509.007820][ T5828] udevd[5828]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 509.037523][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.054308][ T30] audit: type=1400 audit(1752350202.278:1384): avc: denied { read } for pid=12196 comm="syz.0.1640" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 509.066042][ T5899] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 509.081083][ T30] audit: type=1400 audit(1752350202.278:1385): avc: denied { open } for pid=12196 comm="syz.0.1640" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 509.104513][ T5899] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 509.128548][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.129887][T12197] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1640'. [ 509.145791][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 509.157301][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 509.168006][ T5899] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 509.180601][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.898924][ T24] usb 5-1: config 0 descriptor?? [ 509.911276][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 510.182560][ T5933] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 510.355128][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.372350][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.383919][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.397455][ T5933] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.408475][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.429728][ T5933] usb 4-1: config 0 descriptor?? [ 510.438160][ T24] gspca_sonixj: reg_w1 err -110 [ 510.448898][ T24] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 510.676854][ T30] audit: type=1400 audit(1752350203.918:1386): avc: denied { map } for pid=12213 comm="syz.4.1644" path="socket:[34820]" dev="sockfs" ino=34820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 510.854891][ T5933] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 510.881134][ T5933] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 511.406766][ T5933] usb 3-1: USB disconnect, device number 55 [ 511.429507][T12210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.442290][T12210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.473096][T12210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 511.494311][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.503013][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.511732][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.545376][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.627775][ T1205] usb 4-1: USB disconnect, device number 43 [ 511.629707][T12158] delete_channel: no stack [ 512.311451][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 513.493091][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 513.498302][ T1205] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 513.499633][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 513.551893][T12232] lo speed is unknown, defaulting to 1000 [ 513.602958][ T30] audit: type=1400 audit(1752350206.838:1387): avc: denied { create } for pid=12225 comm="syz.5.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 513.666420][ T30] audit: type=1400 audit(1752350206.888:1388): avc: denied { setopt } for pid=12225 comm="syz.5.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 513.690920][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 513.710879][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.831423][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.841977][ T1205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.855628][ T1205] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.869448][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.884506][T12241] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 514.048327][ T1205] usb 4-1: config 0 descriptor?? [ 514.639222][T12247] block nbd5: NBD_DISCONNECT [ 514.643116][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.735888][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.767711][T12252] netlink: 'syz.5.1654': attribute type 21 has an invalid length. [ 514.845341][ T1205] usbhid 4-1:0.0: can't add hid device: -71 [ 514.862449][ T1205] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 514.907491][ T1205] usb 4-1: USB disconnect, device number 44 [ 514.926802][T12254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.024328][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1656'. [ 515.151719][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 515.187313][T12264] vxcan2: entered allmulticast mode [ 516.546353][T12283] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.628429][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=12287 comm=syz.0.1664 [ 517.163465][T12269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.205427][T12269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.232068][T12269] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 517.395525][T12297] geneve2: entered promiscuous mode [ 517.503660][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 517.662624][ T24] usb 3-1: device descriptor read/64, error -71 [ 517.683316][T12305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.713113][ T5885] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 517.731193][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1669'. [ 517.893953][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.911935][ T5885] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 517.931445][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 517.958023][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 518.090452][T12316] overlayfs: missing 'lowerdir' [ 518.095901][ T30] audit: type=1400 audit(1752350211.328:1389): avc: denied { mount } for pid=12308 comm="syz.5.1671" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 518.170468][T12317] comedi comedi3: mpc624: I/O port conflict (0xcf8,16) [ 518.452598][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 518.460499][ T24] usb 3-1: device descriptor read/64, error -71 [ 518.497404][ T30] audit: type=1400 audit(1752350211.328:1390): avc: denied { mounton } for pid=12308 comm="syz.5.1671" path="/86/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 518.534912][T12319] openvswitch: netlink: Flow actions attr not present in new flow. [ 518.593114][ T24] usb usb3-port1: attempt power cycle [ 518.681854][T12320] block device autoloading is deprecated and will be removed. [ 518.795758][ T5885] usb 4-1: Product: syz [ 518.799980][ T5885] usb 4-1: SerialNumber: syz [ 518.839454][ T5885] usb 4-1: config 0 descriptor?? [ 518.840670][ T30] audit: type=1400 audit(1752350212.078:1391): avc: denied { unmount } for pid=10157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 518.884798][ T5885] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 518.903832][ T5885] usb 4-1: Detected SIO [ 518.913186][ T5885] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 518.979445][T12322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1673'. [ 518.998767][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1673'. [ 519.094072][ T43] usb 4-1: USB disconnect, device number 45 [ 519.102483][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 519.142374][ T24] usb 3-1: device descriptor read/8, error -71 [ 519.214969][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 519.252546][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 519.252948][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 519.262039][ T43] ftdi_sio 4-1:0.0: device disconnected [ 519.748070][ T30] audit: type=1400 audit(1752350212.988:1392): avc: denied { map } for pid=12326 comm="syz.2.1675" path="socket:[36045]" dev="sockfs" ino=36045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.779412][ T30] audit: type=1400 audit(1752350213.018:1393): avc: denied { read } for pid=12326 comm="syz.2.1675" path="socket:[36045]" dev="sockfs" ino=36045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.819824][T12337] openvswitch: netlink: Flow actions attr not present in new flow. [ 520.602055][T12344] netlink: 'syz.5.1680': attribute type 10 has an invalid length. [ 520.641795][T12344] bond0: (slave bond_slave_0): Releasing backup interface [ 520.759077][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.770401][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.184201][T12350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1682'. [ 522.990489][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 523.154446][ T43] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 523.182538][ T5151] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 523.285867][T12367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1687'. [ 523.296072][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 523.640948][ T43] usb 1-1: device descriptor read/64, error -71 [ 523.923061][ T43] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 524.038043][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.096987][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.134031][ T43] usb 1-1: device descriptor read/64, error -71 [ 524.293022][ T43] usb usb1-port1: attempt power cycle [ 524.544458][T12386] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 524.552742][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 524.609805][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 524.622583][ T5885] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 524.692582][ T43] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 524.723151][ T43] usb 1-1: device descriptor read/8, error -71 [ 524.782476][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 524.797055][ T5885] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 524.815978][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 524.832831][ T5885] usb 3-1: Product: syz [ 524.842731][ T5885] usb 3-1: Manufacturer: syz [ 524.870142][ T5885] usb 3-1: SerialNumber: syz [ 524.880958][ T5885] usb 3-1: config 0 descriptor?? [ 525.102932][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.118116][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.130783][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.143782][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.153930][ T24] usb 3-1: USB disconnect, device number 60 [ 525.498017][ T1205] libceph: connect (1)[c::]:6789 error -101 [ 525.510471][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 525.522959][T12399] ceph: No mds server is up or the cluster is laggy [ 525.524285][T12402] /dev/nullb0: Can't open blockdev [ 525.746973][ T30] audit: type=1400 audit(1752350218.988:1394): avc: denied { map } for pid=12405 comm="syz.2.1699" path="socket:[36260]" dev="sockfs" ino=36260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 526.002475][ T1205] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 526.177953][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.191713][ T1205] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 526.203514][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.211608][ T1205] usb 3-1: Product: syz [ 526.216050][ T1205] usb 3-1: Manufacturer: syz [ 526.220758][ T1205] usb 3-1: SerialNumber: syz [ 526.228504][ T1205] usb 3-1: config 0 descriptor?? [ 526.240462][ T1205] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 526.248880][ T1205] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 526.441653][ T5885] usb 3-1: USB disconnect, device number 61 [ 527.544306][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 527.590303][T12427] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 528.471677][T12432] lo speed is unknown, defaulting to 1000 [ 529.344159][T12446] input: syz1 as /devices/virtual/input/input36 [ 529.547256][ T30] audit: type=1400 audit(1752350222.788:1395): avc: denied { mounton } for pid=12449 comm="syz.0.1711" path="/344/file0" dev="tmpfs" ino=1842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 529.852473][ T1205] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 530.373369][ T1205] usb 1-1: Using ep0 maxpacket: 32 [ 530.419388][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.436245][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.488523][ T1205] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 530.552941][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.562592][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 530.591787][ T1205] usb 1-1: config 0 descriptor?? [ 530.783056][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 530.808257][ T9] usb 4-1: config 194 has an invalid interface number: 67 but max is 0 [ 530.829541][ T9] usb 4-1: config 194 has no interface number 0 [ 531.020576][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 531.038356][ T1205] ft260 0003:0403:6030.000F: unknown main item tag 0x7 [ 531.043674][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.069854][ T9] usb 4-1: Product: syz [ 531.084188][ T9] usb 4-1: Manufacturer: syz [ 531.092204][ T9] usb 4-1: SerialNumber: syz [ 531.120368][ T9] smsc95xx v2.0.0 [ 531.302233][ T1205] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 531.335582][ T1205] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -71 [ 531.435123][ T1205] usb 1-1: USB disconnect, device number 72 [ 531.544675][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.383392][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.541547][ T5838] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 532.546723][ T9] smsc95xx 4-1:194.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 532.588988][ T9] smsc95xx 4-1:194.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.232532][ T1205] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 533.442807][ T30] audit: type=1400 audit(1752350226.678:1396): avc: denied { setopt } for pid=12496 comm="syz.0.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 533.462398][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.479901][ T1205] usb 3-1: device descriptor read/64, error -71 [ 533.528499][T12500] lo speed is unknown, defaulting to 1000 [ 533.723903][ T1205] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 533.739456][ T30] audit: type=1400 audit(1752350226.958:1397): avc: denied { read write } for pid=12504 comm="syz.4.1727" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 533.761595][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.802221][ T30] audit: type=1400 audit(1752350226.958:1398): avc: denied { open } for pid=12504 comm="syz.4.1727" path="/363/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 534.142592][ T1205] usb 3-1: device descriptor read/64, error -71 [ 534.250360][T12501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.260549][ T1205] usb usb3-port1: attempt power cycle [ 534.271653][T12501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.288052][T12501] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.598333][ T9] smsc95xx 4-1:194.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 534.610857][ T9] smsc95xx 4-1:194.67: probe with driver smsc95xx failed with error -71 [ 534.612894][ T1205] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 534.633687][ T9] usb 4-1: USB disconnect, device number 46 [ 534.674592][ T1205] usb 3-1: device descriptor read/8, error -71 [ 534.932621][ T1205] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 535.103841][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 535.123303][ T1205] usb 3-1: device descriptor read/8, error -71 [ 535.296545][ T24] usb 6-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config [ 535.312860][ T1205] usb usb3-port1: unable to enumerate USB device [ 535.402490][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.423906][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.433490][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.524018][ T24] usb 6-1: Product: syz [ 535.539732][ T24] usb 6-1: Manufacturer: syz [ 535.544660][ T24] usb 6-1: SerialNumber: syz [ 536.223832][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 536.292782][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 536.298944][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 536.401993][T12533] binder_alloc: 12532: binder_alloc_buf, no vma [ 536.445470][T12533] binder: 12532:12533 ioctl c0306201 200000000240 returned -11 [ 536.935438][ T24] cdc_mbim 6-1:1.0: bind() failure [ 537.065528][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 537.072539][ T24] cdc_ncm 6-1:1.1: bind() failure [ 537.301619][ T30] audit: type=1400 audit(1752350230.538:1399): avc: denied { attach_queue } for pid=12542 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 537.691475][T12546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18981 sclass=netlink_route_socket pid=12546 comm=syz.0.1739 [ 537.840778][T12549] loop2: detected capacity change from 0 to 7 [ 537.870388][ T5824] Dev loop2: unable to read RDB block 7 [ 537.877373][ T5824] loop2: unable to read partition table [ 537.886144][ T5824] loop2: partition table beyond EOD, truncated [ 537.946295][T12560] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 538.017011][T12562] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20007 [ 538.145017][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 538.200489][T12567] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 538.491019][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076dbec00: rx timeout, send abort [ 538.502764][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076dbec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 539.032698][ T30] audit: type=1400 audit(1752350232.238:1400): avc: denied { read } for pid=5183 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 539.079391][ T30] audit: type=1400 audit(1752350232.238:1401): avc: denied { search } for pid=5183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.102771][ T5892] usb 6-1: USB disconnect, device number 13 [ 539.118505][ T30] audit: type=1400 audit(1752350232.238:1402): avc: denied { search } for pid=5183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.232143][ T30] audit: type=1400 audit(1752350232.238:1403): avc: denied { add_name } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.292592][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 539.494338][T12574] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 539.531817][ T30] audit: type=1400 audit(1752350232.238:1404): avc: denied { create } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 539.583709][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 539.584920][ T30] audit: type=1400 audit(1752350232.248:1405): avc: denied { append open } for pid=5183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 539.591358][ T43] usb 1-1: can't read configurations, error -61 [ 539.615576][ T30] audit: type=1400 audit(1752350232.248:1406): avc: denied { getattr } for pid=5183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 539.788695][ T30] audit: type=1400 audit(1752350232.588:1407): avc: denied { bind } for pid=12573 comm="syz.5.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 540.013467][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 540.023779][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 540.606883][ T30] audit: type=1400 audit(1752350233.278:1408): avc: denied { setopt } for pid=12583 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.627311][ T30] audit: type=1400 audit(1752350233.378:1409): avc: denied { write } for pid=12585 comm="syz.5.1749" path="socket:[35666]" dev="sockfs" ino=35666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.778650][ T43] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 541.062124][T12593] sg_read: process 341 (syz.5.1750) changed security contexts after opening file descriptor, this is not allowed. [ 541.085151][T12593] 9pnet_fd: Insufficient options for proto=fd [ 541.125733][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 541.164426][ T43] usb 1-1: can't read configurations, error -61 [ 541.172955][ T43] usb usb1-port1: attempt power cycle [ 541.310277][ T8177] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 541.347442][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 541.722487][ T43] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 541.902591][ T1205] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 541.923161][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 541.931054][ T43] usb 1-1: can't read configurations, error -61 [ 541.964221][ T5892] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 542.052507][ T1205] usb 6-1: device descriptor read/64, error -71 [ 542.122148][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 542.122870][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 542.422543][ T43] usb 1-1: device not accepting address 76, error -71 [ 542.462570][ T1205] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 542.495707][ T43] usb usb1-port1: unable to enumerate USB device [ 542.742636][ T1205] usb 6-1: device descriptor read/64, error -71 [ 542.849118][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.861601][ T5892] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 542.871048][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.881053][ T5892] usb 4-1: Product: syz [ 542.886139][ T5892] usb 4-1: Manufacturer: syz [ 542.891146][ T5892] usb 4-1: SerialNumber: syz [ 542.893261][ T1205] usb usb6-port1: attempt power cycle [ 542.898665][ T5892] usb 4-1: config 0 descriptor?? [ 542.908074][T12611] ip6tnl2: entered promiscuous mode [ 542.914655][ T5892] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 542.927136][ T5892] usb 4-1: unsupported MDLM descriptors [ 543.332496][ T5838] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 543.396884][ T1205] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 543.534842][ T1205] usb 6-1: device descriptor read/8, error -71 [ 544.373949][ T1205] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 544.516969][ T43] usb 4-1: USB disconnect, device number 47 [ 544.732453][ T1205] usb 6-1: device not accepting address 17, error -71 [ 544.739961][ T1205] usb usb6-port1: unable to enumerate USB device [ 548.215509][T12679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.246348][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1771'. [ 548.302597][ T5885] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 548.432486][ T5885] usb 3-1: device descriptor read/64, error -71 [ 548.512812][ T5899] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 548.602541][ T5933] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 548.643447][T12687] ubi: mtd0 is already attached to ubi31 [ 548.673986][ T5899] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 548.683488][ T5885] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 548.691149][ T5899] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 548.705972][ T5899] usb 1-1: config 8 has no interface number 0 [ 548.712135][ T5899] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 548.726440][ T5899] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 548.735591][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.753935][ T5899] usb 1-1: NFC: intf ffff88802ad36000 id ffffffff8f565be0 [ 548.754411][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 548.776106][ T5933] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 548.785467][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.799286][ T5933] usb 4-1: Product: syz [ 548.803776][ T5933] usb 4-1: Manufacturer: syz [ 548.808583][ T5933] usb 4-1: SerialNumber: syz [ 548.829811][ T5933] usb 4-1: config 0 descriptor?? [ 548.832543][ T5885] usb 3-1: device descriptor read/64, error -71 [ 548.943004][ T5885] usb usb3-port1: attempt power cycle [ 548.957638][ T43] usb 1-1: USB disconnect, device number 77 [ 549.382791][ T5885] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 549.413677][ T5885] usb 3-1: device descriptor read/8, error -71 [ 549.551112][T12691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.566027][T12691] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.576119][T12691] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 549.585038][ T5933] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 549.611407][ T5933] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 549.631946][T12699] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 549.642358][T12699] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 549.651914][T12699] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1777'. [ 549.662025][ T5885] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 549.693268][ T5885] usb 3-1: device descriptor read/8, error -71 [ 549.734824][ T5933] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 549.756341][ T5933] usb 4-1: USB disconnect, device number 48 [ 549.816395][ T5885] usb usb3-port1: unable to enumerate USB device [ 550.171844][T12710] IPv6: sit2: Disabled Multicast RS [ 550.180839][T12710] sit2: entered allmulticast mode [ 550.298723][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 550.298871][ T30] audit: type=1326 audit(1752350243.538:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 550.548229][ T30] audit: type=1326 audit(1752350243.538:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 550.615705][ T30] audit: type=1326 audit(1752350243.538:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 550.698071][ T30] audit: type=1326 audit(1752350243.538:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 550.788944][ T30] audit: type=1326 audit(1752350243.538:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 550.861573][ T30] audit: type=1326 audit(1752350243.538:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff21298d3df code=0x7ffc0000 [ 550.975788][ T30] audit: type=1326 audit(1752350243.538:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 551.010651][ T30] audit: type=1326 audit(1752350243.538:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21298e929 code=0x7ffc0000 [ 551.034634][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 551.253449][ T30] audit: type=1400 audit(1752350244.198:1421): avc: denied { read } for pid=12724 comm="syz.0.1783" path="socket:[36786]" dev="sockfs" ino=36786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 551.343633][T12728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.370958][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.381471][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 551.395763][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.572702][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 551.688035][T12733] binder: BINDER_SET_CONTEXT_MGR already set [ 551.695106][T12733] binder: 12729:12733 ioctl 4018620d 200000000040 returned -16 [ 551.715849][ T5151] Bluetooth: hci5: command 0x0c1a tx timeout [ 552.119157][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1787'. [ 554.327028][T12781] kvm: Disabled LAPIC found during irq injection [ 554.996919][ T30] audit: type=1400 audit(1752350248.238:1422): avc: denied { setopt } for pid=12787 comm="syz.5.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 555.114770][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1802'. [ 555.654751][T12798] lo speed is unknown, defaulting to 1000 [ 555.739226][T12801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'. [ 555.750306][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 556.232301][T12806] FAULT_INJECTION: forcing a failure. [ 556.232301][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.294967][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.2.1805 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 556.294993][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.295003][T12806] Call Trace: [ 556.295008][T12806] [ 556.295015][T12806] dump_stack_lvl+0x16c/0x1f0 [ 556.295043][T12806] should_fail_ex+0x512/0x640 [ 556.295068][T12806] _copy_from_user+0x2e/0xd0 [ 556.295092][T12806] get_user_ifreq+0xf1/0x250 [ 556.295118][T12806] sock_do_ioctl+0x16b/0x280 [ 556.295133][T12806] ? __pfx_sock_do_ioctl+0x10/0x10 [ 556.295158][T12806] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 556.295182][T12806] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 556.295207][T12806] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 556.295233][T12806] sock_ioctl+0x227/0x6b0 [ 556.295251][T12806] ? __pfx_sock_ioctl+0x10/0x10 [ 556.295265][T12806] ? hook_file_ioctl_common+0x145/0x410 [ 556.295286][T12806] ? selinux_file_ioctl+0x180/0x270 [ 556.295307][T12806] ? selinux_file_ioctl+0xb4/0x270 [ 556.295329][T12806] ? __pfx_sock_ioctl+0x10/0x10 [ 556.295347][T12806] __x64_sys_ioctl+0x18b/0x210 [ 556.295367][T12806] do_syscall_64+0xcd/0x4c0 [ 556.295391][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.295406][T12806] RIP: 0033:0x7fe44518e929 [ 556.295421][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.295436][T12806] RSP: 002b:00007fe4460c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.295453][T12806] RAX: ffffffffffffffda RBX: 00007fe4453b5fa0 RCX: 00007fe44518e929 [ 556.295464][T12806] RDX: 0000200000000000 RSI: 00000000000089b1 RDI: 0000000000000004 [ 556.295473][T12806] RBP: 00007fe4460c5090 R08: 0000000000000000 R09: 0000000000000000 [ 556.295482][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.295492][T12806] R13: 0000000000000000 R14: 00007fe4453b5fa0 R15: 00007ffe0b4741b8 [ 556.295513][T12806] [ 556.943112][T12816] xt_l2tp: invalid flags combination: 0 [ 557.312280][ T30] audit: type=1400 audit(1752350250.178:1423): avc: denied { ioctl } for pid=12809 comm="syz.3.1807" path="socket:[37206]" dev="sockfs" ino=37206 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.312998][T12814] FAULT_INJECTION: forcing a failure. [ 557.312998][T12814] name failslab, interval 1, probability 0, space 0, times 0 [ 557.350382][T12814] CPU: 0 UID: 0 PID: 12814 Comm: syz.5.1806 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 557.350405][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.350415][T12814] Call Trace: [ 557.350420][T12814] [ 557.350426][T12814] dump_stack_lvl+0x16c/0x1f0 [ 557.350452][T12814] should_fail_ex+0x512/0x640 [ 557.350472][T12814] ? fs_reclaim_acquire+0xae/0x150 [ 557.350490][T12814] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 557.350512][T12814] should_failslab+0xc2/0x120 [ 557.350536][T12814] __kmalloc_noprof+0xd2/0x510 [ 557.350563][T12814] tomoyo_realpath_from_path+0xc2/0x6e0 [ 557.350589][T12814] ? tomoyo_profile+0x47/0x60 [ 557.350607][T12814] tomoyo_path_perm+0x274/0x460 [ 557.350626][T12814] ? tomoyo_path_perm+0x260/0x460 [ 557.350647][T12814] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 557.350665][T12814] ? stack_depot_save_flags+0x28/0xa40 [ 557.350700][T12814] ? avc_has_perm_noaudit+0x117/0x3b0 [ 557.350729][T12814] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 557.350763][T12814] tomoyo_sb_umount+0x8c/0xd0 [ 557.350787][T12814] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 557.350815][T12814] security_sb_umount+0x8e/0x210 [ 557.350835][T12814] path_umount+0x30e/0x11d0 [ 557.350860][T12814] ? kmem_cache_free+0x2d1/0x4d0 [ 557.350880][T12814] ? putname+0x154/0x1a0 [ 557.350894][T12814] ? __pfx_path_umount+0x10/0x10 [ 557.350918][T12814] ? putname+0x154/0x1a0 [ 557.350935][T12814] __x64_sys_umount+0x16a/0x1a0 [ 557.350958][T12814] ? __pfx___x64_sys_umount+0x10/0x10 [ 557.350985][T12814] ? rcu_is_watching+0x12/0xc0 [ 557.351011][T12814] do_syscall_64+0xcd/0x4c0 [ 557.351037][T12814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.351054][T12814] RIP: 0033:0x7f250698e929 [ 557.351068][T12814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.351084][T12814] RSP: 002b:00007f2507819038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 557.351101][T12814] RAX: ffffffffffffffda RBX: 00007f2506bb6080 RCX: 00007f250698e929 [ 557.351111][T12814] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 557.351121][T12814] RBP: 00007f2507819090 R08: 0000000000000000 R09: 0000000000000000 [ 557.351130][T12814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.351140][T12814] R13: 0000000000000000 R14: 00007f2506bb6080 R15: 00007ffe0a4e5ed8 [ 557.351169][T12814] [ 557.688107][T12814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.975326][ T30] audit: type=1400 audit(1752350250.938:1424): avc: denied { unmount } for pid=12811 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.312876][T12832] QAT: failed to copy from user cfg_data. [ 558.612702][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 558.702552][ T973] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 558.775843][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 558.797411][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 558.831758][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.862806][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 558.887838][ T973] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 558.905830][ T973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.919202][ T973] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.952416][ T43] usb 6-1: Product: syz [ 558.957723][ T43] usb 6-1: Manufacturer: syz [ 558.975029][ T43] usb 6-1: SerialNumber: syz [ 559.109323][T12838] openvswitch: netlink: Flow actions attr not present in new flow. [ 559.122783][ T43] usb 6-1: config 0 descriptor?? [ 559.422892][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.431618][ T43] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.537481][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.622493][ T973] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.651089][ T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.661693][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.670511][ T973] usb 4-1: Product: syz [ 559.675709][ T973] usb 4-1: Manufacturer: syz [ 559.681684][ T973] usb 4-1: SerialNumber: syz [ 559.754543][ T30] audit: type=1326 audit(1752350252.998:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 559.778023][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.785467][ T30] audit: type=1326 audit(1752350253.018:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 559.808921][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.816400][ T30] audit: type=1326 audit(1752350253.018:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 559.839866][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.846342][T12845] overlay: filesystem on ./bus not supported as upperdir [ 559.846808][ T30] audit: type=1326 audit(1752350253.018:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 559.876728][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.912443][ T30] audit: type=1326 audit(1752350253.018:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 560.103780][ T30] audit: type=1326 audit(1752350253.028:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 560.127174][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.152135][ T30] audit: type=1326 audit(1752350253.028:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 560.175632][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.187044][ T30] audit: type=1326 audit(1752350253.028:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44518e929 code=0x7ffc0000 [ 560.210502][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.545981][ T973] usb 4-1: USB disconnect, device number 49 [ 560.615387][ T7789] udevd[7789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.753745][ T43] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 560.825005][ T43] usb 6-1: USB disconnect, device number 18 [ 561.155463][T12866] FAULT_INJECTION: forcing a failure. [ 561.155463][T12866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.170997][T12866] CPU: 0 UID: 0 PID: 12866 Comm: syz.3.1820 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 561.171024][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.171033][T12866] Call Trace: [ 561.171039][T12866] [ 561.171045][T12866] dump_stack_lvl+0x16c/0x1f0 [ 561.171072][T12866] should_fail_ex+0x512/0x640 [ 561.171090][T12866] _copy_from_user+0x2e/0xd0 [ 561.171106][T12866] do_semtimedop+0x182/0x2e0 [ 561.171120][T12866] ? __pfx_do_semtimedop+0x10/0x10 [ 561.171149][T12866] ? __pfx_ksys_write+0x10/0x10 [ 561.171167][T12866] do_syscall_64+0xcd/0x4c0 [ 561.171191][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.171208][T12866] RIP: 0033:0x7fdafeb8e929 [ 561.171222][T12866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.171234][T12866] RSP: 002b:00007fdaff9c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 561.171244][T12866] RAX: ffffffffffffffda RBX: 00007fdafedb5fa0 RCX: 00007fdafeb8e929 [ 561.171250][T12866] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000002 [ 561.171257][T12866] RBP: 00007fdaff9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 561.171262][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.171268][T12866] R13: 0000000000000000 R14: 00007fdafedb5fa0 R15: 00007ffef720ced8 [ 561.171281][T12866] [ 561.314496][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.452454][ T5933] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 561.468568][T12875] lo speed is unknown, defaulting to 1000 [ 561.605370][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 561.615311][ T5933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 561.622558][ T5885] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 561.633313][ T5933] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 561.633348][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 561.633365][ T5933] usb 3-1: Product: syz [ 561.633378][ T5933] usb 3-1: Manufacturer: syz [ 561.633390][ T5933] usb 3-1: SerialNumber: syz [ 561.819258][ T5933] usb 3-1: config 0 descriptor?? [ 561.828977][T12868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.846028][ T5885] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 561.856282][ T5885] usb 4-1: config 0 has no interface number 0 [ 561.869110][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.896319][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1825'. [ 561.914155][ T5885] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 561.925094][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 561.937483][ T5885] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 561.949326][ T5885] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 561.960513][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 561.979075][ T5885] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 561.988216][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.999014][ T5885] usb 4-1: config 0 descriptor?? [ 562.006342][T12872] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 562.014186][T12872] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 562.024378][ T5885] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 562.236498][T12872] 9pnet_fd: Insufficient options for proto=fd [ 562.304572][ T5885] usb 3-1: USB disconnect, device number 70 [ 562.536318][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1826'. [ 562.536340][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'. [ 562.625562][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.625639][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.271898][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 563.342244][T12897] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 564.895929][ T5899] usb 4-1: USB disconnect, device number 50 [ 564.925448][ T5899] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 565.029760][T12912] FAULT_INJECTION: forcing a failure. [ 565.029760][T12912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.153276][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.3.1836 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 565.153305][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.153315][T12912] Call Trace: [ 565.153321][T12912] [ 565.153328][T12912] dump_stack_lvl+0x16c/0x1f0 [ 565.153360][T12912] should_fail_ex+0x512/0x640 [ 565.153387][T12912] _copy_to_user+0x32/0xd0 [ 565.153415][T12912] keyctl_read_key+0x349/0x4f0 [ 565.153440][T12912] __do_sys_keyctl+0x3d9/0x590 [ 565.153462][T12912] do_syscall_64+0xcd/0x4c0 [ 565.153488][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.153506][T12912] RIP: 0033:0x7fdafeb8e929 [ 565.153519][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.153535][T12912] RSP: 002b:00007fdaff9c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 565.153552][T12912] RAX: ffffffffffffffda RBX: 00007fdafedb5fa0 RCX: 00007fdafeb8e929 [ 565.153564][T12912] RDX: 0000200000000140 RSI: 000000002f3d23e8 RDI: 000000000000000b [ 565.153575][T12912] RBP: 00007fdaff9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 565.153585][T12912] R10: fffffffffffffeef R11: 0000000000000246 R12: 0000000000000001 [ 565.153595][T12912] R13: 0000000000000000 R14: 00007fdafedb5fa0 R15: 00007ffef720ced8 [ 565.153619][T12912] [ 565.314047][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 565.327370][T12920] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 565.472460][ T5933] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 566.002564][ T5933] usb 3-1: device descriptor read/64, error -71 [ 566.252454][ T5933] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 566.452678][ T5933] usb 3-1: device descriptor read/64, error -71 [ 566.497739][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 566.510408][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.519840][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.573632][ T5933] usb usb3-port1: attempt power cycle [ 567.188144][ T5933] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 567.271482][ T5933] usb 3-1: device descriptor read/8, error -71 [ 567.467074][T12930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 567.479228][T12930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 567.508714][T12930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 567.522639][ T5933] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 567.552882][ T5933] usb 3-1: device descriptor read/8, error -71 [ 567.662724][ T5933] usb usb3-port1: unable to enumerate USB device [ 567.670598][T12951] geneve2: entered promiscuous mode [ 567.676619][T12951] geneve2: entered allmulticast mode [ 568.596929][T12960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.630335][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1845'. [ 568.937773][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 569.096062][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 569.142255][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 569.142266][ T30] audit: type=1800 audit(1752350262.378:1466): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1849" name="bus" dev="overlay" ino=665 res=0 errno=0 [ 569.499560][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 569.583534][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 569.601480][ T30] audit: type=1400 audit(1752350262.838:1467): avc: denied { mounton } for pid=12975 comm="syz.2.1851" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.908961][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 569.942458][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 569.982820][T12982] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 571.003653][ T30] audit: type=1400 audit(1752350264.238:1468): avc: denied { create } for pid=12983 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 571.216220][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 571.718006][ T43] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 571.775399][ T30] audit: type=1400 audit(1752350264.238:1469): avc: denied { ioctl } for pid=12983 comm="syz.2.1853" path="socket:[37557]" dev="sockfs" ino=37557 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 571.874112][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 572.014943][ T43] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.171381][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 572.256390][ T30] audit: type=1400 audit(1752350265.468:1470): avc: denied { setopt } for pid=12986 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.352634][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 572.403735][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 572.413456][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.421517][ T43] usb 6-1: Product: syz [ 572.440489][ T30] audit: type=1400 audit(1752350265.678:1471): avc: denied { connect } for pid=12990 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.494001][ T43] usb 6-1: Manufacturer: syz [ 572.600505][ T5899] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 572.631037][ T43] usb 6-1: can't set config #1, error -71 [ 573.178281][ T43] usb 6-1: USB disconnect, device number 19 [ 573.237825][ T973] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 573.272581][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 573.281824][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.295009][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.309889][ T5899] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 573.320213][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.338178][ T5899] usb 4-1: config 0 descriptor?? [ 573.571926][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 573.584391][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.585109][ T973] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 573.604862][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.606319][ T973] usb 1-1: config 0 has no interface number 0 [ 573.621304][ T973] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.633053][ T973] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 573.645363][ T973] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.868445][ T973] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.881936][ T973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 573.891437][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 573.897508][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.907504][ T5899] usb 4-1: USB disconnect, device number 51 [ 573.915994][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.925496][ T973] usb 1-1: config 0 descriptor?? [ 573.988110][ T973] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 574.761092][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.779148][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.813787][ T973] usb 1-1: USB disconnect, device number 78 [ 574.834950][ T43] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 574.898254][ T973] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 575.012505][ T43] usb 4-1: device descriptor read/64, error -71 [ 575.282582][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 575.309494][T13024] ALSA: mixer_oss: invalid index 40000 [ 575.336000][ T43] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 575.998865][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.035314][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 576.091192][T13028] hub 8-0:1.0: USB hub found [ 576.097336][T13028] hub 8-0:1.0: 1 port detected [ 576.105455][ T43] usb 4-1: device descriptor read/64, error -71 [ 576.116064][ T30] audit: type=1400 audit(1752350269.358:1472): avc: denied { setopt } for pid=13027 comm="syz.2.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 576.156778][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.274797][ T43] usb usb4-port1: attempt power cycle [ 576.399736][ T24] usb 6-1: config 0 descriptor?? [ 576.888035][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 577.358207][ T24] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 577.515296][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input38 [ 577.527225][ T43] usb 4-1: device descriptor read/8, error -71 [ 577.570439][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1871'. [ 577.682091][ T24] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 578.601028][T13057] SELinux: failed to load policy [ 578.602097][ T30] audit: type=1400 audit(1752350271.838:1473): avc: denied { listen } for pid=13056 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 578.603225][ T30] audit: type=1400 audit(1752350271.848:1474): avc: denied { accept } for pid=13056 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 578.759084][ T973] usb 6-1: USB disconnect, device number 20 [ 579.736471][T13065] lo speed is unknown, defaulting to 1000 [ 580.233076][ T5885] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 581.028213][ T5885] usb 4-1: device descriptor read/64, error -71 [ 581.742805][ T5885] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 581.937760][ T5885] usb 4-1: device descriptor read/64, error -71 [ 582.014680][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 582.053524][ T5885] usb usb4-port1: attempt power cycle [ 582.412815][ T5885] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 582.463902][ T5885] usb 4-1: device descriptor read/8, error -71 [ 582.762491][ T5885] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 582.785312][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.793484][ T24] usb 1-1: config 0 has no interface number 0 [ 582.799655][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.824089][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.835927][ T24] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 582.882416][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.911529][ T24] usb 1-1: config 0 descriptor?? [ 583.000655][ T5885] usb 4-1: device not accepting address 59, error -71 [ 583.028131][ T5885] usb usb4-port1: unable to enumerate USB device [ 583.041673][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.107004][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.210314][ T24] usbhid 1-1:0.1: can't add hid device: -71 [ 584.232972][ T24] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 584.286943][T13109] veth0_to_team: entered promiscuous mode [ 584.292863][T13109] veth0_to_team: entered allmulticast mode [ 584.755526][ T24] usb 1-1: USB disconnect, device number 79 [ 585.024430][ T5943] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 690.032320][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 690.032342][ C0] rcu: 1-...!: (0 ticks this GP) idle=e38c/1/0x4000000000000000 softirq=67785/67785 fqs=0 [ 690.033004][ C0] rcu: (detected by 0, t=10502 jiffies, g=53213, q=496 ncpus=2) [ 690.033022][ C0] Sending NMI from CPU 0 to CPUs 1: [ 690.033047][ C1] NMI backtrace for cpu 1 [ 690.033058][ C1] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:7 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 690.033075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.033086][ C1] Workqueue: usb_hub_wq hub_event [ 690.033105][ C1] RIP: 0010:kasan_check_range+0x32/0x1b0 [ 690.033120][ C1] Code: 84 64 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 53 0f 82 d7 00 00 00 eb 0f cc cc cc 48 b8 00 00 00 00 00 00 00 ff eb 0a <48> b8 00 00 00 00 00 80 ff ff 48 39 c7 0f 82 b3 00 00 00 4c 8d 54 [ 690.033133][ C1] RSP: 0018:ffffc90000a08d00 EFLAGS: 00000086 [ 690.033145][ C1] RAX: ffff888057a3d2e8 RBX: ffff8880756ea080 RCX: ffffffff899a282a [ 690.033155][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888057a3d2e0 [ 690.033163][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.033172][ C1] R10: 0000000004000001 R11: 0000000000000001 R12: 0000000000000000 [ 690.033181][ C1] R13: ffff8880756ea000 R14: 0000000004000001 R15: dffffc0000000000 [ 690.033190][ C1] FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 690.033205][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.033215][ C1] CR2: 00007fdaff99fd58 CR3: 000000005c25a000 CR4: 00000000003526f0 [ 690.033224][ C1] Call Trace: [ 690.033229][ C1] [ 690.033236][ C1] taprio_set_budgets+0x13a/0x310 [ 690.033256][ C1] advance_sched+0x5f6/0xc80 [ 690.033276][ C1] ? __pfx_advance_sched+0x10/0x10 [ 690.033290][ C1] __hrtimer_run_queues+0x202/0xad0 [ 690.033309][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 690.033324][ C1] ? read_tsc+0x9/0x20 [ 690.033342][ C1] hrtimer_interrupt+0x397/0x8e0 [ 690.033362][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 690.033376][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 690.033395][ C1] [ 690.033399][ C1] [ 690.033405][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.033419][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 690.033436][ C1] Code: 00 e8 32 63 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 e0 8d 20 00 48 85 db 0f 85 55 01 00 00 e8 62 92 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 17 6e 87 [ 690.033448][ C1] RSP: 0018:ffffc900044cf478 EFLAGS: 00000287 [ 690.033459][ C1] RAX: ffffffff8f2ec3d8 RBX: 0000000000000000 RCX: ffffc9001f4f4000 [ 690.033468][ C1] RDX: 0000000000100000 RSI: ffffffff819b64ae RDI: 0000000000000007 [ 690.033477][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 690.033485][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ec3d8 [ 690.033493][ C1] R13: ffffffff8f2ec380 R14: ffffc900044cf508 R15: dffffc0000000000 [ 690.033506][ C1] ? console_flush_all+0x99e/0xc60 [ 690.033524][ C1] ? console_flush_all+0x99e/0xc60 [ 690.033543][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 690.033562][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 690.033581][ C1] console_unlock+0xd8/0x210 [ 690.033596][ C1] ? __pfx_console_unlock+0x10/0x10 [ 690.033612][ C1] ? dev_printk_emit+0xfa/0x140 [ 690.033629][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 690.033644][ C1] vprintk_emit+0x418/0x6d0 [ 690.033660][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 690.033679][ C1] dev_printk_emit+0xfa/0x140 [ 690.033694][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 690.033710][ C1] ? kernfs_notify+0x1a4/0x400 [ 690.033728][ C1] ? hub_port_reset+0x606/0x1cb0 [ 690.033745][ C1] __dev_printk+0xf5/0x270 [ 690.033763][ C1] _dev_info+0xe4/0x120 [ 690.033779][ C1] ? __pfx__dev_info+0x10/0x10 [ 690.033795][ C1] ? __pfx_hub_port_reset+0x10/0x10 [ 690.033813][ C1] hub_port_init+0x11ac/0x3a70 [ 690.033831][ C1] hub_event+0x2c67/0x4fa0 [ 690.033855][ C1] ? __pfx_hub_event+0x10/0x10 [ 690.033869][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.033886][ C1] ? irqentry_exit+0x3b/0x90 [ 690.033907][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 690.033925][ C1] process_one_work+0x9cf/0x1b70 [ 690.033943][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 690.033959][ C1] ? __pfx_process_one_work+0x10/0x10 [ 690.033982][ C1] ? assign_work+0x1a0/0x250 [ 690.033996][ C1] worker_thread+0x6c8/0xf10 [ 690.034013][ C1] ? __kthread_parkme+0x19e/0x250 [ 690.034031][ C1] ? __pfx_worker_thread+0x10/0x10 [ 690.034045][ C1] kthread+0x3c5/0x780 [ 690.034058][ C1] ? __pfx_kthread+0x10/0x10 [ 690.034071][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.034087][ C1] ? __pfx_kthread+0x10/0x10 [ 690.034100][ C1] ret_from_fork+0x5d7/0x6f0 [ 690.034118][ C1] ? __pfx_kthread+0x10/0x10 [ 690.034130][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.034150][ C1] [ 690.035042][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g53213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 690.035062][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 690.035070][ C0] rcu: RCU grace-period kthread stack dump: [ 690.035077][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 690.035135][ C0] Call Trace: [ 690.035141][ C0] [ 690.035152][ C0] __schedule+0x116a/0x5de0 [ 690.035183][ C0] ? __lock_acquire+0x622/0x1c90 [ 690.035206][ C0] ? __pfx___schedule+0x10/0x10 [ 690.035237][ C0] ? find_held_lock+0x2b/0x80 [ 690.035260][ C0] ? schedule+0x2d7/0x3a0 [ 690.035285][ C0] schedule+0xe7/0x3a0 [ 690.035306][ C0] schedule_timeout+0x123/0x290 [ 690.035326][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 690.035347][ C0] ? __pfx_process_timeout+0x10/0x10 [ 690.035373][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.035396][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 690.035426][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 690.035447][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.035465][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.035488][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 690.035503][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 690.035525][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.035551][ C0] rcu_gp_kthread+0x270/0x380 [ 690.035568][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.035584][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.035606][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.035630][ C0] ? __kthread_parkme+0x19e/0x250 [ 690.035655][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.035672][ C0] kthread+0x3c5/0x780 [ 690.035690][ C0] ? __pfx_kthread+0x10/0x10 [ 690.035709][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.035730][ C0] ? __pfx_kthread+0x10/0x10 [ 690.035749][ C0] ret_from_fork+0x5d7/0x6f0 [ 690.035772][ C0] ? __pfx_kthread+0x10/0x10 [ 690.035790][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.035820][ C0] [ 690.035827][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 690.035836][ C0] CPU: 0 UID: 0 PID: 8184 Comm: kworker/u8:13 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 690.035856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.035868][ C0] Workqueue: events_unbound toggle_allocation_gate [ 690.035890][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 690.035911][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 690.035927][ C0] RSP: 0018:ffffc900053f78a0 EFLAGS: 00000293 [ 690.035940][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd92d [ 690.035952][ C0] RDX: ffff8880439ca440 RSI: ffffffff81afd909 RDI: 0000000000000005 [ 690.035963][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 690.035974][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 690.035985][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 690.035997][ C0] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 690.036014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.036026][ C0] CR2: 000000110c39d568 CR3: 000000000e382000 CR4: 00000000003526f0 [ 690.036038][ C0] Call Trace: [ 690.036044][ C0] [ 690.036052][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 690.036077][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 690.036105][ C0] ? __pfx___text_poke+0x10/0x10 [ 690.036124][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 690.036141][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 690.036164][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 690.036186][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 690.036208][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 690.036238][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 690.036262][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 690.036283][ C0] ? find_held_lock+0x2b/0x80 [ 690.036310][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 690.036331][ C0] jump_label_update+0x376/0x550 [ 690.036354][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 690.036374][ C0] static_key_enable+0x1a/0x20 [ 690.036394][ C0] toggle_allocation_gate+0xfa/0x280 [ 690.036416][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 690.036444][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.036468][ C0] process_one_work+0x9cf/0x1b70 [ 690.036494][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 690.036517][ C0] ? __pfx_process_one_work+0x10/0x10 [ 690.036543][ C0] ? assign_work+0x1a0/0x250 [ 690.036563][ C0] worker_thread+0x6c8/0xf10 [ 690.036592][ C0] ? __pfx_worker_thread+0x10/0x10 [ 690.036611][ C0] kthread+0x3c5/0x780 [ 690.036629][ C0] ? __pfx_kthread+0x10/0x10 [ 690.036647][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.036668][ C0] ? __pfx_kthread+0x10/0x10 [ 690.036686][ C0] ret_from_fork+0x5d7/0x6f0 [ 690.036708][ C0] ? __pfx_kthread+0x10/0x10 [ 690.036726][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.036756][ C0] [ 837.946744][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u8:13:8184] [ 837.946766][ C0] Modules linked in: [ 837.946776][ C0] irq event stamp: 4722330 [ 837.946782][ C0] hardirqs last enabled at (4722329): [] irqentry_exit+0x3b/0x90 [ 837.946814][ C0] hardirqs last disabled at (4722330): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 837.946838][ C0] softirqs last enabled at (4722326): [] handle_softirqs+0x5be/0x8e0 [ 837.946862][ C0] softirqs last disabled at (4722273): [] __irq_exit_rcu+0x109/0x170 [ 837.946887][ C0] CPU: 0 UID: 0 PID: 8184 Comm: kworker/u8:13 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 837.946908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.946919][ C0] Workqueue: events_unbound toggle_allocation_gate [ 837.946941][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 837.946963][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 837.946978][ C0] RSP: 0018:ffffc900053f78a0 EFLAGS: 00000293 [ 837.946991][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd92d [ 837.947002][ C0] RDX: ffff8880439ca440 RSI: ffffffff81afd909 RDI: 0000000000000005 [ 837.947012][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 837.947021][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 837.947030][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 837.947041][ C0] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 837.947056][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.947068][ C0] CR2: 000000110c39d568 CR3: 000000000e382000 CR4: 00000000003526f0 [ 837.947079][ C0] Call Trace: [ 837.947086][ C0] [ 837.947097][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 837.947123][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 837.947150][ C0] ? __pfx___text_poke+0x10/0x10 [ 837.947168][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 837.947184][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 837.947207][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 837.947228][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 837.947249][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 837.947273][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 837.947297][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 837.947317][ C0] ? find_held_lock+0x2b/0x80 [ 837.947345][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 837.947365][ C0] jump_label_update+0x376/0x550 [ 837.947385][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 837.947405][ C0] static_key_enable+0x1a/0x20 [ 837.947422][ C0] toggle_allocation_gate+0xfa/0x280 [ 837.947445][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 837.947471][ C0] ? rcu_is_watching+0x12/0xc0 [ 837.947496][ C0] process_one_work+0x9cf/0x1b70 [ 837.947522][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 837.947544][ C0] ? __pfx_process_one_work+0x10/0x10 [ 837.947570][ C0] ? assign_work+0x1a0/0x250 [ 837.947589][ C0] worker_thread+0x6c8/0xf10 [ 837.947623][ C0] ? __pfx_worker_thread+0x10/0x10 [ 837.947641][ C0] kthread+0x3c5/0x780 [ 837.947658][ C0] ? __pfx_kthread+0x10/0x10 [ 837.947676][ C0] ? rcu_is_watching+0x12/0xc0 [ 837.947696][ C0] ? __pfx_kthread+0x10/0x10 [ 837.947713][ C0] ret_from_fork+0x5d7/0x6f0 [ 837.947735][ C0] ? __pfx_kthread+0x10/0x10 [ 837.947751][ C0] ret_from_fork_asm+0x1a/0x30 [ 837.947782][ C0] [ 837.947789][ C0] Sending NMI from CPU 0 to CPUs 1: [ 837.947812][ C1] NMI backtrace for cpu 1 [ 837.947821][ C1] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:7 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 837.947837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.947846][ C1] Workqueue: usb_hub_wq hub_event [ 837.947861][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 837.947878][ C1] Code: 26 4e 56 00 48 89 df 5b e9 1d d6 5b 00 be 03 00 00 00 5b e9 22 78 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 f8 d8 14 12 65 8b 05 09 d9 14 [ 837.947889][ C1] RSP: 0018:ffffc90000a08d88 EFLAGS: 00000002 [ 837.947899][ C1] RAX: ffffed100eadd726 RBX: ffff888057a3d340 RCX: 1ffff1100eadd726 [ 837.947908][ C1] RDX: ffff8880328a0000 RSI: ffff8880756eb930 RDI: 0000000000000005 [ 837.947916][ C1] RBP: ffff8880756eb800 R08: 0000000000000005 R09: 0000000000000000 [ 837.947924][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 837.947933][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: ffff8880756ea000 [ 837.947942][ C1] FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 837.947955][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.947964][ C1] CR2: 00007fdaff99fd58 CR3: 000000005c25a000 CR4: 00000000003526f0 [ 837.947973][ C1] Call Trace: [ 837.947977][ C1] [ 837.947982][ C1] advance_sched+0x3ea/0xc80 [ 837.948003][ C1] ? __pfx_advance_sched+0x10/0x10 [ 837.948017][ C1] __hrtimer_run_queues+0x202/0xad0 [ 837.948036][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 837.948051][ C1] ? read_tsc+0x9/0x20 [ 837.948068][ C1] hrtimer_interrupt+0x397/0x8e0 [ 837.948088][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 837.948103][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 837.948120][ C1] [ 837.948124][ C1] [ 837.948130][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.948144][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 837.948162][ C1] Code: 00 e8 32 63 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 e0 8d 20 00 48 85 db 0f 85 55 01 00 00 e8 62 92 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 17 6e 87 [ 837.948174][ C1] RSP: 0018:ffffc900044cf478 EFLAGS: 00000287 [ 837.948184][ C1] RAX: ffffffff8f2ec3d8 RBX: 0000000000000000 RCX: ffffc9001f4f4000 [ 837.948193][ C1] RDX: 0000000000100000 RSI: ffffffff819b64ae RDI: 0000000000000007 [ 837.948201][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 837.948209][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ec3d8 [ 837.948217][ C1] R13: ffffffff8f2ec380 R14: ffffc900044cf508 R15: dffffc0000000000 [ 837.948230][ C1] ? console_flush_all+0x99e/0xc60 [ 837.948248][ C1] ? console_flush_all+0x99e/0xc60 [ 837.948265][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 837.948285][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 837.948303][ C1] console_unlock+0xd8/0x210 [ 837.948318][ C1] ? __pfx_console_unlock+0x10/0x10 [ 837.948335][ C1] ? dev_printk_emit+0xfa/0x140 [ 837.948352][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 837.948366][ C1] vprintk_emit+0x418/0x6d0 [ 837.948387][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 837.948406][ C1] dev_printk_emit+0xfa/0x140 [ 837.948421][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 837.948437][ C1] ? kernfs_notify+0x1a4/0x400 [ 837.948454][ C1] ? hub_port_reset+0x606/0x1cb0 [ 837.948471][ C1] __dev_printk+0xf5/0x270 [ 837.948488][ C1] _dev_info+0xe4/0x120 [ 837.948504][ C1] ? __pfx__dev_info+0x10/0x10 [ 837.948519][ C1] ? __pfx_hub_port_reset+0x10/0x10 [ 837.948537][ C1] hub_port_init+0x11ac/0x3a70 [ 837.948555][ C1] hub_event+0x2c67/0x4fa0 [ 837.948579][ C1] ? __pfx_hub_event+0x10/0x10 [ 837.948593][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.948608][ C1] ? irqentry_exit+0x3b/0x90 [ 837.948628][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 837.948647][ C1] process_one_work+0x9cf/0x1b70 [ 837.948663][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 837.948680][ C1] ? __pfx_process_one_work+0x10/0x10 [ 837.948697][ C1] ? assign_work+0x1a0/0x250 [ 837.948711][ C1] worker_thread+0x6c8/0xf10 [ 837.948728][ C1] ? __kthread_parkme+0x19e/0x250 [ 837.948747][ C1] ? __pfx_worker_thread+0x10/0x10 [ 837.948762][ C1] kthread+0x3c5/0x780 [ 837.948774][ C1] ? __pfx_kthread+0x10/0x10 [ 837.948787][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.948803][ C1] ? __pfx_kthread+0x10/0x10 [ 837.948816][ C1] ret_from_fork+0x5d7/0x6f0 [ 837.948833][ C1] ? __pfx_kthread+0x10/0x10 [ 837.948846][ C1] ret_from_fork_asm+0x1a/0x30 [ 837.948869][ C1] [ 837.949809][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 837.949821][ C0] CPU: 0 UID: 0 PID: 8184 Comm: kworker/u8:13 Tainted: G L 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 837.949845][ C0] Tainted: [L]=SOFTLOCKUP [ 837.949852][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.949863][ C0] Workqueue: events_unbound toggle_allocation_gate [ 837.949885][ C0] Call Trace: [ 837.949892][ C0] [ 837.949899][ C0] dump_stack_lvl+0x3d/0x1f0 [ 837.949924][ C0] panic+0x71c/0x800 [ 837.949948][ C0] ? __pfx_panic+0x10/0x10 [ 837.949971][ C0] ? __pfx__printk+0x10/0x10 [ 837.949990][ C0] ? nmi_backtrace_stall_check+0x6e/0x540 [ 837.950007][ C0] ? irq_work_queue+0xce/0x100 [ 837.950029][ C0] ? watchdog_timer_fn+0x5f9/0x7d0 [ 837.950048][ C0] ? watchdog_timer_fn+0x5ec/0x7d0 [ 837.950071][ C0] watchdog_timer_fn+0x60a/0x7d0 [ 837.950094][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 837.950112][ C0] __hrtimer_run_queues+0x5ea/0xad0 [ 837.950139][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 837.950158][ C0] ? read_tsc+0x9/0x20 [ 837.950184][ C0] hrtimer_interrupt+0x397/0x8e0 [ 837.950216][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 837.950234][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 837.950255][ C0] [ 837.950262][ C0] [ 837.950270][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.950288][ C0] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 837.950309][ C0] Code: e8 6a 19 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 07 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 837.950324][ C0] RSP: 0018:ffffc900053f78a0 EFLAGS: 00000293 [ 837.950337][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd92d [ 837.950349][ C0] RDX: ffff8880439ca440 RSI: ffffffff81afd909 RDI: 0000000000000005 [ 837.950360][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 837.950370][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 837.950380][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 837.950398][ C0] ? smp_call_function_many_cond+0xd9d/0x1510 [ 837.950419][ C0] ? smp_call_function_many_cond+0xd79/0x1510 [ 837.950445][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 837.950469][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 837.950497][ C0] ? __pfx___text_poke+0x10/0x10 [ 837.950516][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 837.950533][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 837.950556][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 837.950578][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 837.950600][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 837.950631][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 837.950656][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 837.950676][ C0] ? find_held_lock+0x2b/0x80 [ 837.950705][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 837.950725][ C0] jump_label_update+0x376/0x550 [ 837.950747][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 837.950768][ C0] static_key_enable+0x1a/0x20 [ 837.950786][ C0] toggle_allocation_gate+0xfa/0x280 [ 837.950809][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 837.950838][ C0] ? rcu_is_watching+0x12/0xc0 [ 837.950863][ C0] process_one_work+0x9cf/0x1b70 [ 837.950890][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 837.950911][ C0] ? __pfx_process_one_work+0x10/0x10 [ 837.950938][ C0] ? assign_work+0x1a0/0x250 [ 837.950958][ C0] worker_thread+0x6c8/0xf10 [ 837.950991][ C0] ? __pfx_worker_thread+0x10/0x10 [ 837.951009][ C0] kthread+0x3c5/0x780 [ 837.951026][ C0] ? __pfx_kthread+0x10/0x10 [ 837.951045][ C0] ? rcu_is_watching+0x12/0xc0 [ 837.951066][ C0] ? __pfx_kthread+0x10/0x10 [ 837.951084][ C0] ret_from_fork+0x5d7/0x6f0 [ 837.951107][ C0] ? __pfx_kthread+0x10/0x10 [ 837.951124][ C0] ret_from_fork_asm+0x1a/0x30 [ 837.951157][ C0] [ 839.041375][ C0] Shutting down cpus with NMI [ 839.041591][ C0] Kernel Offset: disabled