last executing test programs: 3m11.614246213s ago: executing program 1 (id=824): r0 = socket(0x21, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x1012c, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002400)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000e00000020000000000000000000000000000000000200004000020800c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000e0000002000000000000000000000000ff0300000000000000000000000000000000000001000000000000000000000000000000000000000200000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000f403000000000000000000000001000000fcffffff00000000000000000a00040040000000000000004800010073686132353600"/210, @ANYRES8=r7], 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000300)={{0x3, 0x0, 0x80, {0x80a0000, 0xdddd1000, 0x2}}, "c0bfae5ceeab09c5bef6fedb3289da16ce54a35d9a8ff9930099fa627a598cc7c0d12f3a0f0a8725698c3c8959a0fe2714ecd1ca09d220bc60a94734b71f8ac1e641ca711eff799fe02b341e9c9a30112902d5f94ef1d6b04bdb7b3cf9eedabda74c5ef340f4617ab85129cfc244ea1ed0c0971b6efc0fa5b4a3b960bbd9b818b48d04e88495b3f1c6e7804ad08930ec5057065ac57227b9dabf55ec37ddcbb3e4f948a584124b5fbe311818dc7dbc2a712bf684a04bba5a26df9dfb0c486de15b28584560df974b85a3e7fae56f9283dcc30a6e1256a7c6a79076c30fe5e84065de513af1a854fab130f5581170864b8d7c2dd0d87166bb6ba4592ca0c7d45b4d96d13a8dc2f9199ab452382e0cff89c973a4a04db0246c3e5e67d1f91e1a38730e6b0a29f51076bb248d9f3a6988a5e5f8385ac96c56eac3e378667a1f95069de6ffc157bc570d72393a18a9ad1f3056a4ae6363b07fddd7456df9bb9c6d3eba3817fa8e2df7fc1d871b26d32915ca14bd99b139c33bb02a5e65deec6cfb69536985058c6b69ac261b4841cc6e3b0c61f87e5522cbbb00056341a42009cf3dd4d5260b875b13fc9e2d4fd22c78c0c076e534122ca6564776b06beae262e6993f8c40d7b148890b398747a8a76487706a7c80b995fad119734b4c136c65ae594ca360e35c45200525715bb5642bb43bb3aa547232840afc9472b344f79be9cbef363078230f9fb92c043f4a7387fd22f6b2d5f732ab28f70a1369ee391a5767ef57be201e78e00e3f08b1d20133e8cfb7df6c853e75f7aa59db0c239a05735bb376d45d427e2be158faba1a589734c69006581f085e50f23712c3a654cbf1e0ef05009d0e6c763dd4d6219f8395b33b935d96b18a87c0f79617e9957f60f1d59b43f7a8bcc0e8a43c67e7be7fea930f5625338ed7ac28ca556d4f00605630224d2c699d559c6b9c2c3a82de3f501af83fa9cf74fd5d0c5ed81a6a48c00736680cd5d875068e200f98a0802d2fcc81b65ad7a8aed3c1ed3eaef2e803825f7c3bfd6e64054f48ec9800f4961c9c9d51ffb153fd265684fefac47a5e929230df9835fb4fd9857de4c82dac8a8fc1b4c55af6e5bbd1c3de6ac599c9004b92e168594a4ef736d7c9f6ae9bf20d4f5dcb9e342af9c5d176c53f879fb5cbc0b7ea734dad09195e2d9370a8da4e341e93205000d8e046adcea9399686b2275be12df2815d6240e6e10278eaa78a4bf2b35355bb5394a54e4d32d9b49c3ba71abe9dce264aff67bfa79afd7b1c23b624fe0705d6ced49ec11513abab88b5cd61dd14f031f655e78b4b2eb99a038f86f9ae808686c6fc8fcc4ed47a43e19a343d7aac8ed53157a45da2f45929e5f3403e72d5d24a25a6871238423e4a6dfd7e6c9a2a36d520dfdc341a3c6d1459f734b471bd6bde337cc387d00a49f2fb4298b6266bda25d5d75e848169819c28134d8a0b53f0567e6a0e7c7fdbc55b7999976df2a74e05e636bc6c194de9a44de172a7b01951d2d6ca088d30a9e36af9e7057ab40c25ebd88bdd221697ca65f9fb6b2fec6b2627f8027b4ce3388f041b8d922bb97dec3f37085969bd6e63659ac5fc9ae2df50e833325972910afa83fd1178850c0abb441212b4c3c62e4119bc4e0ea94da66d8606b784a6359e455657284651297263b94ca331e13f41f403a643cf26f811db81374e74f0ea9b21f1adc736dbc4a060768bc7999d39c4124e19033ab7d32de82233c7082ee562ecf041cf89c09e63ab6e8e1c4f43d220e77ab254bcfd562e3a8dfb546eb4e04206c382a9f8940ba2dfb90a9c1919243ba6762c7d21d70740641acfa44c5be18dc859b7925c0d9241bcfc2b57df150aa0ea5dfbf9c6c63a745ea8dc8ee5902e078b989735e4f4062d554e413acf57d51d41e45e9004a217060bd73ed5b134a615928fe0578dfe60cb045b2348dc00c9c801bdb1a51d53df7fd7e225f3d91d472834fc2f9a118f7b4a389a362b68313c87b895750b60d651ab3fe53ed8e32b8905b6e0cf880fc594c1f41b8f1f15b23aa64720a58b47da727a723b9a9251008a78d87bb5cd9eb154eb9338e3783556f26286c87cf9b9e92f1a5bb40a3115e7d01279ae8ac11df855a25433219b87afc9e2de0813f8f387c7a4397a422cde64567ecc6f2f7fb69912475f30e3e2e0b9e39adc0a5309a2a6149229a6b59a6967ed9e7f881160bb9b84961696727401ee503bb7ad4df7d0cee3648ce1a3b369175848eb575b7a6560f070497f88b9c2ffcd9c1be58fcbe956b2720b88ca05c2a0611f0f3c27f6472a0ef22ce0af9c5a339d28b2baa22de29952502283c531c45cdb8f237a56481210fb2e84be19e260f36a31cc81dda142c2a9cc1d0f653eb899da1ff2b27d7a8615e2779617711cfafac2546aafdb3ab8fb31bbe8ed1e0a6bf9eac9aa63ad38b700575eb9aa44f3fc0e6eedde7341b2688090a4d3c76b3deac760ece584d9f57ec6f4ea5e6dc6bff5db16112c35fd986b6b9ec3285aeaa541bd4e0e3935315a4a1dfa2b5d861d740d1da54b8273b3ffa6afabeec8977f58d2ca55048c8ad28ae467467508b46d4f38a32c00ec988b4b178ec86db8495d7aa3e6513d2bf87dd6b76e318fd21afef2f63c383fc39dac1777bc8f2bfe44d3f66da342d45f9e8f875ff5f8922b1625e31ee6dc08963bba48ce4e6b720dfb84fbf83cc06582694cff3b74da0e4d4ddaa547cefcc5ed1f731d0e4d845ad6614dfe728efaf6c963b6c19648effe1a5f4934958eb61b045042811c9e1bed4ed4ed2250a10f55e34b07693918c736160b35fb0b35c1eb865c08cb8c97802f41df9d1d114437a3e90d0e5341e3cbc93e09f2d46f274f19825a8f3acbd07134d09c45aaea7ee1ccf2fbbd0c5eff2c93dfb77a00577b63962edfc17835bc976d66f8186f7598967ec7374151b0fa9a3f26ac0fb4aec52ddbcd08838b731381a12912e6833708b6a5af7759a9436d301ca0d9e4e42a6cc92f463ff1715e7f126b091547dc564dba05aff31d62b18a03ef5be126b4b0503d1fdfb3a7322e74872138e1b08f4b0c845b91a79c75e353e482087f7086ea48777813cf611ccd1ed867f0f00143bc9f17e71d4899d97dffbdcdd95e1b10fe402a15dc592ea01849bafb87e5640cd5f7adc5582b4789ac2a9047cdfd714855eec9c20f8678ea028c69e9b9dc3df957e7c4e565dda41bdc87c505ee5ac1fe107b750324c6af5015eab0e9d8a348aa6d494641cbffd5154fad47074c41b940a5add24c7bce3576078fba1480fdc2e5f941450ef9dc1779798c1b5117abec157de48574f108eaa9d2419e6d0692eafa7b0fb1125fa7fd015168fde00ff0d2db5e4e1ae2dbac0fc414e23059778a7e26a1797b0265779a3b8e58ab70f1278954fafc993c7862f2c3125d78cc86db39f97f0555c9a9b13d8b9974e990d6a631e932770c71f31df2b404acc09ccb66fa136d3b86a37190a6198bffaeab82eee2f77ff5deda85c96010950d2abc12ad5588b341148ab36be08e9611dbe612adc983f2b1ff4401137315d7189d9e4352f9698416544b2b5c85b35edd9bb637938184c854acb104d9fab26860e19c673b59348c0b723f67db88459805e9ca4822d8de3924654a910d81f2b36b9a96db396409e1b502b69783376f8ecfc6d120b5f9ce1bbb2dcc6a02a8a310f9bc5c30b5c9fd59b4876f81ff5b2c8d9e0bdd77f9665921ca28346defe2c8d1c29ccd7d559abc59401a0ddd99b86ec440760f11f18bd6a10510aae126f0cff825c612680a96ffec907a6074bab4a3bdad9c9f79958fe8beace123d22c3cb19f1b1613a3bc2968f1e81dbbe94dc6362135c96076af4b2580366acce2620205989e6bb8c0c9cb394439fa8dcda22c129a99fc869d386105d9f160f33e5b9d0e031e3314c7c23c158f770c91eb9d885768bc9aa61eb3d9e4b2fc8f671b8c7953d237458ba738d73e23df3ccafa9db278b2262ebbfa824b5875b7204e98967ba18f530071b0ad2fadd5e6e9be76d8972e1d44b268944c81baf7ab77123c0f6d3afbf7b87fad5eaf50b5e0a092a90e1e842ad6ffaab7f2b3da78cfb8ab35314f71173d87e480c0a4d4a3680bf3344305317519c9e80f36953f6a2c8c96db130fc0fe7e55f60dd4d78517e7130987f99f6a5c1377ddbd551f14e372046b685e6386e55c1aa33163900bf770bf40cbcf2e8e199cfb2503759788b60ccaf867f811da19528f40ebf5d5ed9efc39d0447c9e905e430e5cdf4a1ec535de7572f0c0663f6f13668261d632e10b2fbb09a57be63783edae09bbf8ab6f8c9be900aede518d032959660c19c74620389f00f8c2a5045380e2c779892f563302bac1935bad4885dde240684f0aff998941d4ba792512b26b39121e7a30215ed52aebd1e9ee6f47bae3f6bb8eb505d04bf7a26ec2c3cc1896aeef132fe278a56292a46ca3c187e50c7266e5102740e5eb0e2087be77e8760008d007599eddf808b39d01b535b99c10afa521733f77f46ce2241913829d8fc44f75ac06a2f24045b37d0c309cb064186fa793865279c96ae1866bc48af025f139929c97bdb1d620a42c30ad980051b56a787a9d32f1c8d11aa7912067d61b8f62a03277cb77f2aea61bf6354c96b62456776676490b55b03eea2ca46423ec0cb2df18f1bff08dec528d36e22c8553990052c6e5619d57a957d24d741473c3cc8acf16573e477c8a048263fac73ea3be38a29045c374902d908864c06e48e281638079ca54e4f0fa7d7f3057882830e68001d55b8fbf996b6716885a41572be26002aa9472680260b3122fe71695035d225527ea6d0658e12c8c411f1b74ae13c76ce831699cf70639a7b60360063c7772b87d360674c4e2c7297599e452fd4f7944f2a32d37236c7e1e34874d7e954744fdd35c5757d3e1d85c8c2ab4c78763c3279a4760cb48821617b8ba35a22dadd5ba53416c601ae214d87035de0e191a9e79ae10dd9c1d5567f5baa0e0655470866f7409fce35f05b82e14969fa8a92d0213cc858b2d7d5a1ca748902b497f07b0e343a9fcb6604c2d1d5c647046224ebf03c75e6d18aa22a2becb5f4f2dc5520d75c4eb45dd44b65b49ff018a2682b11a18edaf0af95206a08048caffde5c4804c557abab6013ab0423fb168f0b15def03bf981ca1b5b836b15f4dae7448085486d1b71da92a0a160abd4d4ec6916e6249bde5741a10812a3c0e8ef68a151905330bcf330032639dbf320db15137175899032ad58654aefcd981364082b0de14634d2a7a9fe831a0eede0f75366154337572cb6d4fcb9658544004eb299d4f9c9a938c28745b657a29ed62fa3aca3357ddd13f21e6469cd7f168ea5ee7b1ec9c0c0ecee87d209ff7981093d3e7029a4e6337617fc3d281283c45eb04703c119d595991efe55975fe1876bd381503ab99a4d7b005bd3d705795dcbf564c1fc8cc739a1fa4f36e9c4ca33de32356abd27f23fec9063378bead1527e4b97414ad829818f36ba60a991f0cd25adeeebeb0e271db6169b394c66383a05289ce2a51530b6205a1f22c5b256b98a094daa110a555ec559b9571da524c4a69c138f274f89b5e1a1ccd1ce999b088057384a23b411ccfb11d720fda4b90b4ba90445f9f1775fecc16df2d1b10555f254bb340e6ee3f1c94410ab5e372c3dd4f68d57c337985f429abd2cdde5f2c7641cc260ac9b66b1daa15e7f4ceffe58a13635df2315eefb131a67e34630f6f5af73f8eccb980db2631a26ab3e881eae0957bbd3b86da1ba8fcd6ecf1e006f10ef1378ce67844070dcfa", "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0x9, 0x0, &(0x7f00000023c0)) fchdir(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffdc3}, 0x2) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 3m10.381392549s ago: executing program 1 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000300)=0xe7, 0x4) mkdir(0x0, 0x92) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000010000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m9.497140309s ago: executing program 1 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x441) fchown(r3, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 3m8.457428015s ago: executing program 1 (id=837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f00000000c0)=0xd2, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f00000002c0)=[@register_looper, @release={0x40046306, 0x1}, @free_buffer={0x40086303, r3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/242, 0xf2, 0x0, 0x36}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x54, 0x0, &(0x7f0000000340)="75d49de3c39bca0c04167d87f27cd24198dcd7fcefec21d85bdb1142cd6ce7774dee91815db1c303124a1718c2b9eae60035705fa15116a1339f353b06b42e310eeadab6a6ff485aeaaffddf4eafe7744e78cea7"}) r4 = dup3(r2, r0, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3m8.05737058s ago: executing program 1 (id=839): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r11, &(0x7f0000000040)=""/44, 0x2c) read(r11, &(0x7f00000003c0)=""/214, 0xd6) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r12, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r12, 0x4, 0x5}, &(0x7f0000000040)=0xc) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ssrr={0x89, 0x1f, 0x86, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @local, @broadcast, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r13 = syz_open_dev$sg(&(0x7f0000006740), 0xfffffffffffffffa, 0x40000) ioctl$SG_GET_KEEP_ORPHAN(r13, 0x2288, 0x0) 3m4.661691253s ago: executing program 1 (id=848): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x10401, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xb0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e6e19b1048f40180c200000e88a8400081001000080045eb009a0064000009219078ac1414bb640101014e204e2204c1907880f32faa476364788fe06beb91c7295fc9a54e76a2156bdd71df920d7e657668ccad971957083921fa5e85b133b5e53d0bc4249b4d32b475744d37349accbbb05a506fe5b25a75ec2f32fdda5ddcb6792d9e2b54b40f2ee0395c6e924265e8d058bec771000000000052138c5639bc7a546bb3ddad58b3e17beb86d20b38263691f9b29ee5b0fd9005f9c00009d0f250a3d254bf07fb16893a6e9b94a2cf4fff381834b907484a41a518be2dfd00"/238], 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000440)={0x200, {{0x2, 0x4e24, @broadcast}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2008804, &(0x7f0000000240)={[{@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000007b00)=[{}]}) 2m49.099978067s ago: executing program 32 (id=848): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x10401, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xb0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e6e19b1048f40180c200000e88a8400081001000080045eb009a0064000009219078ac1414bb640101014e204e2204c1907880f32faa476364788fe06beb91c7295fc9a54e76a2156bdd71df920d7e657668ccad971957083921fa5e85b133b5e53d0bc4249b4d32b475744d37349accbbb05a506fe5b25a75ec2f32fdda5ddcb6792d9e2b54b40f2ee0395c6e924265e8d058bec771000000000052138c5639bc7a546bb3ddad58b3e17beb86d20b38263691f9b29ee5b0fd9005f9c00009d0f250a3d254bf07fb16893a6e9b94a2cf4fff381834b907484a41a518be2dfd00"/238], 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000440)={0x200, {{0x2, 0x4e24, @broadcast}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2008804, &(0x7f0000000240)={[{@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000007b00)=[{}]}) 9.526158245s ago: executing program 2 (id=1673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='scsi_dispatch_cmd_start\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 9.449261616s ago: executing program 0 (id=1674): syz_usb_connect(0x5, 0x81, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_connect(0x5, 0x81, &(0x7f0000000100)=ANY=[], 0x0) (async) 8.87764641s ago: executing program 2 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/35, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x6017be0a}) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0x6) 6.383341935s ago: executing program 0 (id=1692): syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000100)={0x200}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=@deltclass={0x24, 0x29, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x10}, {0xa, 0xfff2}, {0x7, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x10008800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) r3 = getuid() ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x1000000, {0x0, 0x1, 0xd, 0xc1e, 0x0, 0x10, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa, 0xfffffffffffffffd, 0xfffffffc, 0x0, 0x0, 0x8000, 0x2000, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r5) 6.204667847s ago: executing program 2 (id=1695): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_free_blocks\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x84081, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @private=0x3000000}, 0x10) splice(r4, 0x0, r0, 0x0, 0x8, 0x2) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.847240917s ago: executing program 2 (id=1698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) r2 = syz_io_uring_setup(0x52c, &(0x7f00000003c0)={0x0, 0x5097, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x568, 0x0, 0x2e, 0x0, 0x0) 5.786602784s ago: executing program 5 (id=1699): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x80801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x3a, 0xd2, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000900) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.00551367s ago: executing program 3 (id=1701): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file1\x00') (async) mknodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') (async) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000090061118c00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x800, 0x2) (rerun: 64) r8 = dup2(r7, r7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, 0x0, &(0x7f0000000280)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 4.081149516s ago: executing program 5 (id=1702): syz_emit_ethernet(0x32b, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2f5, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18}, {0x21, 0x6, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/49}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b1"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2002"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5170000000000000000000200000000000000000000000000008879e66485201a0015ca83740000000000000001000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4.078748255s ago: executing program 4 (id=1703): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x0, 0xbae1}, {0x0, 0x20000000}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x1}) 3.929472377s ago: executing program 3 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000300)=0xe7, 0x4) mkdir(0x0, 0x92) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000180000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.929308673s ago: executing program 4 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0046d00, &(0x7f0000001500)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x7ff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xaf}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) 3.910427606s ago: executing program 5 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/35, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x6017be0a}) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0x6) 3.232697642s ago: executing program 0 (id=1707): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203202019000000000000000000000004000300000000000000000065c6797900000000000000010000000000000000030006000000000002004e207f0000010000000000000000040004000000000004000000200000000000000000000000000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff000000000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 2.361262522s ago: executing program 3 (id=1708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000cd33500008000000182b0000d6cd6f735d555b50456e0a3f83fcbbff0fb5a38e8851cda7ac35793f7a53220a384c0846aa258532cba6aa", @ANYRES32, @ANYBLOB="000000000800000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000016d3000085000000060000001841000002000000000000000000000018610000100000000000000000080000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2a8001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b400000013"], 0x188}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x26020280) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x9, 0x1}, &(0x7f0000000140)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getdents(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x2554d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001400018300e0ffffff0000001e40000076356e91b9a5a533f18b1b48be83d1df7ea5740b2354091cca7e6d6071ef3748326685d570000098ade2cad55d47ffaa56bd86b88a24f74be96b3bc6"], 0x14}}, 0x0) 2.361022298s ago: executing program 5 (id=1709): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000fb62b375f8e6143639c3ce97959441266a53b4dd2ab46e9ea34154db2a3d910ecd172ffdb7a0600da4dc5eccfb539582fb22413317df4ab023233e06c25202f642d59a851ef215ed36006b92ee27a304fcbd8bf14ed61a201dbe2cf2bca3391b773c3c559ae97174c04b7d35ebe30e552828b81d9bb1ad3fac6c3c635e0ed6", @ANYRES16=r3, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r5, 0x7d6d, 0xe17a, 0x0, 0x0, 0x5b) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000100001000000000000000000fc0000000000000000000000000000007f00000100000000000000000000000000000000000000000000300001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000004d4c300000006000000000000000000000000000001000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000200003000000000000000000000002000000eef900000000000008000b0009000000"], 0xf8}, 0x1, 0x0, 0x0, 0x48400}, 0x40800) bind$inet(r8, 0x0, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendfile(r9, r8, 0x0, 0x20000023893) 2.316249578s ago: executing program 4 (id=1710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x7fffffd}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000200)={0x8, r2}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xffffc000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0xf0}) 2.30423961s ago: executing program 0 (id=1711): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300031200000000000000000000000400090088000000e3d36433c4920893924540ac18fabaf0c70000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000080ff0002000100000000000000fcfc0000000005000500000000000a"], 0x90}, 0x1, 0x7}, 0x0) 2.093472133s ago: executing program 4 (id=1712): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203200019000000000000fbffffff0004000300000000000000000065c6797900000000000000010000000000000000030006000000000002004e207f0000010000000000000000040004000000000004000000000000000000000000000000000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff000000000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 1.789926106s ago: executing program 5 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.740768767s ago: executing program 0 (id=1714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000ffffff80", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.677334338s ago: executing program 4 (id=1715): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r0 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) syz_emit_ethernet(0x96, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x60, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@hopopts={0x11}, @hopopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.676999044s ago: executing program 5 (id=1716): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000200d6333a0e5838de4bd7225b3b2f1e5f59574b823d0e9cef4c73a16fac7f9a21e9bbfd82bf3726db36b195851ca07709ed7ea9b5972ffe53ac668fd9a19043fefa735fd47fb8674bf0d93db18128b06eb802f25e9cb29862bda7bd26b44fcd9345c9c73e391bc70a0bfbb90f6e5a660463a80641e4e8210e9fefeb4838944a2ed4d5d32b263023c9c22a5ed0f87e6a5ec5eaef481720efd91c26c42fc4073167370fc61ed4c2af4bbb4988261b827cf33629eb839113df72e07e9345344fcd6ced0d7bd9c1", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRES16=r0]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) r6 = timerfd_create(0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000000}) clock_gettime(0x2, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x63, 0xfffffffffffffff9, 0x1, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ppoll(&(0x7f0000000200)=[{r4, 0x2188}], 0x1, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r10, 0x81000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0274204690d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) 1.636980903s ago: executing program 2 (id=1717): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x7, 0x20042) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000003c0)={0x1, 0x0, {0x4, 0x0, 0x300a, 0x8, 0xb, 0x8, 0x2, 0x1}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd, 0x2a}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xffff, 0x7, 0x6, 0x4, 0x100], 0x4, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) 1.516967495s ago: executing program 3 (id=1718): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 1.233461836s ago: executing program 0 (id=1719): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x88fb, @icmp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @info_reply={0x10, 0x0, 0x0, 0x1843, 0x6}}}}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3, 0x0, 0x10000000000000}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20008, 0x2, 0x100, 0x5, 0x1ff, 0x4007}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) ioctl$TCFLSH(r1, 0x80047456, 0x800000000000002) 1.233236582s ago: executing program 3 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000300)=0xe7, 0x4) mkdir(0x0, 0x92) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000001800000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 398.586907ms ago: executing program 4 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/35, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x6017be0a}) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0x6) 345.027073ms ago: executing program 2 (id=1722): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000a400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 0s ago: executing program 3 (id=1723): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r3, 0x0, 0x0) setuid(0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004680)={0x10}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() kernel console output (not intermixed with test programs): root/syzkaller.VWX9wh/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 326.429915][ T6745] usb 3-1: device descriptor read/64, error -71 [ 326.439864][ T29] audit: type=1400 audit(1733852605.960:715): avc: denied { mounton } for pid=9426 comm="syz-executor" path="/root/syzkaller.VWX9wh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 326.764235][ T29] audit: type=1400 audit(1733852605.960:716): avc: denied { mounton } for pid=9426 comm="syz-executor" path="/root/syzkaller.VWX9wh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 326.935228][ T5869] ov519 4-1:4.110: Can't determine sensor slave IDs [ 326.944337][ T5869] ov519 4-1:4.110: OV519 Config failed [ 326.949904][ T5869] ov519 4-1:4.110: probe with driver ov519 failed with error -22 [ 326.967220][ T5869] usb 4-1: USB disconnect, device number 14 [ 327.037086][ T29] audit: type=1400 audit(1733852606.000:717): avc: denied { mounton } for pid=9426 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 327.070055][ T6745] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 327.176620][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 327.185852][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 327.258003][ T6745] usb 3-1: device descriptor read/64, error -71 [ 327.318793][ T9745] gfs2: not a GFS2 filesystem [ 327.400250][ T6745] usb usb3-port1: attempt power cycle [ 327.442458][ T9753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.515288][ T9753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.550046][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 327.575986][ T5869] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 327.596682][ T5869] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 327.616842][ T5869] hid-generic 0000:0003:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 327.725715][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.750004][ T6745] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 327.763702][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.773978][ T6745] usb 3-1: device descriptor read/8, error -71 [ 327.821355][ T5870] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 327.828558][ T5897] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.859082][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.872049][ T5897] usb 4-1: SerialNumber: syz [ 328.161256][ T5870] usb 1-1: Invalid ep0 maxpacket: 64 [ 328.309829][ T5870] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 328.348021][ T5897] usb 4-1: 0:2 : does not exist [ 328.388449][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 329.076344][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 329.119853][ T5870] usb 1-1: Invalid ep0 maxpacket: 64 [ 329.125380][ T5870] usb usb1-port1: attempt power cycle [ 329.140885][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 329.504823][ T29] audit: type=1400 audit(1733852609.030:718): avc: denied { mount } for pid=9786 comm="syz.4.997" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 329.533577][ T5870] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 329.611269][ T5870] usb 1-1: Invalid ep0 maxpacket: 64 [ 329.790140][ T5870] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 329.826630][ T29] audit: type=1400 audit(1733852609.060:719): avc: denied { remount } for pid=9786 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 329.846252][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.891474][ T5870] usb 1-1: Invalid ep0 maxpacket: 64 [ 329.962701][ T5870] usb usb1-port1: unable to enumerate USB device [ 330.056399][ T5897] usb 4-1: USB disconnect, device number 15 [ 330.154124][ T29] audit: type=1400 audit(1733852609.710:720): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 330.229504][ T9800] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.999'. [ 330.247578][ T9800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.668741][ T7851] udevd[7851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.039836][ T5866] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 331.201706][ T5866] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 331.211296][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.230404][ T9821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.241008][ T5866] usb 5-1: config 0 descriptor?? [ 331.256611][ T5866] usb 5-1: Invalid firmware size=18. [ 331.782863][ T5897] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 332.033372][ T5866] usb 5-1: USB disconnect, device number 33 [ 332.240608][ T5897] usb 1-1: no configurations [ 332.245247][ T5897] usb 1-1: can't read configurations, error -22 [ 332.380881][ T5897] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 332.405768][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 332.572629][ T5897] usb 1-1: no configurations [ 332.601553][ T5897] usb 1-1: can't read configurations, error -22 [ 332.609935][ T5869] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 332.728764][ T5897] usb usb1-port1: attempt power cycle [ 332.773010][ T5869] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 332.857577][ T9853] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 332.869461][ T9853] Cannot find add_set index 0 as target [ 332.968918][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 333.501127][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.509379][ T5869] usb 3-1: Product: syz [ 333.516668][ T5869] usb 3-1: Manufacturer: syz [ 333.521841][ T5869] usb 3-1: SerialNumber: syz [ 333.538530][ T5869] usb 3-1: config 0 descriptor?? [ 333.705594][ T9860] can: request_module (can-proto-0) failed. [ 333.741806][ T29] audit: type=1400 audit(1733852613.300:721): avc: denied { read } for pid=9859 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 333.742142][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 333.783431][ T5869] hso 3-1:0.0: Can't find BULK IN endpoint [ 333.790514][ T5897] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 333.798709][ T5869] usb-storage 3-1:0.0: USB Mass Storage device detected [ 333.833668][ T5897] usb 1-1: no configurations [ 333.838490][ T5897] usb 1-1: can't read configurations, error -22 [ 333.992347][ T5870] usb 3-1: USB disconnect, device number 27 [ 334.015994][ T5897] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 334.053062][ T5897] usb 1-1: no configurations [ 334.057736][ T5897] usb 1-1: can't read configurations, error -22 [ 334.065940][ T5897] usb usb1-port1: unable to enumerate USB device [ 334.153395][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 334.185685][ T9886] can0: slcan on ttyS3. [ 334.334761][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.428815][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.610036][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 334.722427][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.742939][ T9] usb 4-1: config 0 descriptor?? [ 334.943217][ T9880] can0 (unregistered): slcan off ttyS3. [ 335.010148][ T9896] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1016'. [ 335.947390][ T9905] overlayfs: missing 'workdir' [ 335.963534][ T9905] pim6reg1: entered allmulticast mode [ 336.104728][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 337.195978][ T9] letsketch 0003:6161:4D15.0019: Device info: ã”´ [ 337.590795][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 337.600189][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 337.718063][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 337.730731][ T9] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -71 [ 337.780446][ T9] usb 4-1: USB disconnect, device number 16 [ 337.879584][ T29] audit: type=1400 audit(1733852617.420:722): avc: denied { unmount } for pid=9426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 338.073627][ T9947] netlink: 16198 bytes leftover after parsing attributes in process `syz.4.1028'. [ 339.179964][ T5870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 339.187842][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 339.399927][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 339.406650][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.423301][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.433842][ T5870] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 339.446930][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 339.457299][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.475872][ T8] usb 1-1: Product: syz [ 339.480666][ T8] usb 1-1: Manufacturer: syz [ 339.490561][ T8] usb 1-1: SerialNumber: syz [ 339.496030][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.510025][ T5866] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 339.527132][ T8] usb 1-1: config 0 descriptor?? [ 339.552812][ T5870] usb 3-1: config 0 descriptor?? [ 339.571649][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 339.660063][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 339.672352][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.682675][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.709800][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 339.719515][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.769147][ T5866] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 339.778765][ T5866] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 339.914850][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.926444][ T5866] usb 4-1: Manufacturer: syz [ 339.938531][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.947452][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1033'. [ 339.958644][ T5866] usb 4-1: config 0 descriptor?? [ 340.762423][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 340.768480][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.838105][ T5870] usb 3-1: USB disconnect, device number 28 [ 340.940188][ T5866] rc_core: IR keymap rc-hauppauge not found [ 340.949316][ T5866] Registered IR keymap rc-empty [ 340.959043][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 341.000552][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 341.030921][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 341.756840][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 341.854772][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 341.930545][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 341.955649][ T29] audit: type=1400 audit(1733852621.500:723): avc: denied { bind } for pid=9987 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.978760][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 341.999981][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.020283][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.045791][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.090291][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.120087][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.140102][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 342.160846][ T5866] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.150403][ T5866] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 343.159439][ T5866] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 343.181754][ T8] gspca_sonixj: i2c_w8 err -110 [ 343.259835][ T8] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 343.279616][ T8] usb 1-1: USB disconnect, device number 37 [ 343.291521][ T5866] usb 4-1: USB disconnect, device number 17 [ 343.808297][T10025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.914017][T10033] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 344.763815][ T5869] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 345.187923][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.219580][ T5869] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 345.229451][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.272391][ T5869] usb 1-1: Product: syz [ 345.276595][ T5869] usb 1-1: Manufacturer: syz [ 345.348971][ T5869] usb 1-1: SerialNumber: syz [ 345.358942][T10067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10067 comm=syz.4.1051 [ 345.398373][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 345.895368][ T5869] usb 1-1: config 0 descriptor?? [ 345.905773][ T5869] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 345.930154][T10067] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1051'. [ 345.960743][T10067] batadv1: entered promiscuous mode [ 346.039373][T10067] batadv1: entered allmulticast mode [ 346.779127][ T5869] usb 1-1: USB disconnect, device number 38 [ 349.071836][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 350.079862][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 350.088771][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 350.324600][T10127] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 350.492503][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 350.789775][ T25] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 350.842606][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.929509][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 350.938148][ T25] usb 6-1: config 0 descriptor?? [ 350.978113][ T25] usb 6-1: Invalid firmware size=18. [ 351.022497][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 351.024634][T10143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1067'. [ 351.083474][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.094905][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 351.137061][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.154870][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.170021][ T5870] usb 1-1: Product: syz [ 351.174220][ T5870] usb 1-1: Manufacturer: syz [ 351.182645][ T5870] usb 1-1: SerialNumber: syz [ 352.597898][ T5870] cdc_ncm 1-1:1.0: bind() failure [ 352.605878][ T5870] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 352.637812][T10166] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1072'. [ 352.647256][ T5870] cdc_ncm 1-1:1.1: bind() failure [ 352.657429][T10115] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1061'. [ 352.679034][T10168] tmpfs: Unknown parameter 'hash' [ 352.692178][T10115] veth1_macvtap: left promiscuous mode [ 352.699953][T10166] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1072'. [ 352.713163][ T5870] usb 1-1: USB disconnect, device number 39 [ 352.780714][T10170] overlay: Unknown parameter 'subj_user' [ 352.932882][ T29] audit: type=1400 audit(1733852632.330:724): avc: denied { ioctl } for pid=10114 comm="syz.5.1061" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 353.198724][ T25] usb 6-1: USB disconnect, device number 2 [ 353.940711][T10194] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1078'. [ 354.083276][T10194] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 355.910837][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 355.919814][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 356.365748][T10227] loop2: detected capacity change from 0 to 7 [ 356.404502][T10227] Dev loop2: unable to read RDB block 7 [ 356.420564][T10227] loop2: unable to read partition table [ 356.435692][T10227] loop2: partition table beyond EOD, truncated [ 356.452350][T10227] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.629107][ T5870] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 356.991884][T10245] Bluetooth: (null): Invalid header checksum [ 357.118551][ T35] Bluetooth: (null): Invalid header checksum [ 357.161318][ T35] Bluetooth: (null): Invalid header checksum [ 357.297025][ T35] Bluetooth: (null): Invalid header checksum [ 357.375614][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 357.384186][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 357.394056][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 357.405964][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.415602][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.434049][ T35] Bluetooth: (null): Invalid header checksum [ 357.440189][ T5870] usb 4-1: Product: syz [ 357.444373][ T5870] usb 4-1: Manufacturer: syz [ 357.466306][ T35] Bluetooth: (null): Invalid header checksum [ 357.472476][ T5870] usb 4-1: SerialNumber: syz [ 357.744017][ T5870] cdc_ncm 4-1:1.0: bind() failure [ 357.756314][ T5870] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 357.768269][ T5870] cdc_ncm 4-1:1.1: bind() failure [ 357.794633][ T5870] usb 4-1: USB disconnect, device number 18 [ 357.886931][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 358.089086][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 358.494774][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.511126][ T25] usb 3-1: config 0 has no interface number 0 [ 358.527635][ T25] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.569184][ T25] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.677162][ T25] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 358.689366][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.730829][ T25] usb 3-1: config 0 descriptor?? [ 358.939960][T10287] loop2: detected capacity change from 0 to 7 [ 358.973791][T10287] Dev loop2: unable to read RDB block 7 [ 358.979429][T10287] loop2: unable to read partition table [ 359.015894][T10287] loop2: partition table beyond EOD, truncated [ 359.031764][T10287] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 359.079904][ T5897] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 359.209844][ T5897] usb 4-1: device descriptor read/64, error -71 [ 359.373575][T10299] xt_CONNSECMARK: invalid mode: 0 [ 359.381214][T10250] sg_write: data in/out 406748/8 bytes for SCSI command 0xff-- guessing data in; [ 359.381214][T10250] program syz.2.1090 not setting count and/or reply_len properly [ 359.459861][ T5897] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 359.646467][ T25] uclogic 0003:28BD:0071.001A: failed retrieving string descriptor #100: -71 [ 359.661526][ T25] uclogic 0003:28BD:0071.001A: failed retrieving pen parameters: -71 [ 359.670428][ T25] uclogic 0003:28BD:0071.001A: pen probing failed: -71 [ 359.677408][ T25] uclogic 0003:28BD:0071.001A: failed probing parameters: -71 [ 359.685422][ T25] uclogic 0003:28BD:0071.001A: probe with driver uclogic failed with error -71 [ 359.709666][ T25] usb 3-1: USB disconnect, device number 29 [ 359.789827][ T5897] usb 4-1: device descriptor read/64, error -71 [ 359.902557][ T5897] usb usb4-port1: attempt power cycle [ 360.011843][T10316] loop2: detected capacity change from 0 to 7 [ 360.031716][T10316] Dev loop2: unable to read RDB block 7 [ 360.037284][T10316] loop2: unable to read partition table [ 360.043767][T10316] loop2: partition table beyond EOD, truncated [ 360.051659][T10316] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.349812][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 360.384862][ T5897] usb 4-1: device descriptor read/8, error -71 [ 361.841688][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 361.989680][ T5897] usb 4-1: device descriptor read/8, error -71 [ 362.115608][ T5897] usb usb4-port1: unable to enumerate USB device [ 363.220088][ T5866] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 363.446330][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.479600][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 363.539110][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 363.576057][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 157, setting to 64 [ 363.596559][T10393] rdma_op ffff8880793551f0 conn xmit_rdma 0000000000000000 [ 363.613516][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.165079][T10404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.211152][ T5866] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 364.220311][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 364.228404][ T5866] usb 1-1: Product: syz [ 364.240392][ T5866] usb 1-1: Manufacturer: syz [ 364.245085][ T5866] usb 1-1: SerialNumber: syz [ 364.251088][T10404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.276819][ T5866] usb 1-1: config 0 descriptor?? [ 364.320057][T10350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 364.582164][ T5866] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 364.646378][ T5866] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 364.658465][T10416] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1120'. [ 364.953654][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 365.196056][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 365.241501][ T5866] usb 1-1: USB disconnect, device number 40 [ 365.567264][T10432] openvswitch: netlink: IP tunnel dst address not specified [ 365.629967][ T25] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 365.669087][T10451] loop2: detected capacity change from 0 to 7 [ 365.682995][T10451] Dev loop2: unable to read RDB block 7 [ 365.689061][T10451] loop2: unable to read partition table [ 365.695612][T10451] loop2: partition table beyond EOD, truncated [ 365.707207][T10454] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 365.716454][T10454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1129'. [ 365.730715][T10451] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 365.803991][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 365.822871][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.842653][ T25] usb 4-1: config 0 descriptor?? [ 365.856165][ T25] usbtest 4-1:0.0: Linux user mode test driver [ 365.863427][ T25] usbtest 4-1:0.0: low-speed {control} tests [ 366.087318][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 366.123487][ T5866] usb 4-1: USB disconnect, device number 23 [ 366.314860][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.485508][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 22938, setting to 64 [ 366.529075][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 366.542998][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.553225][ T9] usb 5-1: SerialNumber: syz [ 366.562863][T10454] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 366.780270][T10454] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 366.815438][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 367.765325][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 367.800094][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 367.948574][ T9] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 367.949978][ T29] audit: type=1400 audit(1733852647.480:725): avc: denied { getopt } for pid=10501 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 367.979066][ T29] audit: type=1400 audit(1733852647.480:726): avc: denied { append } for pid=10501 comm="syz.0.1138" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 368.007661][ T5897] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 368.021747][ T9] scsi host1: usb-storage 5-1:1.0 [ 368.044463][T10517] netlink: 16198 bytes leftover after parsing attributes in process `syz.5.1142'. [ 368.101218][ T9] usb 5-1: USB disconnect, device number 34 [ 368.184804][ T5897] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 368.194298][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.215329][ T5897] usb 4-1: Product: syz [ 368.235786][ T5897] usb 4-1: Manufacturer: syz [ 368.243508][ T5897] usb 4-1: SerialNumber: syz [ 368.284909][ T5897] usb 4-1: config 0 descriptor?? [ 368.479084][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.656082][ T29] audit: type=1400 audit(1733852648.210:727): avc: denied { execute } for pid=10536 comm="syz.2.1146" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 368.722278][ T29] audit: type=1400 audit(1733852648.240:728): avc: denied { write } for pid=10539 comm="syz.4.1147" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 368.804917][ T29] audit: type=1400 audit(1733852648.250:729): avc: denied { call } for pid=10539 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 369.672664][ T29] audit: type=1400 audit(1733852649.190:730): avc: denied { bind } for pid=10561 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 369.691904][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.010179][ T5485] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 371.016518][ T25] usb 4-1: USB disconnect, device number 24 [ 371.028646][T10593] can2: slcan on ttyS3. [ 371.403321][ T25] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 371.494961][ T25] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 371.550303][T10581] can2 (unregistered): slcan off ttyS3. [ 371.978944][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 372.059893][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 372.136761][ T8] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 372.149824][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.180048][ T8] usb 6-1: config 0 descriptor?? [ 372.192494][ T8] usb 6-1: Invalid firmware size=18. [ 373.473822][ T25] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=25 comm=kworker/1:0 [ 373.629809][T10659] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 373.636678][T10659] PKCS7: Only support pkcs7_signedData type [ 374.062531][ T25] usb 6-1: USB disconnect, device number 3 [ 375.550621][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 376.250266][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 378.319866][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 378.330917][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.705513][T10763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.300812][T10768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.341024][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.351779][ T9] usb 3-1: config 1 has no interface number 0 [ 379.357850][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.376134][T10768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.411992][T10770] overlayfs: failed to resolve './file1': -2 [ 379.473190][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 379.506947][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.536365][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.569230][ T9] usb 3-1: Product: syz [ 379.576223][ T9] usb 3-1: Manufacturer: syz [ 379.587124][ T9] usb 3-1: SerialNumber: syz [ 379.654452][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.697173][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.270869][ T9] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 381.276923][ T9] cdc_ncm 3-1:1.1: bind() failure [ 381.301583][ T9] usb 3-1: USB disconnect, device number 30 [ 381.340741][ T29] audit: type=1400 audit(1733852660.890:731): avc: denied { append } for pid=10808 comm="syz.0.1213" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.381965][ T29] audit: type=1400 audit(1733852660.890:732): avc: denied { write } for pid=10808 comm="syz.0.1213" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.456992][T10814] netlink: 16198 bytes leftover after parsing attributes in process `syz.2.1212'. [ 381.700850][T10807] FAULT_INJECTION: forcing a failure. [ 381.700850][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 381.713602][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.2.1212 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 381.724357][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.734399][T10807] Call Trace: [ 381.737653][T10807] [ 381.740572][T10807] dump_stack_lvl+0x16c/0x1f0 [ 381.745231][T10807] should_fail_ex+0x497/0x5b0 [ 381.749887][T10807] ? fs_reclaim_acquire+0xae/0x150 [ 381.754989][T10807] should_failslab+0xc2/0x120 [ 381.759646][T10807] __kmalloc_cache_noprof+0x68/0x410 [ 381.764914][T10807] alloc_pipe_info+0x10e/0x590 [ 381.769656][T10807] splice_direct_to_actor+0x793/0xa40 [ 381.775024][T10807] ? get_pid_task+0xfc/0x250 [ 381.779596][T10807] ? __pfx_direct_splice_actor+0x10/0x10 [ 381.785226][T10807] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 381.791104][T10807] ? __pfx___might_resched+0x10/0x10 [ 381.796382][T10807] do_splice_direct+0x178/0x250 [ 381.801217][T10807] ? __pfx_do_splice_direct+0x10/0x10 [ 381.806579][T10807] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 381.812465][T10807] ? bpf_lsm_file_permission+0x9/0x10 [ 381.817824][T10807] ? security_file_permission+0x71/0x210 [ 381.823454][T10807] do_sendfile+0xaed/0xe30 [ 381.827856][T10807] ? __pfx_do_sendfile+0x10/0x10 [ 381.832788][T10807] ? __fget_files+0x206/0x3a0 [ 381.837444][T10807] __x64_sys_sendfile64+0x1da/0x220 [ 381.842619][T10807] ? ksys_write+0x1ba/0x250 [ 381.847105][T10807] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 381.852808][T10807] do_syscall_64+0xcd/0x250 [ 381.857302][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.863185][T10807] RIP: 0033:0x7ff39a37ff19 [ 381.867587][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.887182][T10807] RSP: 002b:00007ff39b10e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 381.895594][T10807] RAX: ffffffffffffffda RBX: 00007ff39a545fa0 RCX: 00007ff39a37ff19 [ 381.903545][T10807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 381.911506][T10807] RBP: 00007ff39b10e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.919456][T10807] R10: 0000000000080006 R11: 0000000000000246 R12: 0000000000000001 [ 381.927404][T10807] R13: 0000000000000000 R14: 00007ff39a545fa0 R15: 00007ffce306a188 [ 381.935369][T10807] [ 382.099419][ T5869] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 382.929052][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 382.935993][ T5869] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 382.944977][ T5869] usb 6-1: config 0 has no interface number 0 [ 382.951588][ T5869] usb 6-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 382.963596][ T5869] usb 6-1: config 0 interface 224 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.190771][ T5869] usb 6-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 383.200713][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.208773][ T5869] usb 6-1: Product: syz [ 384.190041][ T5869] usb 6-1: Manufacturer: syz [ 384.194678][ T5869] usb 6-1: SerialNumber: syz [ 384.200957][ T5869] usb 6-1: config 0 descriptor?? [ 384.206951][T10804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 384.215238][T10804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 384.483117][ T5869] cdc_subset 6-1:0.224: probe with driver cdc_subset failed with error -71 [ 384.504988][ T5869] usb 6-1: USB disconnect, device number 4 [ 384.714933][T10842] bio_check_eod: 2 callbacks suppressed [ 384.714949][T10842] syz.3.1221: attempt to access beyond end of device [ 384.714949][T10842] md0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 384.736577][T10842] XFS (md0): SB validate failed with error -5. [ 384.879487][T10855] syz.3.1221: attempt to access beyond end of device [ 384.879487][T10855] md0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 385.013907][T10855] XFS (md0): SB validate failed with error -5. [ 385.274218][ T5866] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 385.281921][ T5866] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 385.305952][ T5866] hid-generic 0000:0003:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 385.590138][ T29] audit: type=1400 audit(1733852665.140:733): avc: denied { open } for pid=10890 comm="syz.0.1229" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 385.640131][ T29] audit: type=1400 audit(1733852665.140:734): avc: denied { ioctl } for pid=10890 comm="syz.0.1229" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x4b67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 385.830131][ T5869] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 386.025274][ T5869] usb 3-1: config 255 has an invalid interface number: 20 but max is 0 [ 386.036183][ T5869] usb 3-1: config 255 has no interface number 0 [ 386.152962][ T5869] usb 3-1: config 255 interface 20 has no altsetting 0 [ 386.322201][ T5869] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 386.512211][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.997674][ T5869] usb 3-1: Product: syz [ 387.001994][ T5869] usb 3-1: Manufacturer: syz [ 387.007117][ T5869] usb 3-1: SerialNumber: syz [ 387.049648][T10912] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1233'. [ 387.069354][T10912] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1233'. [ 387.171839][T10914] loop2: detected capacity change from 0 to 7 [ 387.183137][T10914] Dev loop2: unable to read RDB block 7 [ 387.188732][T10914] loop2: unable to read partition table [ 387.197157][T10914] loop2: partition table beyond EOD, truncated [ 387.214333][T10914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 387.286217][ T5869] usb 3-1: USB disconnect, device number 31 [ 387.659918][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 387.833023][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 387.854713][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.872808][ T25] usb 6-1: config 0 has no interface number 0 [ 387.879063][ T25] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.892651][ T25] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.907520][ T29] audit: type=1400 audit(1733852667.460:735): avc: denied { ioctl } for pid=10934 comm="syz.0.1242" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 387.935573][ T25] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 387.945120][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.958604][ T25] usb 6-1: config 0 descriptor?? [ 388.079272][ T9] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 388.088749][ T9] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 388.101454][ T9] hid-generic 0000:0003:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 388.321503][ T5866] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 388.581409][ T5866] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 388.606546][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 388.612049][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.627380][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 388.644615][ T5866] usb 1-1: config 0 descriptor?? [ 388.663043][ T5866] usb 1-1: Invalid firmware size=18. [ 388.839946][ T25] uclogic 0003:28BD:0094.001D: pen parameters not found [ 388.847591][ T25] uclogic 0003:28BD:0094.001D: interface is invalid, ignoring [ 388.881206][ T29] audit: type=1400 audit(1733852668.430:736): avc: denied { cmd } for pid=10952 comm="syz.3.1248" path="socket:[27850]" dev="sockfs" ino=27850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.994874][T10941] can0: slcan on ptm0. [ 389.001048][T10941] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 389.007628][T10941] PKCS7: Only support pkcs7_signedData type [ 389.014385][T10941] overlay: Unknown parameter 'fowner>00000000000000000000' [ 389.341806][ T29] audit: type=1400 audit(1733852668.900:737): avc: denied { ioctl } for pid=10917 comm="syz.5.1236" path="socket:[27865]" dev="sockfs" ino=27865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 389.429177][ T5866] usb 6-1: USB disconnect, device number 5 [ 389.489989][T10940] can0 (unregistered): slcan off ptm0. [ 389.512649][ T25] usb 1-1: USB disconnect, device number 41 [ 390.442115][T10984] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1251'. [ 390.452493][T10984] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1251'. [ 390.539819][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 390.671841][ T25] usb 4-1: device descriptor read/64, error -71 [ 391.176931][T11009] can0: slcan on ttyS3. [ 391.318431][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 391.452034][ T25] usb 4-1: device descriptor read/64, error -71 [ 391.461208][T11020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.477247][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 391.573235][ T25] usb usb4-port1: attempt power cycle [ 391.620887][T11028] loop2: detected capacity change from 0 to 7 [ 391.628071][T11028] Dev loop2: unable to read RDB block 7 [ 391.648887][T11028] loop2: unable to read partition table [ 391.666660][T11028] loop2: partition table beyond EOD, truncated [ 391.677745][T11028] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 391.700362][T10997] can0 (unregistered): slcan off ttyS3. [ 391.714559][ T5191] Dev loop2: unable to read RDB block 7 [ 391.723422][ T5191] loop2: unable to read partition table [ 391.729195][ T5191] loop2: partition table beyond EOD, truncated [ 392.374806][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 392.602960][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 392.780802][ T29] audit: type=1326 audit(1733852671.740:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.804180][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.830804][ T29] audit: type=1326 audit(1733852671.740:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.854188][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.873465][ T29] audit: type=1326 audit(1733852671.740:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.906480][ T29] audit: type=1326 audit(1733852671.740:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.931118][ T29] audit: type=1326 audit(1733852671.740:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.954482][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.962977][ T29] audit: type=1326 audit(1733852671.740:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 392.987955][ T29] audit: type=1326 audit(1733852671.740:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 393.011580][ T29] audit: type=1326 audit(1733852671.740:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3f77ff19 code=0x7ffc0000 [ 393.027524][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 393.043236][ T25] usb 4-1: device descriptor read/8, error -71 [ 393.201181][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 393.220723][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.248104][ T9] usb 1-1: config 0 descriptor?? [ 393.261410][ T9] usb 1-1: Invalid firmware size=18. [ 393.289815][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 393.310066][ T5866] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 393.320301][ T25] usb 4-1: device descriptor read/8, error -71 [ 393.434276][ T25] usb usb4-port1: unable to enumerate USB device [ 393.473096][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 393.490187][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.598359][T11082] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 393.605333][T11082] PKCS7: Only support pkcs7_signedData type [ 393.634271][ T5866] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 393.659634][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.668878][ T5866] usb 3-1: Product: syz [ 393.676219][ T5866] usb 3-1: Manufacturer: syz [ 393.683382][ T5866] usb 3-1: SerialNumber: syz [ 393.739936][ T5866] usb 3-1: config 0 descriptor?? [ 394.712821][ T5866] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 394.742763][ T5869] usb 1-1: USB disconnect, device number 42 [ 394.779152][T11090] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1279'. [ 394.793668][T11090] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1279'. [ 394.851251][ T5866] usb 3-1: USB disconnect, device number 32 [ 396.355314][T11102] 9pnet_fd: p9_fd_create_unix (11102): problem connecting socket: ./cgroup: -111 [ 396.887077][T11127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.458106][T11127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.472034][T11126] netlink: 16198 bytes leftover after parsing attributes in process `syz.4.1291'. [ 399.044235][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1296'. [ 399.084515][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 399.304754][ T5869] hid-generic 0002:0007:0002.001E: unexpected long global item [ 399.312732][ T5869] hid-generic 0002:0007:0002.001E: probe with driver hid-generic failed with error -22 [ 399.493637][T11161] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 400.454699][ T29] audit: type=1400 audit(1733852679.970:746): avc: denied { read } for pid=11167 comm="syz.0.1305" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 400.493676][ T29] audit: type=1400 audit(1733852679.970:747): avc: denied { open } for pid=11167 comm="syz.0.1305" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 401.079828][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1303'. [ 401.230862][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.332829][ T29] audit: type=1400 audit(1733852680.890:748): avc: denied { setopt } for pid=11180 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 401.354530][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'. [ 401.365903][ T29] audit: type=1400 audit(1733852680.890:749): avc: denied { write } for pid=11180 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 401.393192][ T5866] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 401.695871][T11204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.959839][ T5866] usb 1-1: device descriptor read/64, error -71 [ 402.095806][ T29] audit: type=1400 audit(1733852681.650:750): avc: denied { setopt } for pid=11185 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 402.209855][ T5866] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 402.339865][ T5866] usb 1-1: device descriptor read/64, error -71 [ 402.399432][ T5869] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 402.559774][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 402.639989][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.030058][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.065774][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.091637][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.109937][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.132594][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.177592][ T5866] usb usb1-port1: attempt power cycle [ 403.184455][ T5869] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.192613][ T5869] usb 5-1: Manufacturer: syz [ 403.244889][ T5869] usb 5-1: config 0 descriptor?? [ 403.286021][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 404.093660][ T5866] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 404.189892][ T5870] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 404.319844][ T5866] usb 1-1: device not accepting address 45, error -71 [ 404.349910][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 404.362912][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.379546][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 404.424317][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 404.457781][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 404.493324][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 404.518752][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.555714][ T5870] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 404.565964][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.593810][ T5870] usb 3-1: Product: syz [ 404.605634][ T5870] usb 3-1: Manufacturer: syz [ 404.617795][ T5870] usb 3-1: SerialNumber: syz [ 404.646146][ T5870] usb 3-1: config 0 descriptor?? [ 404.655290][T11235] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 404.697840][ T5870] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 406.464465][ T5866] usb 3-1: USB disconnect, device number 33 [ 406.639870][ T5869] rc_core: IR keymap rc-hauppauge not found [ 406.645931][ T5869] Registered IR keymap rc-empty [ 406.656089][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.699977][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.777396][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 406.780762][T11299] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1342'. [ 406.806296][T11299] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1342'. [ 406.806466][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 407.141877][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1343'. [ 407.286357][ T29] audit: type=1400 audit(1733852686.810:751): avc: denied { getopt } for pid=11297 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.387373][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.409862][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.469493][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.502791][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.620357][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.639818][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 407.659907][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 408.227860][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 408.239959][T11314] geneve2: entered promiscuous mode [ 408.245385][T11314] geneve2: entered allmulticast mode [ 408.651532][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 408.694121][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 408.720702][ T5869] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 408.728731][ T5869] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.729969][ T5866] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 408.747352][ T5869] usb 5-1: USB disconnect, device number 36 [ 408.912669][ T5866] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 408.926662][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.947531][ T5866] usb 3-1: config 0 descriptor?? [ 409.547925][ T5866] usb 3-1: Invalid firmware size=18. [ 409.739568][ T5866] usb 3-1: USB disconnect, device number 34 [ 409.818850][T11342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.840457][T11342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.849930][ T25] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 409.865700][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1357'. [ 409.880981][T11343] vlan2: entered promiscuous mode [ 409.890475][T11343] team0: entered promiscuous mode [ 409.895641][T11343] team_slave_0: entered promiscuous mode [ 409.902327][T11343] team_slave_1: entered promiscuous mode [ 410.082984][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 410.091306][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 410.100102][ T25] usb 4-1: config 1 interface 0 altsetting 127 has an endpoint descriptor with address 0x78, changing to 0x8 [ 410.111718][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 410.124003][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 410.133210][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.143244][ T25] usb 4-1: Product: syz [ 410.143306][ T29] audit: type=1400 audit(1733852689.690:752): avc: denied { getopt } for pid=11346 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 410.147915][ T25] usb 4-1: Manufacturer: syz [ 410.177531][ T25] usb 4-1: SerialNumber: syz [ 410.384227][ T29] audit: type=1400 audit(1733852689.690:753): avc: denied { connect } for pid=11346 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 410.625630][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 411.114714][ T29] audit: type=1400 audit(1733852690.670:754): avc: denied { write } for pid=11359 comm="syz.2.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.343141][T11377] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 411.353127][T11377] overlayfs: missing 'lowerdir' [ 411.373637][ T9] hid-generic 0000:0000:0000.001F: unexpected long global item [ 411.384525][ T9] hid-generic 0000:0000:0000.001F: probe with driver hid-generic failed with error -22 [ 412.455404][ T6745] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 412.578997][ T25] usb 4-1: USB disconnect, device number 30 [ 413.650062][ T6745] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 413.654985][T11393] block device autoloading is deprecated and will be removed. [ 413.662205][ T6745] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 413.680616][ T6745] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x3 is Bulk; changing to Interrupt [ 413.690900][ T6745] usb 6-1: config 1 interface 0 has no altsetting 0 [ 413.700946][T11393] syz.3.1375: attempt to access beyond end of device [ 413.700946][T11393] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 413.945032][ T9] hid-generic 0000:0003:0000.0020: unknown main item tag 0x0 [ 413.953275][ T9] hid-generic 0000:0003:0000.0020: unknown main item tag 0x0 [ 413.974157][ T9] hid-generic 0000:0003:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 415.068632][ T6745] usb 6-1: string descriptor 0 read error: -71 [ 415.079787][ T6745] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.093895][ T6745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.106593][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 415.281354][ T6745] usb 6-1: can't set config #1, error -71 [ 415.297190][ T6745] usb 6-1: USB disconnect, device number 6 [ 415.332649][T11421] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 415.363933][T11421] cramfs: wrong magic [ 417.490619][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 417.934516][ T6745] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 417.989953][ T5866] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 418.014618][T11452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.025348][T11452] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 418.041216][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.056738][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.082419][ T25] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 418.140302][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.141021][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.155413][ T25] usb 6-1: config 0 descriptor?? [ 418.165804][ T6745] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 418.178932][ T6745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.198461][ T29] audit: type=1400 audit(1733852697.730:755): avc: denied { getopt } for pid=11453 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.198539][ T6745] usb 1-1: config 0 descriptor?? [ 418.239973][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.244967][ T6745] usb 1-1: Invalid firmware size=18. [ 418.258565][ T29] audit: type=1400 audit(1733852697.790:756): avc: denied { ioctl } for pid=11455 comm="syz.3.1396" path="socket:[29734]" dev="sockfs" ino=29734 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.283980][ T5866] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 418.324573][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.342544][ T5866] usb 5-1: config 0 descriptor?? [ 418.378052][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 418.390854][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 418.406121][ T25] usb 6-1: USB disconnect, device number 7 [ 418.486546][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 418.513824][T11463] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.1399'. [ 418.516940][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.540469][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.730037][ T6745] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 418.892772][ T5866] ortek 0003:1223:3F07.0021: report_id 1430310701 is invalid [ 418.903387][ T5866] ortek 0003:1223:3F07.0021: item 0 4 1 8 parsing failed [ 418.924368][ T5866] ortek 0003:1223:3F07.0021: probe with driver ortek failed with error -22 [ 419.111265][ T6745] usb 3-1: Using ep0 maxpacket: 8 [ 419.124544][ T6745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.136531][T11470] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 419.136645][ T6745] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 419.151586][ T5866] usb 5-1: USB disconnect, device number 37 [ 419.160985][T11470] PKCS7: Only support pkcs7_signedData type [ 419.186264][ T6745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.230574][ T6745] usb 3-1: config 0 descriptor?? [ 419.330213][ T6745] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 419.607170][ T9] usb 1-1: USB disconnect, device number 47 [ 419.773217][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1405'. [ 420.110161][ T5866] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 420.340578][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 420.349634][ T5866] usb 6-1: not running at top speed; connect to a high speed hub [ 420.363950][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.374521][ T5866] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 420.395464][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.404783][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.413124][ T5866] usb 6-1: Product: syz [ 420.417970][ T5866] usb 6-1: Manufacturer: syz [ 420.422614][ T5866] usb 6-1: SerialNumber: syz [ 420.660168][ T5866] usb 6-1: USB disconnect, device number 8 [ 421.639394][ T5866] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 421.793155][ T5866] usb 6-1: not running at top speed; connect to a high speed hub [ 421.809933][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 421.823801][ T5866] usb 6-1: config 3 has an invalid interface number: 255 but max is 0 [ 421.841552][ T5866] usb 6-1: config 3 has no interface number 0 [ 421.873630][ T5866] usb 6-1: config 3 interface 255 has no altsetting 0 [ 422.147250][ T5866] usb 6-1: New USB device found, idVendor=12d1, idProduct=37f5, bcdDevice=b1.f0 [ 422.197791][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.209860][ T6745] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 422.224905][ T5866] usb 6-1: Product: syz [ 422.229489][ T5866] usb 6-1: Manufacturer: syz [ 422.234923][ T5870] usb 3-1: USB disconnect, device number 35 [ 422.257393][ T5866] usb 6-1: SerialNumber: syz [ 422.380859][ T6745] usb 1-1: Using ep0 maxpacket: 16 [ 422.431010][ T6745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.569926][ T6745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.583043][ T6745] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.598465][ T6745] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 422.666085][ T5866] option 6-1:3.255: GSM modem (1-port) converter detected [ 422.683742][ T5866] usb 6-1: USB disconnect, device number 9 [ 422.691404][ T5866] option 6-1:3.255: device disconnected [ 422.697175][ T29] audit: type=1400 audit(1733852702.250:757): avc: denied { nlmsg_write } for pid=11537 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 422.718600][ T6745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.747222][ T6745] usb 1-1: config 0 descriptor?? [ 423.005473][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 423.160108][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 423.347726][ T5870] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 423.373785][ T5870] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 423.383836][ T6745] koneplus 0003:1E7D:2E22.0022: unknown main item tag 0x0 [ 423.391119][ T6745] koneplus 0003:1E7D:2E22.0022: unknown main item tag 0x0 [ 423.399598][ T6745] koneplus 0003:1E7D:2E22.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 423.407861][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.459431][ T5870] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 423.811805][ T6745] usb 1-1: USB disconnect, device number 48 [ 424.079840][ T5869] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 424.310990][ T5869] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 424.329790][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.342721][ T5869] usb 3-1: config 0 descriptor?? [ 424.350086][ T5869] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 424.724573][T11573] loop2: detected capacity change from 0 to 7 [ 424.755894][ T5869] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 424.781804][ T5870] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 424.790724][ T5870] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 424.791176][T11573] Dev loop2: unable to read RDB block 7 [ 424.797466][ T5870] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 424.812171][ T5870] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 424.821376][ T5870] usb 4-1: USB disconnect, device number 31 [ 424.840098][T11573] loop2: unable to read partition table [ 424.845909][T11573] loop2: partition table beyond EOD, truncated [ 424.852596][T11573] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 424.909199][T11578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.303442][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1437'. [ 425.764060][ T5869] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 425.771214][ T5869] cpia1 3-1:0.0: unexpected systemstate: 01 [ 425.786011][ T5869] usb 3-1: USB disconnect, device number 36 [ 426.030488][T11593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1440'. [ 426.621062][ T29] audit: type=1400 audit(1733852706.050:758): avc: denied { read } for pid=11600 comm="syz.2.1443" path="socket:[30777]" dev="sockfs" ino=30777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.816580][ T29] audit: type=1400 audit(1733852706.230:759): avc: denied { getopt } for pid=11609 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 426.890960][ T5870] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 426.976413][T11617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.991922][T11617] FAULT_INJECTION: forcing a failure. [ 426.991922][T11617] name failslab, interval 1, probability 0, space 0, times 0 [ 427.030389][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.3.1445 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 427.041187][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.051253][T11617] Call Trace: [ 427.054541][T11617] [ 427.057471][T11617] dump_stack_lvl+0x16c/0x1f0 [ 427.062159][T11617] should_fail_ex+0x497/0x5b0 [ 427.066843][T11617] ? fs_reclaim_acquire+0xae/0x150 [ 427.071967][T11617] should_failslab+0xc2/0x120 [ 427.076653][T11617] __kmalloc_cache_noprof+0x68/0x410 [ 427.081945][T11617] device_add+0xccf/0x1a70 [ 427.086376][T11617] ? dev_set_name+0xc8/0x100 [ 427.090980][T11617] ? __pfx_dev_set_name+0x10/0x10 [ 427.096012][T11617] ? __pfx_device_add+0x10/0x10 [ 427.100844][T11617] ? __init_waitqueue_head+0xca/0x150 [ 427.106199][T11617] iommufd_test+0x9a5/0x44b0 [ 427.110772][T11617] ? __pfx_iommufd_test+0x10/0x10 [ 427.115788][T11617] ? __pfx_lock_release+0x10/0x10 [ 427.120801][T11617] ? lock_acquire+0x2f/0xb0 [ 427.125305][T11617] ? __might_fault+0xe3/0x190 [ 427.129972][T11617] ? __might_fault+0xe3/0x190 [ 427.134647][T11617] iommufd_fops_ioctl+0x359/0x4f0 [ 427.139653][T11617] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 427.145200][T11617] ? __pfx_lock_release+0x10/0x10 [ 427.150264][T11617] ? selinux_file_ioctl+0x180/0x270 [ 427.155479][T11617] ? selinux_file_ioctl+0xb4/0x270 [ 427.160610][T11617] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 427.166160][T11617] __x64_sys_ioctl+0x190/0x200 [ 427.170923][T11617] do_syscall_64+0xcd/0x250 [ 427.175420][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.181301][T11617] RIP: 0033:0x7fbb4ab7ff19 [ 427.185702][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.205296][T11617] RSP: 002b:00007fbb4b9af058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.213696][T11617] RAX: ffffffffffffffda RBX: 00007fbb4ad45fa0 RCX: 00007fbb4ab7ff19 [ 427.221651][T11617] RDX: 0000000020000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 427.229605][T11617] RBP: 00007fbb4b9af0a0 R08: 0000000000000000 R09: 0000000000000000 [ 427.237562][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.245520][T11617] R13: 0000000000000000 R14: 00007fbb4ad45fa0 R15: 00007ffde1b11688 [ 427.253486][T11617] [ 427.270629][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 427.352407][T11621] exFAT-fs (nullb0): invalid boot record signature [ 427.364853][ T5870] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 427.370003][T11621] exFAT-fs (nullb0): failed to read boot sector [ 427.387510][T11621] exFAT-fs (nullb0): failed to recognize exfat type [ 427.408464][T11627] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.1449'. [ 427.463002][ T5870] usb 5-1: New USB device found, idVendor=04e2, idProduct=1e24, bcdDevice=8a.0a [ 427.472402][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.498513][ T5870] usb 5-1: Product: syz [ 427.503068][ T5870] usb 5-1: Manufacturer: syz [ 427.508020][ T5870] usb 5-1: SerialNumber: syz [ 427.513972][T11621] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1447'. [ 427.515151][ T5870] usb 5-1: config 0 descriptor?? [ 427.728207][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1451'. [ 428.310118][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 428.317686][ T5828] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 428.508913][T11643] bridge_slave_0: left allmulticast mode [ 428.600126][T11643] bridge_slave_0: left promiscuous mode [ 428.605857][T11643] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.018284][T11643] bridge_slave_1: left allmulticast mode [ 429.043161][T11643] bridge_slave_1: left promiscuous mode [ 429.048872][T11643] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.106140][T11643] bond0: (slave bond_slave_0): Releasing backup interface [ 429.165795][T11643] bond0: (slave bond_slave_1): Releasing backup interface [ 429.275482][ T5870] usb 5-1: USB disconnect, device number 38 [ 429.579356][T11643] team0: Port device team_slave_0 removed [ 429.613600][T11643] team0: Port device team_slave_1 removed [ 429.633005][T11643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.640785][T11643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.648937][T11643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.656570][T11643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.677268][T11643] team0: Port device netdevsim0 removed [ 429.693818][T11643] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 429.765145][T11643] batman_adv: batadv0: Removing interface: ip6gretap1 [ 429.785089][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 429.879808][ T5869] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 429.996591][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 430.105596][T11680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1463'. [ 430.139757][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 430.225101][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 430.236586][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 430.248010][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.257631][ T5869] usb 4-1: Product: syz [ 430.263027][ T5869] usb 4-1: Manufacturer: syz [ 430.267709][ T5869] usb 4-1: SerialNumber: syz [ 430.449963][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 430.800439][ T5869] usb 4-1: config 0 descriptor?? [ 431.161731][T11689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.178051][T11689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.241743][ T5869] hub 4-1:0.0: bad descriptor, ignoring hub [ 431.247869][ T5869] hub 4-1:0.0: probe with driver hub failed with error -5 [ 431.256498][ T5869] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 431.302484][T11690] block nbd4: shutting down sockets [ 431.408860][ T5869] gspca_zc3xx: reg_w_i err -71 [ 431.420794][ T29] audit: type=1400 audit(1733852710.960:760): avc: denied { ioctl } for pid=11698 comm="syz.5.1472" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 431.445730][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.509903][ T5142] Bluetooth: hci5: command 0x0405 tx timeout [ 431.846743][T11703] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.856345][T11703] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.865284][T11703] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.874087][T11703] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.999885][ T5869] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 432.010104][ T5869] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 432.165082][ T29] audit: type=1400 audit(1733852711.700:761): avc: denied { ioctl } for pid=11713 comm="syz.5.1475" path="socket:[30952]" dev="sockfs" ino=30952 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 432.262065][ T5869] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 432.434164][T11728] capability: warning: `syz.2.1481' uses deprecated v2 capabilities in a way that may be insecure [ 432.458012][ T29] audit: type=1400 audit(1733852712.010:762): avc: denied { getopt } for pid=11727 comm="syz.2.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 432.478903][ T29] audit: type=1400 audit(1733852712.010:763): avc: denied { lock } for pid=11727 comm="syz.2.1481" path="socket:[30453]" dev="sockfs" ino=30453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.573591][ T5869] usb 4-1: failed to restore interface 0 altsetting 6 (error=-71) [ 432.586828][ T5869] usb 4-1: USB disconnect, device number 32 [ 432.670258][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 432.688748][T11740] loop2: detected capacity change from 0 to 7 [ 432.695856][ T5816] Dev loop2: unable to read RDB block 7 [ 432.701904][ T5816] loop2: unable to read partition table [ 432.707657][ T5816] loop2: partition table beyond EOD, truncated [ 432.716358][T11740] Dev loop2: unable to read RDB block 7 [ 432.723627][T11740] loop2: unable to read partition table [ 432.729353][T11740] loop2: partition table beyond EOD, truncated [ 432.735976][T11740] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 432.746187][ T5191] Dev loop2: unable to read RDB block 7 [ 432.753983][ T5191] loop2: unable to read partition table [ 432.761354][ T5191] loop2: partition table beyond EOD, truncated [ 432.834347][ T29] audit: type=1400 audit(1733852712.390:764): avc: denied { accept } for pid=11741 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 432.839789][ T5870] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 432.861194][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.880558][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.892502][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.926367][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 432.940247][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.963168][ T25] usb 6-1: config 0 descriptor?? [ 433.030261][ T5870] usb 1-1: device descriptor read/64, error -71 [ 433.064381][T11756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.085071][T11756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.149186][ T5869] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 433.270068][ T5870] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 433.320968][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 433.329632][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.340946][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.350852][ T5869] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 433.360060][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.372832][ T5869] usb 3-1: config 0 descriptor?? [ 433.379173][ T25] pyra 0003:1E7D:2C24.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 433.389998][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 433.422440][ T5870] usb 1-1: device descriptor read/64, error -71 [ 433.427003][T11769] loop2: detected capacity change from 0 to 7 [ 433.435719][T11769] Dev loop2: unable to read RDB block 7 [ 433.441528][T11769] loop2: unable to read partition table [ 433.447601][T11769] loop2: partition table beyond EOD, truncated [ 433.453833][T11769] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.541649][ T5870] usb usb1-port1: attempt power cycle [ 433.551113][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.561925][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.572479][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.591770][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.606065][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.614735][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.629997][ T8] usb 5-1: SerialNumber: syz [ 433.666835][ T6745] usb 6-1: USB disconnect, device number 10 [ 433.787892][ T5869] hid-u2fzero 0003:10C4:8ACF.0024: item fetching failed at offset 2/5 [ 433.797356][ T5869] hid-u2fzero 0003:10C4:8ACF.0024: probe with driver hid-u2fzero failed with error -22 [ 433.854365][ T8] usb 5-1: 0:2 : does not exist [ 433.879816][ T5870] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 433.890486][ T8] usb 5-1: USB disconnect, device number 39 [ 433.920249][ T5870] usb 1-1: device descriptor read/8, error -71 [ 434.009874][ T9] usb 3-1: USB disconnect, device number 37 [ 434.094547][ T7851] udevd[7851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.170665][ T5870] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 434.191815][ T5870] usb 1-1: device descriptor read/8, error -71 [ 434.300729][ T5870] usb usb1-port1: unable to enumerate USB device [ 434.309935][ T1199] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 434.479860][ T1199] usb 4-1: Using ep0 maxpacket: 16 [ 434.490761][ T1199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 434.528710][ T1199] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 434.550648][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.566298][ T1199] usb 4-1: Product: syz [ 434.574619][ T1199] usb 4-1: Manufacturer: syz [ 434.602133][ T1199] usb 4-1: SerialNumber: syz [ 434.607333][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1505'. [ 434.634914][ T1199] usb 4-1: config 0 descriptor?? [ 434.677730][ T1199] hub 4-1:0.0: bad descriptor, ignoring hub [ 434.699808][ T1199] hub 4-1:0.0: probe with driver hub failed with error -5 [ 434.708052][ T1199] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 435.141861][ T29] audit: type=1400 audit(1733852714.680:765): avc: denied { read write } for pid=11783 comm="syz.3.1503" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.203386][ T29] audit: type=1400 audit(1733852714.680:766): avc: denied { open } for pid=11783 comm="syz.3.1503" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.227305][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.275935][T11795] netlink: 'syz.2.1507': attribute type 2 has an invalid length. [ 435.285274][T11795] syz.2.1507[11795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.285340][T11795] syz.2.1507[11795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.296891][T11795] syz.2.1507[11795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.379331][ T29] audit: type=1400 audit(1733852714.930:767): avc: denied { wake_alarm } for pid=11794 comm="syz.2.1507" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.674073][T11806] loop2: detected capacity change from 0 to 7 [ 435.719389][T11806] Dev loop2: unable to read RDB block 7 [ 435.763444][T11806] loop2: unable to read partition table [ 435.787405][T11806] loop2: partition table beyond EOD, truncated [ 435.811587][T11806] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.939780][T11818] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1513'. [ 435.957994][T11818] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1513'. [ 437.623072][ T29] audit: type=1400 audit(1733852717.180:768): avc: denied { setopt } for pid=11862 comm="syz.5.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 437.652688][ T29] audit: type=1400 audit(1733852717.180:769): avc: denied { ioctl } for pid=11862 comm="syz.5.1530" path="socket:[31819]" dev="sockfs" ino=31819 ioctlcmd=0xaed4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 437.704819][ T29] audit: type=1400 audit(1733852717.180:770): avc: denied { write } for pid=11862 comm="syz.5.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 437.749745][ T29] audit: type=1400 audit(1733852717.180:771): avc: denied { getopt } for pid=11862 comm="syz.5.1530" lport=39621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 437.789884][ T8] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 437.857491][ T29] audit: type=1400 audit(1733852717.410:772): avc: denied { listen } for pid=11874 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.923655][ T29] audit: type=1400 audit(1733852717.410:773): avc: denied { accept } for pid=11874 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.979399][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 438.003311][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.008477][T11878] netlink: 'syz.5.1532': attribute type 2 has an invalid length. [ 438.026255][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.319878][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 438.321109][T11872] syz.5.1532[11872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.329089][T11872] syz.5.1532[11872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.329364][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.345335][T11872] syz.5.1532[11872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.360245][ T8] usb 1-1: config 0 descriptor?? [ 438.801651][ T8] lenovo 0003:17EF:6062.0025: item fetching failed at offset 0/5 [ 438.829044][ T8] lenovo 0003:17EF:6062.0025: hid_parse failed [ 438.933969][ T8] lenovo 0003:17EF:6062.0025: probe with driver lenovo failed with error -22 [ 439.034333][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 439.120640][ T8] usb 1-1: USB disconnect, device number 53 [ 439.410024][ T5869] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 439.419965][ T5870] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 439.654077][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.674176][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 439.685981][ T5869] usb 5-1: no configurations [ 439.692445][ T5869] usb 5-1: can't read configurations, error -22 [ 439.890132][ T5869] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 440.045632][ T29] audit: type=1400 audit(1733852719.600:774): avc: denied { name_bind } for pid=11912 comm="syz.5.1545" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 440.059793][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 440.067712][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 440.077022][ T5870] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 440.077715][ T5869] usb 5-1: no configurations [ 440.094180][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.094186][ T5869] usb 5-1: can't read configurations, error -22 [ 440.095286][ T5869] usb usb5-port1: attempt power cycle [ 440.104741][ T9] usb 4-1: USB disconnect, device number 33 [ 440.146090][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 440.170037][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.223437][ T29] audit: type=1400 audit(1733852719.770:775): avc: denied { bind } for pid=11915 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.266335][ T5870] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 440.279475][T11918] delete_channel: no stack [ 440.284595][T11918] delete_channel: no stack [ 440.352535][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.361440][ T29] audit: type=1400 audit(1733852719.780:776): avc: denied { listen } for pid=11915 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.386590][ T5870] usb 3-1: config 0 descriptor?? [ 440.397953][ T5870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 440.402777][ T29] audit: type=1400 audit(1733852719.780:777): avc: denied { read } for pid=11915 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.459863][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 440.479864][ T5869] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 440.500310][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 440.505799][ T5869] usb 5-1: no configurations [ 440.510630][ T5869] usb 5-1: can't read configurations, error -22 [ 440.605806][ T5897] usb 3-1: USB disconnect, device number 38 [ 440.619994][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 440.627397][ T8] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 440.637230][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.647612][ T8] usb 6-1: config 0 descriptor?? [ 440.650479][ T5869] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 440.680500][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 440.686163][ T5869] usb 5-1: no configurations [ 440.691141][ T5869] usb 5-1: can't read configurations, error -22 [ 440.697757][ T5869] usb usb5-port1: unable to enumerate USB device [ 441.386361][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 441.426416][T11928] ======================================================= [ 441.426416][T11928] WARNING: The mand mount option has been deprecated and [ 441.426416][T11928] and is ignored by this kernel. Remove the mand [ 441.426416][T11928] option from the mount to silence this warning. [ 441.426416][T11928] ======================================================= [ 443.280112][T11981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.359812][ T5869] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 443.378665][T11981] FAULT_INJECTION: forcing a failure. [ 443.378665][T11981] name failslab, interval 1, probability 0, space 0, times 0 [ 443.459898][T11981] CPU: 0 UID: 0 PID: 11981 Comm: syz.3.1555 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 443.470705][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.480768][T11981] Call Trace: [ 443.484047][T11981] [ 443.486976][T11981] dump_stack_lvl+0x16c/0x1f0 [ 443.491665][T11981] should_fail_ex+0x497/0x5b0 [ 443.496351][T11981] ? fs_reclaim_acquire+0xae/0x150 [ 443.501479][T11981] should_failslab+0xc2/0x120 [ 443.506168][T11981] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 443.511545][T11981] ? __kernfs_new_node+0xd3/0x890 [ 443.516584][T11981] __kernfs_new_node+0xd3/0x890 [ 443.521447][T11981] ? __pfx___kernfs_new_node+0x10/0x10 [ 443.526919][T11981] ? __pfx___lock_acquire+0x10/0x10 [ 443.532128][T11981] ? lock_acquire.part.0+0x11b/0x380 [ 443.537423][T11981] ? find_held_lock+0x2d/0x110 [ 443.542203][T11981] kernfs_new_node+0x186/0x240 [ 443.546977][T11981] kernfs_create_link+0xcc/0x240 [ 443.551924][T11981] sysfs_do_create_link_sd+0x90/0x140 [ 443.557306][T11981] sysfs_create_link+0x61/0xc0 [ 443.562079][T11981] bus_add_device+0x13f/0x480 [ 443.566762][T11981] device_add+0x988/0x1a70 [ 443.571193][T11981] ? __pfx_device_add+0x10/0x10 [ 443.576057][T11981] ? __init_waitqueue_head+0xca/0x150 [ 443.581443][T11981] iommufd_test+0x9a5/0x44b0 [ 443.586044][T11981] ? __pfx_iommufd_test+0x10/0x10 [ 443.591074][T11981] ? __pfx_lock_release+0x10/0x10 [ 443.596105][T11981] ? lock_acquire+0x2f/0xb0 [ 443.600619][T11981] ? __might_fault+0xe3/0x190 [ 443.605312][T11981] ? __might_fault+0xe3/0x190 [ 443.610010][T11981] iommufd_fops_ioctl+0x359/0x4f0 [ 443.615057][T11981] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 443.620599][T11981] ? __pfx_lock_release+0x10/0x10 [ 443.625619][T11981] ? selinux_file_ioctl+0x180/0x270 [ 443.630809][T11981] ? selinux_file_ioctl+0xb4/0x270 [ 443.635909][T11981] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 443.641448][T11981] __x64_sys_ioctl+0x190/0x200 [ 443.646211][T11981] do_syscall_64+0xcd/0x250 [ 443.650709][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.656591][T11981] RIP: 0033:0x7fbb4ab7ff19 [ 443.660991][T11981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.680585][T11981] RSP: 002b:00007fbb4b9af058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.688984][T11981] RAX: ffffffffffffffda RBX: 00007fbb4ad45fa0 RCX: 00007fbb4ab7ff19 [ 443.696943][T11981] RDX: 0000000020000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 443.704903][T11981] RBP: 00007fbb4b9af0a0 R08: 0000000000000000 R09: 0000000000000000 [ 443.712861][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.720816][T11981] R13: 0000000000000000 R14: 00007fbb4ad45fa0 R15: 00007ffde1b11688 [ 443.728780][T11981] [ 444.191985][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 444.192022][ T29] audit: type=1400 audit(1733852723.740:780): avc: denied { open } for pid=12009 comm="syz.3.1556" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.273570][ T5869] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.273670][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.273737][ T5869] usb 5-1: Product: syz [ 444.273793][ T5869] usb 5-1: Manufacturer: syz [ 444.273857][ T5869] usb 5-1: SerialNumber: syz [ 444.348049][ T5869] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.632704][ T5869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.929240][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 445.942120][ T5869] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 445.951795][ T5869] ath9k_htc: Failed to initialize the device [ 445.970150][ T8] asix 6-1:0.0: probe with driver asix failed with error -71 [ 446.039915][ T8] usb 6-1: USB disconnect, device number 11 [ 446.092080][ T5869] usb 5-1: ath9k_htc: USB layer deinitialized [ 446.134771][T12038] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1565'. [ 446.218796][T12044] loop2: detected capacity change from 0 to 7 [ 446.245940][T12044] Dev loop2: unable to read RDB block 7 [ 446.263036][T12044] loop2: unable to read partition table [ 446.278583][T12044] loop2: partition table beyond EOD, truncated [ 446.307470][T12044] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.320185][ T5191] Dev loop2: unable to read RDB block 7 [ 446.343296][ T5191] loop2: unable to read partition table [ 446.359866][ T5191] loop2: partition table beyond EOD, truncated [ 446.417352][ T29] audit: type=1400 audit(1733852725.970:781): avc: denied { create } for pid=12051 comm="syz.5.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 446.444646][T12055] FAULT_INJECTION: forcing a failure. [ 446.444646][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.467483][T12055] CPU: 1 UID: 0 PID: 12055 Comm: syz.0.1572 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 446.478289][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.480781][T12058] dlm: no locking on control device [ 446.488340][T12055] Call Trace: [ 446.488352][T12055] [ 446.488360][T12055] dump_stack_lvl+0x16c/0x1f0 [ 446.504426][T12055] should_fail_ex+0x497/0x5b0 [ 446.509123][T12055] _copy_to_user+0x32/0xd0 [ 446.513553][T12055] put_user_ifreq+0xf4/0x140 [ 446.518155][T12055] sock_do_ioctl+0x232/0x280 [ 446.522763][T12055] ? __pfx_sock_do_ioctl+0x10/0x10 [ 446.527891][T12055] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 446.534414][T12055] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 446.540934][T12055] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 446.547806][T12055] sock_ioctl+0x228/0x6c0 [ 446.552151][T12055] ? __pfx_sock_ioctl+0x10/0x10 [ 446.557001][T12055] ? selinux_file_ioctl+0x180/0x270 [ 446.562188][T12055] ? selinux_file_ioctl+0xb4/0x270 [ 446.567289][T12055] ? __pfx_sock_ioctl+0x10/0x10 [ 446.572128][T12055] __x64_sys_ioctl+0x190/0x200 [ 446.576887][T12055] do_syscall_64+0xcd/0x250 [ 446.581387][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.587267][T12055] RIP: 0033:0x7fd346f7ff19 [ 446.591679][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.611276][T12055] RSP: 002b:00007fd347e55058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.619678][T12055] RAX: ffffffffffffffda RBX: 00007fd347145fa0 RCX: 00007fd346f7ff19 [ 446.627643][T12055] RDX: 0000000020000080 RSI: 0000000000008927 RDI: 0000000000000003 [ 446.635599][T12055] RBP: 00007fd347e550a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.643989][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.651946][T12055] R13: 0000000000000000 R14: 00007fd347145fa0 R15: 00007ffc410d67b8 [ 446.659911][T12055] [ 446.663027][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.831673][T12066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.851948][T12066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.939932][ T6745] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 447.103799][ T6745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.114515][ T6745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 447.127805][ T6745] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 447.152781][ T6745] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.172068][ T6745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 447.181459][ T6745] usb 6-1: SerialNumber: syz [ 447.193072][T12062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 447.203327][ T6745] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 447.222642][ T6745] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 447.334931][T12079] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1579'. [ 447.407419][ T6745] usb 6-1: USB disconnect, device number 12 [ 447.523688][ T5869] usb 5-1: USB disconnect, device number 44 [ 447.583473][T12082] netlink: 'syz.3.1578': attribute type 10 has an invalid length. [ 447.657996][T12082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.685444][T12082] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 447.728069][T12089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.742825][T12089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.870067][ T8] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 447.964861][T12082] syz.3.1578 (12082) used greatest stack depth: 20784 bytes left [ 448.098786][T12095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.563656][ T8] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 448.579936][ T5869] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 448.580651][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 448.660139][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 448.669370][ T8] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 448.677676][ T8] usb 1-1: Product: syz [ 448.682008][ T8] usb 1-1: Manufacturer: syz [ 448.686783][ T8] usb 1-1: SerialNumber: syz [ 448.859755][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 448.869503][ T5869] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 448.879023][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.888880][ T5869] usb 5-1: config 0 descriptor?? [ 449.456289][T12111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'. [ 449.789076][ T8] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 450.159271][ T29] audit: type=1400 audit(1733852729.710:782): avc: denied { read write } for pid=12086 comm="syz.0.1581" name="lp0" dev="devtmpfs" ino=3201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 450.239144][ T8] usb 1-1: USB disconnect, device number 54 [ 450.369781][ T6745] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 450.387919][ T29] audit: type=1400 audit(1733852729.750:783): avc: denied { open } for pid=12086 comm="syz.0.1581" path="/dev/usb/lp0" dev="devtmpfs" ino=3201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 450.421916][T12122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.435494][T12122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.485898][T12086] usblp0: removed [ 450.579868][ T6745] usb 6-1: Using ep0 maxpacket: 8 [ 450.812527][ T6745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.882718][ T6745] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.979201][ T6745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.042062][T12131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.054618][T12131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.067312][ T6745] usb 6-1: config 0 descriptor?? [ 451.277969][ T5869] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 451.294840][ T5869] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 451.316656][ T6745] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.727138][T12155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 451.793722][ T5869] asix 5-1:0.0: probe with driver asix failed with error -71 [ 451.818404][ T6745] usb 6-1: USB disconnect, device number 13 [ 451.825915][ T5869] usb 5-1: USB disconnect, device number 45 [ 451.868866][T12117] trusted_key: encrypted_key: insufficient parameters specified [ 452.013922][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 452.598857][ T29] audit: type=1400 audit(1733852732.150:784): avc: denied { listen } for pid=12115 comm="syz.5.1593" lport=40104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.645121][T12157] sctp: failed to load transform for md5: -2 [ 452.904261][T12186] syz.3.1607: attempt to access beyond end of device [ 452.904261][T12186] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 452.918908][T12186] (syz.3.1607,12186,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 452.926914][T12186] (syz.3.1607,12186,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 452.934550][T12186] (syz.3.1607,12186,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 452.943301][T12186] (syz.3.1607,12186,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 452.954972][T12187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.249454][T12199] usb usb1: usbfs: process 12199 (syz.2.1609) did not claim interface 8 before use [ 453.344610][T12202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.452095][T12201] syz.2.1609[12201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.452972][T12201] syz.2.1609[12201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.468410][T12201] syz.2.1609[12201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.469624][T12202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.716769][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1614'. [ 454.622818][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.697566][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.470236][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 455.717927][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 456.017449][ T29] audit: type=1400 audit(1733852735.350:785): avc: denied { connect } for pid=12232 comm="syz.5.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 456.160837][T12239] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 456.180001][T12251] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 456.221659][T12239] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 456.233022][T12251] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 456.941196][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.961374][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.979762][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.118887][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1631'. [ 457.138750][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.149306][T12265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 457.193498][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.203966][T12264] vlan2: entered promiscuous mode [ 457.239912][T12264] team0: entered promiscuous mode [ 457.256301][ T9] usb 5-1: config 0 descriptor?? [ 457.279856][T12264] team_slave_0: entered promiscuous mode [ 457.320461][T12264] team_slave_1: entered promiscuous mode [ 457.701120][ T9] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x2 [ 457.759878][ T9] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 457.863314][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 457.941595][T12271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.071807][T12271] capability: warning: `syz.0.1635' uses 32-bit capabilities (legacy support in use) [ 458.520082][ T29] audit: type=1400 audit(1733852738.030:786): avc: denied { mounton } for pid=12268 comm="syz.5.1634" path="/133/file0" dev="ramfs" ino=33034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 458.687314][T12275] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1636'. [ 458.991740][ C0] plantronics 0003:047F:FFFF.0026: usb_submit_urb(ctrl) failed: -1 [ 459.113791][ T29] audit: type=1400 audit(1733852738.670:787): avc: denied { unmount } for pid=9426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 459.134219][ T5870] usb 5-1: reset high-speed USB device number 46 using dummy_hcd [ 459.260001][ T5897] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 459.610276][ T5866] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 459.639151][T12285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.692059][T12294] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 459.712937][T12285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.727444][T12294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 459.784464][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.795863][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.809092][ T5866] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 459.826231][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.843752][ T5866] usb 4-1: config 0 descriptor?? [ 459.888673][T12305] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1647'. [ 459.899011][T12305] netlink: zone id is out of range [ 459.904546][T12305] netlink: zone id is out of range [ 459.918087][T12305] netlink: zone id is out of range [ 459.923329][T12305] netlink: zone id is out of range [ 459.928527][T12305] netlink: zone id is out of range [ 459.936715][T12305] netlink: zone id is out of range [ 459.945956][T12305] netlink: zone id is out of range [ 459.954626][T12305] netlink: zone id is out of range [ 459.960546][T12305] netlink: zone id is out of range [ 459.967336][T12305] netlink: zone id is out of range [ 460.040226][ T6745] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 460.113276][T12279] kAFS: Can only specify source 'none' with -o dyn [ 460.150818][ T5870] usb 5-1: device descriptor read/64, error -32 [ 460.194759][ T6745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 460.207293][ T6745] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 460.235002][ T6745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.270583][ T6745] usb 1-1: config 0 descriptor?? [ 460.361553][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.368376][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.375616][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.388000][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.395739][ T5870] usb 5-1: reset high-speed USB device number 46 using dummy_hcd [ 460.415912][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.423913][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.433935][ T5866] isku 0003:1E7D:319C.0027: unknown main item tag 0x0 [ 460.448284][ T5866] isku 0003:1E7D:319C.0027: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 460.535270][T12319] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 460.550351][ T5870] usb 5-1: device firmware changed [ 460.561165][ T9] usb 5-1: USB disconnect, device number 46 [ 460.582077][ T5897] usb 4-1: USB disconnect, device number 34 [ 460.735424][ T6745] asus 0003:0B05:1822.0028: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.0-1/input0 [ 460.740179][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 460.749576][ T6745] asus 0003:0B05:1822.0028: Asus input not registered [ 460.788933][ T6745] asus 0003:0B05:1822.0028: probe with driver asus failed with error -12 [ 460.890396][T12325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.904467][T12325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.976239][ T5897] usb 1-1: USB disconnect, device number 55 [ 460.991243][ T9] usb 5-1: config 4 has an invalid interface number: 98 but max is 0 [ 460.999371][ T9] usb 5-1: config 4 has an invalid descriptor of length 227, skipping remainder of the config [ 461.010343][ T9] usb 5-1: config 4 has no interface number 0 [ 461.016452][ T9] usb 5-1: too many endpoints for config 4 interface 98 altsetting 159: 190, using maximum allowed: 30 [ 461.021557][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.028333][ T9] usb 5-1: config 4 interface 98 altsetting 159 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 461.054223][ T9] usb 5-1: config 4 interface 98 has no altsetting 0 [ 461.061177][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 461.070271][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.139918][ T6745] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 461.280071][ T6745] usb 6-1: device descriptor read/64, error -71 [ 461.530060][ T6745] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 461.697007][ T9] usb 5-1: string descriptor 0 read error: -71 [ 461.699102][T12344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 461.704961][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 461.720012][ T6745] usb 6-1: device descriptor read/64, error -71 [ 461.736992][ T29] audit: type=1400 audit(1733852741.280:788): avc: denied { ioctl } for pid=12342 comm="syz.2.1661" path="socket:[33834]" dev="sockfs" ino=33834 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.876658][ T6745] usb usb6-port1: attempt power cycle [ 462.471572][T12354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.552323][T12361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.561740][T12361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.572279][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.582815][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.606840][ T29] audit: type=1400 audit(1733852742.160:789): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 462.659077][T12363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.673320][T12363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.814119][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 462.822802][ T9] stv0680 5-1:4.98: STV(e): camera ping failed!! [ 462.830372][ T6745] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 462.852948][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 462.870129][ T9] stv0680 5-1:4.98: last error: 0, command = 0x0 [ 462.886015][ T9] usb 5-1: USB disconnect, device number 47 [ 463.417527][ T2149] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 463.426982][ T6745] usb 6-1: device descriptor read/8, error -71 [ 463.452575][T12372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.513581][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 463.532560][T12374] syzkaller0: entered allmulticast mode [ 463.563320][T12377] syzkaller0: entered promiscuous mode [ 463.624550][T12374] syzkaller0 (unregistering): left allmulticast mode [ 463.632581][T12374] syzkaller0 (unregistering): left promiscuous mode [ 463.679869][ T6745] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 463.710340][ T6745] usb 6-1: device descriptor read/8, error -71 [ 463.751402][ T29] audit: type=1400 audit(1733852743.300:790): avc: denied { remount } for pid=12384 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 463.789636][T12385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.802005][T12385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.820623][ T6745] usb usb6-port1: unable to enumerate USB device [ 463.969395][ T5869] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 464.203258][T12393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.217637][T12393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.942317][ T5869] usb 1-1: device descriptor read/64, error -71 [ 465.255188][T12414] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1682'. [ 465.267778][ T5869] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 465.436564][ T5869] usb 1-1: device descriptor read/64, error -71 [ 465.489972][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 465.568139][ T5869] usb usb1-port1: attempt power cycle [ 466.019845][ T5869] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 466.027656][ T29] audit: type=1800 audit(1733852745.570:791): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1686" name="bus" dev="overlay" ino=781 res=0 errno=0 [ 466.451010][T12420] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 466.458025][T12420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 466.469954][ T5869] usb 1-1: device descriptor read/8, error -71 [ 466.482878][T12420] vhci_hcd vhci_hcd.0: Device attached [ 466.566244][T12422] vhci_hcd: connection closed [ 466.580147][ T1138] vhci_hcd: stop threads [ 466.601179][ T1138] vhci_hcd: release socket [ 466.605676][ T1138] vhci_hcd: disconnect device [ 466.716488][ T5869] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 466.722767][T12438] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1691'. [ 466.820325][ T5870] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 466.916713][ T29] audit: type=1326 audit(1733852746.470:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 466.940873][ T29] audit: type=1326 audit(1733852746.470:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 466.964420][ T29] audit: type=1326 audit(1733852746.470:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 466.987792][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 466.993361][ T29] audit: type=1326 audit(1733852746.470:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.016986][ T29] audit: type=1326 audit(1733852746.470:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.040579][ T29] audit: type=1326 audit(1733852746.470:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.064188][ T29] audit: type=1326 audit(1733852746.470:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.088044][ T29] audit: type=1326 audit(1733852746.470:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.111724][ T29] audit: type=1326 audit(1733852746.470:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.135213][ T29] audit: type=1326 audit(1733852746.470:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a37ff19 code=0x7ffc0000 [ 467.158943][ T5869] usb 1-1: device not accepting address 59, error -71 [ 467.167640][ T5869] usb usb1-port1: unable to enumerate USB device [ 467.177133][ T5870] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 467.198139][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 467.209153][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 467.222634][ T5870] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 467.231914][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.250884][ T5870] usb 5-1: config 0 descriptor?? [ 467.292995][ T25] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 467.300926][ T25] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 467.314527][ T25] hid-generic 0000:0003:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 467.474206][ T5870] usb 5-1: string descriptor 0 read error: -71 [ 467.483791][ T5870] usb 5-1: USB disconnect, device number 48 [ 467.490345][ T5869] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 467.669880][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 467.680792][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.694462][ T5869] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 467.707278][ T5869] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 467.718139][ T5869] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 467.729337][ T5869] usb 1-1: config 128 has no interface number 0 [ 467.736119][ T5869] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 467.749648][ T5869] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.762569][ T5869] usb 1-1: config 128 interface 127 has no altsetting 0 [ 467.771793][ T5869] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 467.784076][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.793348][ T5869] usb 1-1: Product: syz [ 467.798251][ T5869] usb 1-1: Manufacturer: syz [ 467.803041][ T5869] usb 1-1: SerialNumber: syz [ 468.231372][ T5869] usb 1-1: USB disconnect, device number 60 [ 469.020156][ T7851] udevd[7851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.828051][T12496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.865304][T12496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.969279][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 471.544362][T12510] vivid-004: ================= START STATUS ================= [ 471.573717][T12510] vivid-004: Radio HW Seek Mode: Bounded [ 471.592855][T12510] vivid-004: Radio Programmable HW Seek: false [ 471.599343][T12510] vivid-004: RDS Rx I/O Mode: Block I/O [ 471.609600][T12510] vivid-004: Generate RBDS Instead of RDS: false [ 471.617187][T12510] vivid-004: RDS Reception: true [ 471.745644][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 471.788408][T12520] net_ratelimit: 3 callbacks suppressed [ 471.788425][T12520] dccp_invalid_packet: P.Data Offset(0) too small [ 471.801578][T12510] vivid-004: RDS Program Type: 0 inactive [ 471.808065][T12510] vivid-004: RDS PS Name: inactive [ 471.817928][T12510] vivid-004: RDS Radio Text: inactive [ 471.926336][T12510] vivid-004: RDS Traffic Announcement: false inactive [ 472.052488][T12510] vivid-004: RDS Traffic Program: false inactive [ 472.058918][T12510] vivid-004: RDS Music: false inactive [ 472.066843][T12510] vivid-004: ================== END STATUS ================== [ 472.161362][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 472.161395][ T29] audit: type=1326 audit(1733852751.700:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab7ff19 code=0x7ffc0000 [ 472.675127][ T29] audit: type=1326 audit(1733852751.710:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab7ff19 code=0x7ffc0000 [ 472.698524][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.732580][ T29] audit: type=1326 audit(1733852751.710:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab7ff19 code=0x7ffc0000 [ 472.878691][ T29] audit: type=1326 audit(1733852751.710:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab7ff19 code=0x7ffc0000 [ 472.902682][ T5870] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 577.929632][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 577.936608][ C0] rcu: 1-...!: (1 GPs behind) idle=7114/1/0x4000000000000000 softirq=40865/40866 fqs=0 [ 577.947470][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5816/1:b..l [ 577.955389][ C0] rcu: (detected by 0, t=10502 jiffies, g=33821, q=274 ncpus=2) [ 577.963101][ C0] Sending NMI from CPU 0 to CPUs 1: [ 577.963126][ C1] NMI backtrace for cpu 1 [ 577.963136][ C1] CPU: 1 UID: 0 PID: 12533 Comm: syz.4.1721 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 577.963153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 577.963161][ C1] RIP: 0010:lock_release+0x285/0x6f0 [ 577.963183][ C1] Code: 0f 85 37 04 00 00 8b 55 24 85 d2 0f 85 b4 03 00 00 48 8d 7d 22 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 08 04 00 00 66 [ 577.963196][ C1] RSP: 0018:ffffc90000a18ca8 EFLAGS: 00000802 [ 577.963208][ C1] RAX: dffffc0000000000 RBX: 1ffff92000143197 RCX: ffffc90000a18cf8 [ 577.963218][ C1] RDX: 0000000000000000 RSI: ffff888028f5f300 RDI: ffff88805eb4d3d2 [ 577.963227][ C1] RBP: ffff88805eb4d3b0 R08: 0000000000000000 R09: fffffbfff20be2ba [ 577.963237][ C1] R10: ffffffff905f15d7 R11: 0000000000000002 R12: ffff888028f5f300 [ 577.963246][ C1] R13: 0000000000000003 R14: ffff88805eb4d358 R15: ffff88805eb4c880 [ 577.963256][ C1] FS: 00007fda443806c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 577.963272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.963282][ C1] CR2: 00000000207ff000 CR3: 00000000347de000 CR4: 00000000003526f0 [ 577.963292][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.963300][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.963310][ C1] Call Trace: [ 577.963317][ C1] [ 577.963324][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 577.963347][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 577.963360][ C1] ? nmi_handle+0x1ac/0x5d0 [ 577.963376][ C1] ? lock_release+0x285/0x6f0 [ 577.963391][ C1] ? default_do_nmi+0x6a/0x160 [ 577.963410][ C1] ? exc_nmi+0x170/0x1e0 [ 577.963428][ C1] ? end_repeat_nmi+0xf/0x53 [ 577.963449][ C1] ? lock_release+0x285/0x6f0 [ 577.963463][ C1] ? lock_release+0x285/0x6f0 [ 577.963478][ C1] ? lock_release+0x285/0x6f0 [ 577.963493][ C1] [ 577.963498][ C1] [ 577.963503][ C1] ? advance_sched+0x611/0xc60 [ 577.963517][ C1] ? __pfx_lock_release+0x10/0x10 [ 577.963531][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 577.963549][ C1] ? taprio_set_budgets+0x1e2/0x310 [ 577.963570][ C1] _raw_spin_unlock+0x16/0x50 [ 577.963584][ C1] advance_sched+0x611/0xc60 [ 577.963601][ C1] ? __pfx_advance_sched+0x10/0x10 [ 577.963613][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 577.963634][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 577.963651][ C1] ? read_tsc+0x9/0x20 [ 577.963671][ C1] hrtimer_interrupt+0x392/0x8e0 [ 577.963692][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 577.963710][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 577.963725][ C1] [ 577.963730][ C1] [ 577.963735][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 577.963752][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 577.963768][ C1] Code: b8 ff ff ff ff 65 0f c1 05 d0 d1 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 577.963781][ C1] RSP: 0018:ffffc90003fbf3c0 EFLAGS: 00000206 [ 577.963792][ C1] RAX: 0000000000000046 RBX: 1ffff920007f7e79 RCX: ffffffff8175c19e [ 577.963802][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1d280 [ 577.963812][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc99a3 [ 577.963821][ C1] R10: ffffffff96e4cd1f R11: 0000000000000001 R12: 0000000000000000 [ 577.963830][ C1] R13: ffff8880b8738000 R14: 0000000000000000 R15: 0000000000000000 [ 577.963841][ C1] ? hlock_class+0x4e/0x130 [ 577.963862][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 577.963884][ C1] ? rcu_is_watching+0x12/0xc0 [ 577.963902][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 577.963921][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 577.963937][ C1] ? __folio_batch_add_and_move+0x689/0xc60 [ 577.963954][ C1] ? lock_acquire+0x2f/0xb0 [ 577.963967][ C1] ? __folio_batch_add_and_move+0x689/0xc60 [ 577.963984][ C1] __folio_batch_add_and_move+0x6a4/0xc60 [ 577.963999][ C1] ? __folio_batch_add_and_move+0x689/0xc60 [ 577.964014][ C1] ? __pfx_lru_add+0x10/0x10 [ 577.964027][ C1] ? const_folio_flags+0x5b/0x100 [ 577.964041][ C1] shmem_alloc_and_add_folio+0x83b/0xc00 [ 577.964064][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 577.964082][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 577.964100][ C1] ? shmem_huge_global_enabled+0x176/0x250 [ 577.964117][ C1] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 577.964138][ C1] shmem_get_folio_gfp+0x689/0x1530 [ 577.964160][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 577.964181][ C1] ? filemap_map_pages+0xf92/0x16b0 [ 577.964196][ C1] shmem_fault+0x200/0xae0 [ 577.964215][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 577.964236][ C1] ? do_pte_missing+0xdd7/0x3e00 [ 577.964252][ C1] ? __pfx_lock_release+0x10/0x10 [ 577.964268][ C1] __do_fault+0x10a/0x490 [ 577.964287][ C1] do_pte_missing+0xebd/0x3e00 [ 577.964307][ C1] __handle_mm_fault+0x103c/0x2a40 [ 577.964324][ C1] ? find_held_lock+0x2d/0x110 [ 577.964342][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 577.964357][ C1] ? follow_page_pte+0x3c3/0x1b20 [ 577.964371][ C1] ? __pfx_lock_release+0x10/0x10 [ 577.964390][ C1] ? follow_page_pte+0x3f7/0x1b20 [ 577.964407][ C1] handle_mm_fault+0x3fa/0xaa0 [ 577.964424][ C1] __get_user_pages+0x8d9/0x3b50 [ 577.964441][ C1] ? __pfx_mt_find+0x10/0x10 [ 577.964457][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 577.964473][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 577.964488][ C1] ? __mm_populate+0x21d/0x380 [ 577.964504][ C1] populate_vma_page_range+0x27f/0x3a0 [ 577.964520][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 577.964536][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 577.964556][ C1] ? vm_mmap_pgoff+0x25b/0x360 [ 577.964573][ C1] __mm_populate+0x1d6/0x380 [ 577.964589][ C1] ? __pfx___mm_populate+0x10/0x10 [ 577.964604][ C1] ? up_write+0x1b2/0x520 [ 577.964621][ C1] vm_mmap_pgoff+0x293/0x360 [ 577.964637][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 577.964652][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 577.964666][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 577.964680][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 577.964692][ C1] ? rcu_is_watching+0x12/0xc0 [ 577.964711][ C1] __x64_sys_mmap+0x125/0x190 [ 577.964726][ C1] do_syscall_64+0xcd/0x250 [ 577.964743][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.964759][ C1] RIP: 0033:0x7fda4357ff19 [ 577.964772][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.964784][ C1] RSP: 002b:00007fda44380058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 577.964798][ C1] RAX: ffffffffffffffda RBX: 00007fda43745fa0 RCX: 00007fda4357ff19 [ 577.964808][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 577.964818][ C1] RBP: 00007fda435f3cc8 R08: ffffffffffffffff R09: 0000000000000000 [ 577.964827][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 577.964836][ C1] R13: 0000000000000000 R14: 00007fda43745fa0 R15: 00007fff56516e68 [ 577.964849][ C1] [ 577.965122][ C0] task:syz-executor state:R running task stack:22512 pid:5816 tgid:5816 ppid:5810 flags:0x00004002 [ 578.676021][ C0] Call Trace: [ 578.679296][ C0] [ 578.682227][ C0] __schedule+0xe58/0x5ad0 [ 578.686650][ C0] ? mark_lock+0x71/0xc60 [ 578.690977][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 578.696182][ C0] ? __pfx___schedule+0x10/0x10 [ 578.701031][ C0] ? find_held_lock+0x2d/0x110 [ 578.705808][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 578.711181][ C0] preempt_schedule_common+0x44/0xc0 [ 578.716464][ C0] preempt_schedule_thunk+0x1a/0x30 [ 578.721665][ C0] _raw_spin_unlock+0x3e/0x50 [ 578.726338][ C0] copy_page_range+0x1e15/0x57d0 [ 578.731301][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 578.736584][ C0] ? find_held_lock+0x2d/0x110 [ 578.741359][ C0] ? __pfx_lock_release+0x10/0x10 [ 578.746383][ C0] ? lock_acquire+0x2f/0xb0 [ 578.750881][ C0] ? copy_process+0x7dc5/0x8df0 [ 578.755738][ C0] ? down_write+0x14e/0x200 [ 578.760246][ C0] ? up_write+0x1b2/0x520 [ 578.764579][ C0] copy_process+0x7e77/0x8df0 [ 578.769264][ C0] ? hlock_class+0x4e/0x130 [ 578.773787][ C0] ? __pfx_copy_process+0x10/0x10 [ 578.778835][ C0] kernel_clone+0xfd/0x960 [ 578.783256][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 578.788292][ C0] ? find_held_lock+0x59/0x110 [ 578.793060][ C0] ? find_held_lock+0x2d/0x110 [ 578.797829][ C0] __do_sys_clone+0xba/0x100 [ 578.802419][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 578.807632][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 578.812923][ C0] do_syscall_64+0xcd/0x250 [ 578.817432][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.823324][ C0] RIP: 0033:0x7ff39a376793 [ 578.827733][ C0] RSP: 002b:00007ffce306a408 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 578.836147][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff39a376793 [ 578.844115][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 578.852081][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 578.860048][ C0] R10: 00005555555b77d0 R11: 0000000000000246 R12: 0000000000000000 [ 578.868029][ C0] R13: 0000000000073640 R14: 000000000007316f R15: 00007ffce306a590 [ 578.876030][ C0] [ 578.879050][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g33821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 578.890238][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 578.900202][ C0] rcu: RCU grace-period kthread stack dump: [ 578.906084][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 578.917838][ C0] Call Trace: [ 578.921110][ C0] [ 578.924042][ C0] __schedule+0xe58/0x5ad0 [ 578.928475][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 578.933689][ C0] ? __pfx___schedule+0x10/0x10 [ 578.938543][ C0] ? schedule+0x298/0x350 [ 578.942868][ C0] ? __pfx_lock_release+0x10/0x10 [ 578.947894][ C0] ? lock_acquire+0x2f/0xb0 [ 578.952397][ C0] ? schedule+0x1fd/0x350 [ 578.956730][ C0] schedule+0xe7/0x350 [ 578.960798][ C0] schedule_timeout+0x124/0x280 [ 578.965652][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 578.971029][ C0] ? __pfx_process_timeout+0x10/0x10 [ 578.976321][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 578.982125][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 578.987587][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 578.992357][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 578.997640][ C0] ? rcu_gp_init+0xc82/0x1630 [ 579.002319][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 579.007536][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.013343][ C0] rcu_gp_kthread+0x271/0x380 [ 579.018021][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 579.023225][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.028422][ C0] ? __kthread_parkme+0x148/0x220 [ 579.033459][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 579.038659][ C0] kthread+0x2c1/0x3a0 [ 579.042745][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.047939][ C0] ? __pfx_kthread+0x10/0x10 [ 579.052532][ C0] ret_from_fork+0x45/0x80 [ 579.056945][ C0] ? __pfx_kthread+0x10/0x10 [ 579.061538][ C0] ret_from_fork_asm+0x1a/0x30 [ 579.066318][ C0] [ 579.069330][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 579.075643][ C0] CPU: 0 UID: 0 PID: 1199 Comm: kworker/0:2 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 579.086397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.096447][ C0] Workqueue: events __sched_core_put [ 579.101737][ C0] RIP: 0010:smp_call_function_many_cond+0x477/0x1300 [ 579.108416][ C0] Code: c4 83 c5 03 e8 aa 0d 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 89 c6 c4 0f 0c 00 45 85 ed 75 d0 e8 7a 0d 0c 00 e8 75 0d 0c 00 44 8b [ 579.128041][ C0] RSP: 0018:ffffc900045cfa50 EFLAGS: 00000202 [ 579.134124][ C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc [ 579.142100][ C0] RDX: ffff888027b10000 RSI: 0000000000000001 RDI: 0000000000000000 [ 579.150067][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 579.158033][ C0] R10: 0000000000000001 R11: 0000000000000007 R12: ffffed10170e8949 [ 579.166003][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 579.173969][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 579.182897][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.189478][ C0] CR2: 000055559193e808 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 579.197447][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.205411][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.213376][ C0] Call Trace: [ 579.216654][ C0] [ 579.219497][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 579.225834][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 579.231038][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 579.236511][ C0] ? timekeeping_advance+0x72e/0xa90 [ 579.241791][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 579.247443][ C0] ? __asan_memcpy+0x3c/0x60 [ 579.252051][ C0] ? rcu_is_watching+0x12/0xc0 [ 579.256832][ C0] ? update_process_times+0x178/0x2d0 [ 579.262223][ C0] ? __pfx_update_process_times+0x10/0x10 [ 579.267953][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 579.273417][ C0] ? update_wall_time+0x1c/0x40 [ 579.278270][ C0] ? tick_nohz_handler+0x376/0x530 [ 579.283388][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 579.288852][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 579.294232][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 579.299950][ C0] ? read_tsc+0x9/0x20 [ 579.304028][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 579.309143][ C0] ? sched_core_idle_cpu+0x50/0x250 [ 579.314343][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 579.320500][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 579.326306][ C0] [ 579.329236][ C0] [ 579.332162][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 579.338320][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 579.346313][ C0] ? smp_call_function_many_cond+0x477/0x1300 [ 579.352399][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 579.357434][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 579.362462][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 579.367580][ C0] text_poke_bp_batch+0x22b/0x760 [ 579.372609][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 579.377635][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 579.383183][ C0] ? text_poke_queue+0xef/0x180 [ 579.388044][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 579.394297][ C0] text_poke_finish+0x30/0x40 [ 579.398975][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 579.404958][ C0] jump_label_update+0x1d7/0x400 [ 579.409905][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 579.415890][ C0] static_key_disable+0x1a/0x20 [ 579.420745][ C0] __sched_core_put+0x38/0x50 [ 579.425424][ C0] process_one_work+0x9c5/0x1ba0 [ 579.430369][ C0] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 579.436090][ C0] ? __pfx_process_one_work+0x10/0x10 [ 579.441457][ C0] ? rcu_is_watching+0x12/0xc0 [ 579.446248][ C0] ? assign_work+0x1a0/0x250 [ 579.451358][ C0] worker_thread+0x6c8/0xf00 [ 579.455977][ C0] ? __pfx_worker_thread+0x10/0x10 [ 579.461114][ C0] kthread+0x2c1/0x3a0 [ 579.465198][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.470399][ C0] ? __pfx_kthread+0x10/0x10 [ 579.474994][ C0] ret_from_fork+0x45/0x80 [ 579.479408][ C0] ? __pfx_kthread+0x10/0x10 [ 579.483999][ C0] ret_from_fork_asm+0x1a/0x30 [ 579.488778][ C0]