last executing test programs: 5.850925948s ago: executing program 1 (id=5483): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fsopen(&(0x7f0000000300)='ext2\x00', 0x1) read$FUSE(r0, &(0x7f000000c2c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xec4, 0xfffffffd, 0x14e, {0x0, 0x4, 0xfffffffffffffffe, 0x1, 0xd1, 0x2, 0x6, 0x0, 0x4, 0x8000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) r7 = getpid() r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) connect$tipc(r9, &(0x7f00000004c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_DIRENT(r0, &(0x7f0000000180)={0x108, 0x0, r1, [{0x2, 0x6, 0xa, 0xfa4c, '/dev/fuse\x00'}, {0x2, 0x6fa2, 0x3, 0x400, '+^{'}, {0x6, 0x8, 0xa, 0xc3b, '/dev/fuse\x00'}, {0x5, 0x3, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0xff, 0x5, 0x8, 'fuse\x00'}, {0x1, 0x2, 0x1, 0x9, '\x00'}, {0x6, 0x5, 0x5, 0x2, 'fuse\x00'}]}, 0x108) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x4, {0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xc, {0x0, 0x8, 0xd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x0, r3, 0x2, 0x28000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.646523641s ago: executing program 3 (id=5485): syz_emit_vhci(0x0, 0xe) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x42) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20044091) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4044040) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x9, 0x0, 0x8}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600)=0x80000, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x26, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) 4.871943037s ago: executing program 1 (id=5488): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000b2d000/0x2000)=nil, 0x2000, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = syz_socket_connect_nvme_tcp() tee(r2, r3, 0x4, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x5dfa5000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x2, 0x3, 0xffffffffffffffff, 0x7, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.871556757s ago: executing program 3 (id=5489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x100000f, 0x9, 0x0, 0x5, 0x5, 0x7, 0x87b, 0x2, 0xe, 0x9, 0xffffffffffc, 0x5, 0x5, 0x1, 0x1ffffffffe], 0xb000, 0x8f40}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x370, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x510, 0x510, 0x510, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x2}, {0xffffffffffffffff, 0x3, 0x6}, 0xffff, 0x9}}}, {{@ipv6={@remote, @private0, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff000000, 0xff], 'pim6reg1\x00', 'xfrm0\x00', {}, {0xff}, 0x62, 0x4, 0x0, 0xc}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x101}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "70470659c58246b8c1d7f86ef2536ac9903efeabf87a7013bf23035e14f3"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.726629171s ago: executing program 1 (id=5490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000001540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x1, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @window={0x3, 0x3, 0xd7}, @md5sig={0x13, 0x12, "d763e1f1f092edf135a09b8b0be9ff5f"}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xe, [0x1, 0x3, 0x1]}]}}}}}}}}, 0x0) 4.607285131s ago: executing program 1 (id=5491): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x2a, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r3, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_setup(0x6, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x2, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x5be, r7, 0x0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x3, r6, &(0x7f0000000540)="896fc1ba2c99", 0x6, 0x5}]) r8 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x164e, 0xd000, 0x20000a, 0x20002f7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000092601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e22005e00"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000011000146"], 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x4008080) 4.535674839s ago: executing program 3 (id=5492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf25140000000800010000000000"], 0x1c}}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(0x0, 0x0) close(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="6865a1d4", 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(r3) execveat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', &(0x7f0000000400)={[&(0x7f0000000140)='nl802154\x00', &(0x7f0000000180)='].:\\\x00', &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x0f\\&&\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)=')\\,@#\x00', &(0x7f0000000380)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000440)=':{\x00']}, 0x400) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000000)={0x7, 0x80000001}, &(0x7f0000000040)) 4.451811863s ago: executing program 1 (id=5493): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000021002bbd7000000000000700000005002a000000000004000f88"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, &(0x7f0000000140)='.\x00', 0x400, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x2]}, {0x401, 0x4, 0x9}}, 0x2b17327, &(0x7f00000001c0), &(0x7f0000000200)=0x5}, 0x3, &(0x7f0000000540)=[{0x2, 0x2, &(0x7f0000000280)='-\x00', &(0x7f00000002c0)="6cd8eef83e558f760f7e0ab97a4109434d6bea71aa97bc56abae9779e8534b3fd2b82a9d83de5a0ffbc1838b4331ba42158f5985b13555ef8f50eb3d06dcdefd88faa2214bd7a84f9835", 0x4a}, {0x1, 0x6, &(0x7f0000000340)='+\x00', &(0x7f0000000380)="999ac59b2072f577bd54dcbb461946fcb5bfcfde9c097bb519d5b75917f999e3249466db523600d5945ef8c95ae810a4e6301d13229016ceec905d239b29536e3e64bb04d4439cacb6291d2d70a9e5d1aca669e0067572f0efe994114a0cd7ffb68566f17a162cba3223935b6200beb1721d5670f7179f2aeae4c3fb8f267d5fbf3b70980eb23f58aa9b09c67500eab38b9716056b65dd9fa8d7899d1d1600abb912bfe26debe8bbce76fdd7d82db17ea96286b7240fcd9cea0ab3aa551c4f6d90ed76665d0e", 0xc6, 0x1}, {0x1, 0xff, &(0x7f0000000480)='/dev/kvm\x80', &(0x7f00000004c0)="4a74a60558bf4c26fea5d90a76d1cf3af63604cdaeec641496bd7bfcd8beaf81c94d5af589ce0085b1357994a65290813ab3496e2fa76458f2fd07f4b9075dc58e24ce", 0x43}]}) r3 = getpgid(0xffffffffffffffff) sched_setscheduler(r3, 0x5, &(0x7f0000000640)=0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000740)={0x0, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="f659030f73f70ebaf80c66b8ba1b278466efbafc0ced6464660f388258caba4300ec0f20c06635000000800f22c00f01c566b83cc7243d0f23c00f21f8663501000b000f23f80f01cae000", 0x4b}], 0x1, 0x39, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)="35fc", 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000680)='./proc/fs/nfsd\x00', &(0x7f00000006c0), &(0x7f0000000700)='./proc/fs/nfsd/threads\x00', 0x17, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.103401982s ago: executing program 2 (id=5495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000720000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2216, 0xaf49, 0x16, 0x0, 0x0) 4.053206918s ago: executing program 1 (id=5496): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', &(0x7f0000000240), &(0x7f0000000280)={'L+', 0x200000}, 0x16, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff18fffc08000340000000100c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='password\x00', &(0x7f00000004c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newchain={0xdc, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xffe0, 0xb}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xa4, 0x2, [@TCA_CGROUP_EMATCHES={0xa0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8ff, 0x8, 0x4}, {0x4, 0x1, 0x4}}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x442}, "c0a74561ef8b6b34c23dbe6f7704ecfece05adfad7beae96ae22234677f6b957309b2673a1030149f8226ee6d7c4bec0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x60, 0x3, 0xfffb}, {0x2, 0x1, 0xfffffc01, 0xc904}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x8000}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x80}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x1e, 0x1, 0x401) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.96195517s ago: executing program 2 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2.390526s ago: executing program 4 (id=5502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000400) write(r1, &(0x7f0000000500)="ffffffffffff00000000000188ca4f40002810000000000000000100000101000001010000020000", 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x209c2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x6ee7, 0xc000, 0x28, 0x19c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.190166489s ago: executing program 4 (id=5503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f00000001c0)={&(0x7f0000002000)={[{&(0x7f00000000c0)="1f7781576bdcb4f4dd6d02be602eb206eaf54264c41fa710ea48d7503782d9a5d52b499e1ee9647f2407521f8c4061474277398a0e578a80015359006ec2dd408b5a3e704ed2b457f08932d08bad0588074a4b4472caf8304b685c6313dd61ca95e38541b292ea67af31bb5351052cc5359a0577444866e80fd37779b7107f99f02fe8c7cf37d4d90b6804582b9e16ac91d91f4d8c3af7d51bd03a821be41d3902094c5ad30c4e4a57308ae9ab53d15d4a31213c1007f6b3a499f0bc13400216046a48b71d70e3c8adfd82e1682b7dfd9713b058783d12be79d4c98b5009a17e1d54", 0xe2, 0x3}]}, 0x1, 0x2, 0x2}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r3], 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010024bd7000fddbdf25070004000cdd65ff4ad5092a76aaaaaa080001000000000008000300e3f441d6ab8db053d9", @ANYRES32=r3, @ANYBLOB="0c0017"], 0x48}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) 2.17551972s ago: executing program 0 (id=5504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) 2.139365171s ago: executing program 0 (id=5505): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x90) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000380)={0x1, 0x0, {0xc, 0x37, 0x6, 0x1a, 0x4, 0xc, 0x1, 0x17, 0xffffffffffffffff}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r2, &(0x7f0000000000)=""/147, 0x93) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000480)={0x7, {{0xa, 0x4e22, 0x2, @private1, 0x1}}}, 0x88) 1.947561745s ago: executing program 0 (id=5506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000901fefffffffddbdf25017c0000040042800c00018006000600800a00000400028008000a002a"], 0x30}, 0x1, 0x700000000000000, 0x0, 0x4048011}, 0x20000080) 1.947319033s ago: executing program 4 (id=5507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9b7, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 1.910852064s ago: executing program 0 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c000480280001800800010066696200ff0102800800024000000003080001400000000108000340000000000900020073797a3200000000140000001100010000000000000000000100000a35ffc18c5b774682e1435c3b1ef5567336db8d0685b7a9d83a1561dca557f1d3b1f419f268cceab0a8146d22d59b8de6fab920d6a14cb0ad42d04909923cce7971745033e8ca7229bd13670160dbf89653d5d3d9796f86639b82631f5d9235f2ca37d975e5212dd1d0468163da4cbbefeb444a629185ec6fcddf98097539a8c326a61c"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.870638396s ago: executing program 0 (id=5509): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x401, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.447535573s ago: executing program 3 (id=5510): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0xb0003d072c9f54ee, &(0x7f0000002140)=ANY=[]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) r3 = syz_open_dev$sndpcmp(0x0, 0x8000000000007d, 0x2340) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES16=r0, @ANYBLOB="000000000000000000080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100f7f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) 1.114804713s ago: executing program 4 (id=5511): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_io_uring_setup(0x165f, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000000}}], 0x1, 0x0) (fail_nth: 1) 1.093618938s ago: executing program 3 (id=5512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = creat(0x0, 0x4b) r3 = syz_open_dev$sg(&(0x7f0000000080), 0xe6, 0x200000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0), 0x0) close(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) io_submit(r1, 0x4, &(0x7f0000001bc0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x83, r0, &(0x7f0000000100)="2b3ff1b3c78283759bdd6d9c90c22832be0af73c51be263d480085f5d744033998e7fd9e059d3e832cde355c53554e1619491a62e50eea5a3b9dfb5fec4b521d22381e5fa7ade730dd660d46e157e68eb62c58fce76a17bf9b08e97d88a55687c642d4ee", 0x64, 0x3, 0x0, 0x0, r2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000900)="2e4a2a6f51a75c95b16e22e23c2b4cd5f3863b62b83692280bcbb11090d4e5d11f8dfdd09c8bdc2eb4ac970d0fd6e682763a45693d85a6ae771ccd0ec1068bfa856e1d227723bdeb9827fcf68e5b63bd1d7b3afe4490cfa8ebf11490a39d4ffdc910abf30a1f6fad3f784814fb229e2641555170d9ea652c6bdec6352b95722a351d0ae25ba419a3828e0ee50dbf386895ad9b4a60315e29dd24ff1e3c9f1dad68c90c2d9b09259c80ccdc783c06be844d0f549e23bff889182bd27195443e46a13098b615e21f355a4bd8bee8debae8a09eabe1651c2e3dafc74944c8a28a19016ad05ce544d6502ddb5f1a52bf3425735804e4fe17f8954f8c29be7cef4e5002bb9c9ccceed7d20f6c2b2bd17739c00bd534ce2dc9de1eca90649f97cb4ed43372416e5d0a5a9b428d9996fb7d8a97909382e89eb9f560e1f05be708fbc05d6d2eeffc747d0f4a859e96acbe3a49f449461be5fbd968583a6f782b40a7e2e3fb5d720797fe9d651718db2a31d4f050d688350f7698116b21911a57a62ca698484e90d07d695a5816e412d8c69fbc11ed68d45734b5a42081f447e261975271c4ae7466068aa542b1ba52664dafc1e8240ff906e3310f1d8333869741dca3ffa588c87823689b17f8dcd12549133e34abcc6f896add65a3aaf528455a78a0e21a5ea9a21eb7db547af7c8ce3a9fe78d539952cdfbebe214d459b99476a614823b8da11f46e326e3f08a2a251e693aa06d25f3bafc739bbf03edd33871b2ce1f4ec2018ccb1433f6de66984d1d2071a55bfab4165c95148c93d81258f37e6121f295cbc514a568fc0881c47278830d74b6e582548af8ff5350a0db12b031f2773f74b56c8d586f1ac75c51b5578d7cd66937c02a3e2a27a931c9286bfe17a50fded358d19a53c6c518b89e2a2e8caf1dd38db8cd552442800b8a4b7af1a13c477eebd63dc45570ecfeacb9f7d5339033c54bf5049dad8af9cf02042653de4f95cb4881b9e003e554f7f9a162899407f6be12fcbbbc3e7452b6afcb2e8381e731b9db360592e1368fb5a809d47de0b8797a16046d574d50565fc7eed6218762e0b1d2f59a352a62928f2bc4de3f6d3e0ec2fcbf695cafdbd105db099d1ca8f60adbacbb162b9a6ebef9a467a9f952e3be27ab61f0a739720f2c579a5a33e64267f2f3651727a4d57af779c9dd0c3ab788323f4061c6d40f2f53824e4262ca0fc07bcbad89e9f1fd4c7342e2366c773aaa2bfce981a661b048aba51d3599c56a36ca5f23e988ae36a360bcf78b8fb3a8b573a0a625efea1c4bc28a2d4b646f9d6f0b90b20e2846e3889bf08624e34adcabc0a92b7d20a750ce5f0643b7953b4aa80ef07dc9f4ed83122ede799c37beffe0b023efae60794c34e5c7760bbde2aaec0996d89c77ce2cdd260de381d3a302db799b3cce5803a5e4041caf9379bf9273cbe063b42e4071605066ab1fe63e0a96674914d23e34d0eb5b084e2c7a56651ae0e846d3a8905ba8418f45e602bf53ec32210634b70eb5cd679cc21e844dcdda86f5e501d7358d0c61f953853c48bb9b21866a0b2caadf621b16c0ad03f02b42b3575da99c674134230d7fc2de21cefd93b43d5f580940c04e000df76a6255a043781a09f24bbdabfdc102b34a255943492353a24aaaa0cb6e26d09cf38cbc2979e6182a3263a102ce1615254bb8bf3d4b1d40e400a086573e087ede94fd1139fd7500b8faf711888e89446edf3e6c13d17aee946f04cb576b0079cc62fdd7b87eda517b5d7d4cd9ecb21c9b238f568edfdd752a35ba4e37677187d5220feb81c64fd90123c8efa490bd1384c60af357bec0e40161b8394162548dfefd35d4d5dee902f4d62489c8e4fd6ad8c1824d232cdca303111de211570dbec968e9f00dc869279916ed9e6a7670713fff3cc647f18a623d4f288cecd34fcf740c9f296c6e1721a0358f3c6f8de0f5ff1a41ffed3f72c1b959783947102cab9b6bd42ba9a94fca68fac7c73a64b5a9074a4e217d4ca469c143645be903981b35998c8c4b36ae3a7a461f2598453803ddd7ab14ef68ba47dfff4292f4841d5977f05b783b08f8a72ad6feedfa9a203fea56cea83c35e6f6a619ab3fbc2eabbfdd3449753673f4647743a5a72c14628b097f0ab34a59250040667ac90e6419fe810ac0fe621e92eb9e701842e928ee966a1ffebbab2bf2ccf9a974964eaad475a8c011b301483c8ad9efe5cb681fdcf1c4bdfd1584f8cd97636d22586e8f5b0828ba6b6e56b905781bd13dfa081e3b8e916d6ac569a905377f9cbbd1a2862504eaff92af9228553f917dc188dc537e6fb5b3173590b582ea5fd5067a9777dc0d6f56805cdfd685466a4ab4207bd75613ad5abec15ecbb0838177af942ed627d42d541728a77231a641f6d070bde2561d587d5428aed2a1b96725268241ae05e607ce02eec746c664e4474077b60203df3799be580cef4558ff3316be3bfaa818a94dab6febb550efe8f2d7563d7d305e0a028d8dbe59c697ae22e4701652e5ff7e953c342d30725033a3077c9825793e4939c9fd4a7f5f76ec3ef77081f2a6cc2a683137b8212caac7f0bafc24d8ef4254e62c24847c36d1f9ddbb3d376898a853c294b6945f4a49f5e1bafc4521acf62bb711fa4e332f2faed51f75627aa610b1a158ec8bb982065b488c60626099aacaf5f2e96e520d56a04ab702eb31e07c6ceb88ec1479b877c0845ece5e94e2b4cef2a4a389bc798858882cc57888961f7b974bcc89c7f3499a6f151a0a9f4867d46a1b5f1a32d56ef56982bd440db2ca2af8a6c196c6f341eff661950f21a3050149cdf02d3a0880be5d818888e2ad9f4a0cc568025bb9ae52c7fa5023f1a3af62f86e28bb8f1e11324d4ec059d59966f8968fd8c36c9441ddce487cb64f56c2d72aa92b9de878524f7636fc01b57ef12fa4b205064326894cea2bf10aa1319023f9106e6d9e17d2c47230772bd098cc769e5b639879e0ae149e84e7519af3a1285e76de10ba608baf70abc8605e1f2d01ebb67318e01fcda0c718099d51111130b05d04177d867cb0cfdedb0b37d6426adba8f431aadce64586151f21c722a5396a000de5e2111ce5e2ddcd5eba9d0a6f3960fb5d8f359459968335e4b317278ce65cb5758fff72e65541b8a130a33366661aad876f7166ecb6f15f10c27c677e412e377718b05316f571f80ceb2e135c81a5adc7b28173ca737efc60def65bf909cd2333b2df3b26025b29274ac6d1047a20169bed35600802bd0ba2aff3f2e44cbf3eaa6425fc660451892bbb355d91da187171634c5d9990edecfe0595b58aedfdbff44c9b26bd63a867ebb2badbdece68fb23bd8e00c59bc96ef45b2fa2cf032b19bd5e108fd1f90f9a3a369971376493a30f820b932fb6ec43edda9d6967cbe901f378570b0c973799fb431e3b7961e8152543284d6d6bcc03b4fa792b2897002d70687bd5c300c34d87ba707668cd21956c302b07fe9fdf22ee0ab1c8c18133ae2f8dbee36a780be6af8ac4c8c9e4d2e76ef8955aba73b6a3193ada6d285850890094c512b0a3b8dd90f13fe853062e42b0309070d774c4cf8deea0fc0500252f69403bd9fbf738f685f6fd72f245d657eb27fc79aa3c1c66c86fb19a3c20d93b49705c2bc98bc00218557a1eea8a0d56049ea515f2c89960aacfc137a65fca46ac7ae40bba1b1975cfaca4e0c15055001aadfbeeeeb7b3cb588f621cd34cf7238b42cfc04d135c22448ec127395edcef8552a0ee5e1a76c5e990f9709ce08f308b88d45b0965b2eef96bcbcc0e1ad0f0441a02a4f53889423b2dd441348acf56b43d16ecc09de2f7d34dc6f0c983fb98a65117907448e814e77a5c98d4deac3150cdbbdb77a9673f810e38b2b478f44c8e4e5a5fab8282a837c09bf47926e9ea65f4744629994ec1daef7d4449d14c8234dd7a0b98c6c2daa4b297795353131425c14c7553b442228a2af9103666fc83be9fd5946f7e2c1daa9c1e8a584efa4be6ea99e2cfecf5bd966ba2170156ce60aabad748e1bbead1c594bdf86019c2846fb4f1bc0a63c1a54cd9e31eb94c0c92f82dedae7e38177a53c6079eea8f7389b3fae921f049e0db161f606696f4639311c1a2d7c30b1effd23880a673f99d8754ab4e07f2afa3a1811fee8a4ab4520194d8e56eebf752b1f38f2156ba0bdac43ce041bf079e9f74f5f508b2109d85f313433ddc88890cd75202ef96f4f59db9f7b6e1e98983e2224a80ec93fc6881bcb35b60ea9164ed551a1f77a07d9e79e8c5e65a67f7e21b7dec55fc1556613c0e2d8d42e1b1f59c03bc541aa5dc4afebdebb0b33e0c5c1349941428ff4774e9804450c84a1432d7302d3bf3ba916a142b107d833f0d7a65dca76e65e76f2b3668437c455456868f0ef870d9cb7052e0cef470cd87ec99987ac2047d10ff8e5c72b4ff25c931cf334e94ecd5e91edf7c76d33306e8a6b72f9c705138fae3c0e75fb0af74945d0db0a94bc7b99c866f2fac036dec6c62840d37544d566b30814fa125fac041cf8b104e71425795e915fbff7b78e4a08a056c225e986fe3a60f0bf57237ce2f76bb6af8035712dcff07c11136e3038befe5ac5065142929f5d0e5230c97a440030048ccb343f188748c980d4488b66a504452e7c1e5ec85bb4e8ebd02c78a509f802456aac096319f26b7f14b447a027f93ed70508344e429d7e2a50f03402786f470fbc4f0adfdddf4a5394dff2b40f47c72583e65eea83386b7a37a6bdd2ec28f239c9d4263de0e58159c5db8c26eeea4476afe75b5239cbdd414ac6f7c664eae743d2c5a7ed16412a281340174787e73f1bd798dfc0c4f1a623a15a8c87667d2d4d9398edb9149de0cce4a4a92438052ca4615eedebbf355d0da66dab6ce274d55d2cb1146b685f305bf5517b6cba490315c27546010e1f5a7f32c692662d9a17fc0e8663659731a99beef5c58bf795797801763bea9d1629ad2d3d8bac7960ee57e88e6ba9d22925839ce5a9e96efa7a2c9eba1ce3b3dc68e2ce62af7a261a3f64576e23ca6919512ca9e438692ef3ff4194cb373a6ce251acb348920038b8b6a4072401939dac691d95bf1edcaaa6917bb7bb083aa655fb05995aeeabda4e2d18c77b6066b46ac6e7c89d4d2d410dd0d0ff29a58b9404a6643299f9974648ba804be191b926d9b7bc0c45fad88c262f808525559c5454d93e7d2fd4c88ab55a31ff96c488e76634672b898e8d6f0cdaf7b479e764abc8047504a8f9fe8c91061c3b7eeb94e0dd323c44a3462a268c0c718d749214545e165babf7ae0e79ad8dec549fc3e7ff05d6c7b273352cc19083ef01221601a1a5a7a496e63f0b6cc2900e247d1004519000e9e3fc0441d4ba34539ccdf51eb1e72337d348f9c6d2200f5130b4336b75138c509a5caca81a8cec554dde6c5e2b69d8a85026c72fc4e5937f8715e9073ae903650ae38140fe837dbd0559c6a0e09c0e99d710031f1caf236cafe6d38f836fe6cf4e24c183a02f6c99272643bc1bad46a7143142472553534b8d088ccf7e0f83bb287a4a1180752fbf98703fd446a4f408ac30586347d325dbdf9ff5237b9eb87e0e6fd3d41051eaee285e7157b142e07c0de95c7aa6513694dbeab7d84a3d21ca4080dfe8d8d117a60396d11560be1e7cf34c79ab151dcfdf472551a8658e86299bb33f35e5a8c96585346098d9a52988124f0a9ba9feee1787feeb2aaf82628c49400a77109977015d0268cf39ae9db7579f58e6c6aa176114b1296d6de23328894ea5b41fd535c1c000000000000000000", 0x1000, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000001940)="1ecdb664b60f398ca062f9b8f80f9721986dbb226bcda876bec42a531fd9ef7addf83c4075ae0acd57cc9f08b4c9a713b14a4f806b432f9b1cfac3703ca7a72ca372926e39a03cd80afb299c7cb1d0309e94edd96d7ca9b79669441d8fd1bbe123d6ab26988b535b2783aa9094b06ad78873235be71664bdcf09154543a18263193615387954ff7ff187a2ac2ee24f5c1349e44f49cc1b5fd3eccf359607bc9eb4feab90c59bd480f1e0c5", 0x9e, 0x0, 0x0, 0x2, r2}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x3b5d, r0, &(0x7f0000000480)="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", 0x104, 0x6, 0x0, 0x3, r4}]) r5 = socket$kcm(0x1e, 0xb, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180)=r4, 0x4) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) close(r6) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r7 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) mmap(&(0x7f0000f0b000/0x2000)=nil, 0x2000, 0x300000f, 0x10, r7, 0x905e3000) socket$l2tp6(0xa, 0x2, 0x73) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) 810.711433ms ago: executing program 4 (id=5513): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) write(r1, &(0x7f0000000700)='traceon', 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x2001, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{}, 0x65}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2a, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)) 785.146434ms ago: executing program 2 (id=5514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_clone(0x10000, &(0x7f0000000380)="f406497c64129efb680a9d53c225c612e2a8940c5eeed85a79b0dc96d4b71e1c58dcb6c03ff4e422f45acb96aaa40b008dd2f05620f78d310efc713d27d64cb275759b0e4ed9f11262afff7f7fa203ca2967da5e51ce1f57533e94", 0x5b, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="16c86fae8ffc8e8e67c4ff95b7") ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000004c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000025c0)={0x0, 0x0}) syz_clone3(&(0x7f0000002680)={0x240021300, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x21}, &(0x7f00000001c0)=""/227, 0xe3, &(0x7f00000002c0)=""/137, &(0x7f0000002640)=[r1, r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x8}, 0x58) 772.28018ms ago: executing program 0 (id=5515): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)='7', 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) 635.632481ms ago: executing program 2 (id=5516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ustat(0x2, &(0x7f0000000140)) r2 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000700)={0x19}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r10}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r6, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c41}, 0x40150) 598.992013ms ago: executing program 3 (id=5517): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="9f040000000000e606100000000102ed0a0002000000000000000010fc00000000000000000000000000000000000000075e14ba3361c4b3fe572fe2bab44e2776ead76d98a79904ce0880bd0cd8824793359e8adbe4dab5a0bdccee1572ab8ee7b1e63c580bcc9de1dc13328ef3df7e62f41acfac76236998e256f74a2dece9c4fbaee65c7383335a2d1df07ec0d44845babb7954738732f660b7ef73c300189510165b4849f5db85558022886c342883a545b210e670ce8368f26f30ff2f61872da2ff"], 0x30) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="9f040000000000e606100000000102ed0a0002000000000000000010fc00000000000000000000000000000000000000075e14ba3361c4b3fe572fe2bab44e2776ead76d98a79904ce0880bd0cd8824793359e8adbe4dab5a0bdccee1572ab8ee7b1e63c580bcc9de1dc13328ef3df7e62f41acfac76236998e256f74a2dece9c4fbaee65c7383335a2d1df07ec0d44845babb7954738732f660b7ef73c300189510165b4849f5db85558022886c342883a545b210e670ce8368f26f30ff2f61872da2ff"], 0x30) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) 534.437226ms ago: executing program 4 (id=5518): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vlan1\x00', 'vlan1\x00', 0x3, 0x3, 0x5, 0x7, 0x5, 0x4907, {0x2900000000000}, {0x8}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000003c0)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb8a8d13}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001540)=ANY=[@ANYBLOB="aaaaaaaaaaaa88aaaaaaaa0000800125f4772ee2e4a94c0045000014000000000084cd92ecbfb4a1d91f44b0511e1a01007b05170d3d37b2d6f73036367721fd0e167cfa84"], 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x2c, &(0x7f0000000000), 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) syz_open_dev$loop(&(0x7f0000000080), 0x38000000, 0x101000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_init() inotify_add_watch(r2, &(0x7f0000001680)='./file1\x00', 0x1400037e) inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0xa0000006) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000000000000a004e2400000000fe8000000000000000000000000000bb010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2200000003fe0500000000000000000000000001010900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000"], 0x110) 148.428057ms ago: executing program 2 (id=5519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0xa43b, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x20, 0x6, "75c44e97409c2d6778cf70fe183b0a99f64608691cb56ff120da6a15"}]}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x59, 0x7, 0x1, 0x0, "99ce60312b13bf114a97b0d34044764c2c2504b3cefe448a2339e300cd01a03b2f48bf905d39e56810e0c427475169f896a8737bcd0e62e93c6d2aeebd3e13e7e37336191482cc8fa71778c747fb5c88df2f3d565f"}]}], {0x14, 0x10}}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=5520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1, 0x803, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) kernel console output (not intermixed with test programs): couldn't find an available UDC or it's busy [ 700.792759][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.891603][T20678] FAT-fs (nbd1): unable to read boot sector [ 700.949489][T20686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.021779][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.659339][T20704] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4992'. [ 707.381218][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5010'. [ 707.392606][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5010'. [ 707.909590][T20782] FAULT_INJECTION: forcing a failure. [ 707.909590][T20782] name failslab, interval 1, probability 0, space 0, times 0 [ 707.945873][T20782] CPU: 0 UID: 0 PID: 20782 Comm: syz.1.5013 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.945906][T20782] Tainted: [L]=SOFTLOCKUP [ 707.945913][T20782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 707.945924][T20782] Call Trace: [ 707.945930][T20782] [ 707.945937][T20782] dump_stack_lvl+0x100/0x190 [ 707.945965][T20782] should_fail_ex.cold+0x5/0xa [ 707.945989][T20782] should_failslab+0xc2/0x120 [ 707.946014][T20782] __kmalloc_noprof+0xfc/0x820 [ 707.946034][T20782] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 707.946057][T20782] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 707.946086][T20782] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 707.946114][T20782] genl_family_rcv_msg_doit+0xc7/0x300 [ 707.946138][T20782] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 707.946168][T20782] ? bpf_lsm_capable+0x9/0x10 [ 707.946186][T20782] ? security_capable+0x80/0x260 [ 707.946215][T20782] genl_rcv_msg+0x560/0x800 [ 707.946239][T20782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.946266][T20782] ? __pfx_macsec_del_rxsc+0x10/0x10 [ 707.946289][T20782] ? __lock_acquire+0x49f/0x1a40 [ 707.946316][T20782] netlink_rcv_skb+0x159/0x420 [ 707.946334][T20782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.946356][T20782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.946383][T20782] ? netlink_deliver_tap+0x1ae/0xcc0 [ 707.946415][T20782] genl_rcv+0x28/0x40 [ 707.946433][T20782] netlink_unicast+0x585/0x850 [ 707.946455][T20782] ? __pfx_netlink_unicast+0x10/0x10 [ 707.946473][T20782] ? security_netlink_send+0x42/0x210 [ 707.946496][T20782] ? __sanitizer_cov_trace_pc+0x39/0x70 [ 707.946522][T20782] netlink_sendmsg+0x8b0/0xda0 [ 707.946545][T20782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.946566][T20782] ? selinux_socket_sendmsg+0x198/0x2f0 [ 707.946596][T20782] ____sys_sendmsg+0xa4d/0xbe0 [ 707.946622][T20782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.946642][T20782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.946681][T20782] ___sys_sendmsg+0x190/0x1e0 [ 707.946710][T20782] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.946737][T20782] ? __lock_acquire+0x49f/0x1a40 [ 707.946758][T20782] ? get_pid_task+0x106/0x250 [ 707.946804][T20782] __sys_sendmsg+0x160/0x210 [ 707.946827][T20782] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.946863][T20782] do_syscall_64+0x115/0x870 [ 707.946884][T20782] ? clear_bhb_loop+0x40/0x90 [ 707.946907][T20782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.946926][T20782] RIP: 0033:0x7f59e839e019 [ 707.946941][T20782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.946959][T20782] RSP: 002b:00007f59e91e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.946976][T20782] RAX: ffffffffffffffda RBX: 00007f59e8625fa0 RCX: 00007f59e839e019 [ 707.946988][T20782] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 707.946999][T20782] RBP: 00007f59e91e2090 R08: 0000000000000000 R09: 0000000000000000 [ 707.947009][T20782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.947019][T20782] R13: 00007f59e8626038 R14: 00007f59e8625fa0 R15: 00007fff58d5ce68 [ 707.947044][T20782] [ 708.287599][ T30] audit: type=1400 audit(1785544088.659:5487): avc: denied { read write } for pid=20774 comm="syz.0.5012" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 708.311559][ T30] audit: type=1400 audit(1785544088.659:5488): avc: denied { open } for pid=20774 comm="syz.0.5012" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 708.447183][T20786] netlink: 'syz.1.5014': attribute type 10 has an invalid length. [ 708.455135][T20786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5014'. [ 708.673909][T20788] input: syz0 as /devices/virtual/input/input25 [ 708.716956][T20788] netlink: 'syz.1.5015': attribute type 10 has an invalid length. [ 708.767339][T20789] netlink: 'syz.1.5015': attribute type 10 has an invalid length. [ 708.771815][T20788] team0: Port device dummy0 added [ 708.802907][T20791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.837197][T20789] team0: Port device dummy0 removed [ 708.842626][T20791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.400856][T20802] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.5019'. [ 709.748347][ T30] audit: type=1326 audit(1785544090.149:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 709.796564][ T30] audit: type=1326 audit(1785544090.149:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 709.835400][T19791] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 709.849090][T20809] Mass Storage Function, version: 2009/09/11 [ 709.855695][T20809] LUN: removable file: (no medium) [ 710.211293][ T30] audit: type=1326 audit(1785544090.179:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 710.565096][ T30] audit: type=1326 audit(1785544090.179:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 710.591754][T19791] usb 2-1: device descriptor read/64, error -71 [ 710.670250][ T30] audit: type=1326 audit(1785544090.179:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 710.864698][T20819] wg1: entered promiscuous mode [ 710.869787][T20819] wg1: entered allmulticast mode [ 711.613051][ T30] audit: type=1326 audit(1785544090.179:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 711.655401][T19791] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 711.664693][ T30] audit: type=1326 audit(1785544090.179:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 711.692827][ T30] audit: type=1326 audit(1785544090.179:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.2.5021" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 711.795298][T19791] usb 2-1: device descriptor read/64, error -71 [ 711.859197][T20824] netlink: 'syz.0.5025': attribute type 10 has an invalid length. [ 711.867352][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5025'. [ 712.084468][T19791] usb usb2-port1: attempt power cycle [ 712.797665][T20844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.825752][T20844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.022152][T20849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5031'. [ 713.031375][T20849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5031'. [ 713.895672][T20851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5032'. [ 713.941158][T20851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5032'. [ 713.950327][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 713.950347][ T30] audit: type=1400 audit(1785544094.279:5559): avc: denied { setopt } for pid=20850 comm="syz.2.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 714.355671][T20870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.381313][T20870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.560889][T20878] Invalid ELF header magic: != ELF [ 715.267470][T20883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5042'. [ 715.326839][T20887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5044'. [ 715.409318][T20888] netlink: 'syz.1.5042': attribute type 10 has an invalid length. [ 715.417423][T20888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5042'. [ 715.852082][T20894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.942808][T20894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.440043][T20898] smpboot: CPU 1 is now offline [ 716.482563][T20899] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 716.621478][T20906] gadgetfs: bound to dummy_udc driver [ 716.953351][ T5712] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 716.972075][ C1] gadgetfs: connected [ 716.979043][ T5712] gadgetfs: disconnected [ 717.080130][T20924] Invalid ELF header magic: != ELF [ 717.147017][ C1] gadgetfs: connected [ 717.160865][ T5712] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 717.194761][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5055'. [ 717.265485][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 717.407953][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.443642][T20909] gadgetfs: suspended from state 3 [ 717.446777][ T5712] usb 2-1: can't set config #1, error -71 [ 717.455117][T20909] gadgetfs: disconnected [ 717.509006][ T5712] usb 2-1: USB disconnect, device number 53 [ 717.632939][ T30] audit: type=1400 audit(1785544098.029:5560): avc: denied { accept } for pid=20933 comm="syz.3.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 717.831691][T20940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.854602][T20940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.461348][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5066'. [ 718.629849][T20957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5067'. [ 718.706197][ T5712] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 718.879022][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.890577][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.901077][ T5712] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 718.914019][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.392369][ T5712] usb 2-1: config 0 descriptor?? [ 719.418534][T20973] xt_HMARK: proto mask must be zero with L3 mode [ 719.915299][T19791] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 720.055616][ T5712] usb 2-1: language id specifier not provided by device, defaulting to English [ 720.086514][T19791] usb 5-1: Using ep0 maxpacket: 8 [ 720.113522][T19791] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 720.141397][T19791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.168436][T19791] usb 5-1: Product: syz [ 720.183074][T19791] usb 5-1: Manufacturer: syz [ 720.200205][T19791] usb 5-1: SerialNumber: syz [ 720.219934][T19791] usb 5-1: config 0 descriptor?? [ 720.238024][T19791] gspca_main: se401-2.14.0 probing 047d:5003 [ 720.623003][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5079'. [ 720.640321][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.660701][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.670828][ T5712] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71 [ 720.692189][ T5712] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 720.713803][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.719578][ T5712] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 720.763761][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.771415][ T5712] usb 2-1: USB disconnect, device number 54 [ 720.816785][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.839327][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.981477][ T30] audit: type=1400 audit(1785544101.379:5561): avc: denied { connect } for pid=20998 comm="syz.3.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 721.009607][ T30] audit: type=1400 audit(1785544101.379:5562): avc: denied { write } for pid=20998 comm="syz.3.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 721.119262][T21013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.130946][T21013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.141465][ T30] audit: type=1400 audit(1785544101.539:5563): avc: denied { bind } for pid=20998 comm="syz.3.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 721.151066][T21008] tipc: Failed to obtain node identity [ 721.172119][T21008] tipc: Enabling of bearer rejected, failed to enable media [ 721.201331][ T30] audit: type=1400 audit(1785544101.569:5564): avc: denied { nlmsg_read } for pid=21012 comm="syz.0.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 721.291940][T21015] vivid-003: disconnect [ 721.327133][T21015] Bluetooth: hci3: Frame reassembly failed (-84) [ 721.350275][ T6650] Bluetooth: hci3: Frame reassembly failed (-84) [ 721.497955][T19791] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 721.510861][T19791] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 721.676418][T21021] syzkaller0: entered promiscuous mode [ 721.699125][T21021] syzkaller0: entered allmulticast mode [ 721.930983][T21026] netlink: 'syz.4.5089': attribute type 10 has an invalid length. [ 721.939351][T21026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5089'. [ 723.321798][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5098'. [ 723.337505][ T4928] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 723.358919][T21015] vivid-003: reconnect [ 723.575690][ T30] audit: type=1107 audit(1785544103.919:5565): pid=21051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 724.165650][T21064] trusted_key: syz.3.5102 sent an empty control message without MSG_MORE. [ 724.367180][T21068] syzkaller0: entered promiscuous mode [ 724.397321][T21068] syzkaller0: entered allmulticast mode [ 724.656010][ T30] audit: type=1400 audit(1785544105.049:5566): avc: denied { watch } for pid=21072 comm="syz.2.5105" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 724.688504][ T30] audit: type=1400 audit(1785544105.059:5567): avc: denied { watch_sb watch_reads } for pid=21072 comm="syz.2.5105" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 724.905734][ T7078] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 725.025027][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5105'. [ 725.156317][ T7078] usb 2-1: Using ep0 maxpacket: 32 [ 725.170211][ T7078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.184637][T21093] netlink: 'syz.0.5109': attribute type 21 has an invalid length. [ 725.196973][ T7078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.230860][ T7078] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 725.258774][ T7078] usb 2-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 725.269426][ T7078] usb 2-1: Manufacturer: syz [ 725.337753][T21099] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5111'. [ 725.381606][ T7078] usb 2-1: config 0 descriptor?? [ 725.904331][ T7078] hid (null): invalid report_size 1120840238 [ 726.263936][ T7078] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0011/input/input26 [ 727.408025][ T7078] input: syz Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0011/input/input27 [ 728.228719][ T7078] uclogic 0003:5543:0042.0011: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.1-1/input0 [ 728.247226][ T7078] usb 2-1: USB disconnect, device number 55 [ 728.852385][T21118] fido_id[21118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 729.113697][T21133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.133714][T21133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.160366][ T30] audit: type=1400 audit(1785544109.559:5568): avc: denied { read } for pid=21134 comm="syz.3.5121" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 729.205179][T21133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.217925][T21133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.265339][ T7078] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 729.452762][ T7078] usb 2-1: config 2 descriptor has 1 excess byte, ignoring [ 729.462150][ T7078] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 729.490456][ T7078] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 729.500446][ T7078] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 729.517609][ T7078] usb 2-1: config 2 descriptor has 1 excess byte, ignoring [ 729.525012][ T7078] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 729.535662][ T7078] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 729.558535][ T7078] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 729.587302][ T7078] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 729.597512][ T7078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.615479][ T7078] usb 2-1: Product: syz [ 729.621224][ T7078] usb 2-1: Manufacturer: syz [ 729.629147][T21145] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21145 comm=syz.4.5123 [ 729.646896][ T7078] usb 2-1: SerialNumber: syz [ 729.679448][ T7078] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 729.699780][ T7078] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 729.724508][ T7078] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 729.867694][ T7078] usb 2-1: USB disconnect, device number 56 [ 729.904746][ T7078] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 729.930294][ T7078] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 729.943344][ T7078] ti_usb_3410_5052 2-1:2.0: device disconnected [ 731.371400][T21159] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5127'. [ 733.204388][T21142] ipip0: entered promiscuous mode [ 733.274409][T21142] ipip0: entered allmulticast mode [ 733.288855][T21169] nftables ruleset with unbound chain [ 733.518318][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 733.532577][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 733.942180][ T30] audit: type=1400 audit(1785544114.339:5569): avc: denied { create } for pid=21176 comm="syz.2.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 734.170248][T21182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.259417][T21182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.326110][T21182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.353765][T21182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.436527][T21182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.448402][T21186] netlink: 'syz.4.5136': attribute type 62 has an invalid length. [ 734.458785][T21182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.504358][T21188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.513605][T21188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.612222][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5138'. [ 735.539469][T21196] Invalid ELF header magic: != ELF [ 737.186599][T21198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.195897][T21198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.216950][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.227322][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.271331][T21203] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 737.300014][ T7085] usb 4-1: emi26_load_firmware - request_firmware() failed [ 737.314965][ T5740] usb 3-1: emi26_load_firmware - request_firmware() failed [ 737.350218][ T7085] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 737.361619][ T5740] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 737.378403][ T7085] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 737.389187][ T5740] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 737.412347][ T7085] usb 4-1: USB disconnect, device number 40 [ 737.424930][ T5740] usb 3-1: USB disconnect, device number 55 [ 737.439990][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.451373][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.889784][ T30] audit: type=1400 audit(1785544118.289:5570): avc: denied { associate } for pid=21212 comm="syz.2.5146" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 738.215703][ T5803] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 738.375156][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5154'. [ 738.390606][T21235] tipc: Started in network mode [ 738.396651][T21235] tipc: Node identity ea1ec8c8a1f9, cluster identity 4711 [ 738.404675][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.416135][T21235] tipc: Enabled bearer , priority 0 [ 738.424806][ T5803] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 738.434408][T21235] syzkaller0: entered promiscuous mode [ 738.440068][T21235] syzkaller0: entered allmulticast mode [ 738.446000][ T5803] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 738.466761][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.507594][ T5803] usb 2-1: config 0 descriptor?? [ 738.513864][T21235] tipc: Resetting bearer [ 738.545081][T21232] tipc: Resetting bearer [ 738.618190][T21232] tipc: Disabling bearer [ 738.724727][ T5803] usb 2-1: USB disconnect, device number 57 [ 739.991068][T21265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.005228][T21266] FAULT_INJECTION: forcing a failure. [ 740.005228][T21266] name failslab, interval 1, probability 0, space 0, times 0 [ 740.014289][T21265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.091489][T21266] CPU: 0 UID: 0 PID: 21266 Comm: syz.1.5162 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.091515][T21266] Tainted: [L]=SOFTLOCKUP [ 740.091519][T21266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 740.091526][T21266] Call Trace: [ 740.091530][T21266] [ 740.091534][T21266] dump_stack_lvl+0x100/0x190 [ 740.091553][T21266] should_fail_ex.cold+0x5/0xa [ 740.091567][T21266] should_failslab+0xc2/0x120 [ 740.091581][T21266] kmem_cache_alloc_noprof+0x91/0x6a0 [ 740.091594][T21266] ? stack_trace_save+0x8e/0xc0 [ 740.091605][T21266] ? alloc_empty_file+0x5b/0x1c0 [ 740.091621][T21266] alloc_empty_file+0x5b/0x1c0 [ 740.091635][T21266] path_openat+0xe7/0x4280 [ 740.091648][T21266] ? __kasan_slab_alloc+0x89/0x90 [ 740.091662][T21266] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 740.091673][T21266] ? do_getname+0x35/0x390 [ 740.091686][T21266] ? do_sys_openat2+0xc7/0x1e0 [ 740.091699][T21266] ? __x64_sys_openat+0x12d/0x210 [ 740.091711][T21266] ? do_syscall_64+0x115/0x870 [ 740.091723][T21266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.091738][T21266] ? __pfx_path_openat+0x10/0x10 [ 740.091754][T21266] do_file_open+0x20e/0x430 [ 740.091766][T21266] ? __pfx_do_file_open+0x10/0x10 [ 740.091787][T21266] ? alloc_fd+0x471/0x7a0 [ 740.091799][T21266] ? do_getname+0x191/0x390 [ 740.091814][T21266] do_sys_openat2+0x10f/0x1e0 [ 740.091828][T21266] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.091842][T21266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.091856][T21266] ? __fget_files+0x21f/0x3d0 [ 740.091869][T21266] __x64_sys_openat+0x12d/0x210 [ 740.091883][T21266] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.091897][T21266] ? ksys_write+0x1ac/0x250 [ 740.091917][T21266] do_syscall_64+0x115/0x870 [ 740.091929][T21266] ? clear_bhb_loop+0x40/0x90 [ 740.091942][T21266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.091953][T21266] RIP: 0033:0x7f59e835e84e [ 740.091962][T21266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 740.091973][T21266] RSP: 002b:00007f59e91e1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.091984][T21266] RAX: ffffffffffffffda RBX: 00007f59e91e26c0 RCX: 00007f59e835e84e [ 740.091991][T21266] RDX: 0000000000000002 RSI: 00007f59e91e1c00 RDI: ffffffffffffff9c [ 740.091998][T21266] RBP: 00007f59e91e2090 R08: 0000000000000000 R09: 0000000000000000 [ 740.092004][T21266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.092010][T21266] R13: 00007f59e8626038 R14: 00007f59e8625fa0 R15: 00007fff58d5ce68 [ 740.092024][T21266] [ 740.396461][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.402909][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.498897][T21280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.813031][T21281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.836148][T21286] tipc: Started in network mode [ 740.869911][T21286] tipc: Node identity 080211, cluster identity 4711 [ 740.939707][T21286] tipc: Enabled bearer , priority 0 [ 740.946846][T21280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.008913][T21281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.528205][T21291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 741.645571][T21293] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5169'. [ 741.701880][T21293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5169'. [ 741.718446][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.794858][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.835284][ T7085] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 741.935494][ T5712] tipc: Node number set to 134353152 [ 742.117532][ T7085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.135436][ T7078] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 742.372696][T21308] LUN: removable file: (no medium) [ 742.389942][T21307] FAULT_INJECTION: forcing a failure. [ 742.389942][T21307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.391742][ T30] audit: type=1400 audit(1785544122.769:5571): avc: denied { write } for pid=21302 comm="syz.4.5174" name="mass_storage.0" dev="configfs" ino=73913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 742.403166][T21307] CPU: 0 UID: 0 PID: 21307 Comm: syz.3.5175 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.403194][T21307] Tainted: [L]=SOFTLOCKUP [ 742.403200][T21307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 742.403210][T21307] Call Trace: [ 742.403216][T21307] [ 742.403222][T21307] dump_stack_lvl+0x100/0x190 [ 742.403247][T21307] should_fail_ex.cold+0x5/0xa [ 742.403268][T21307] _copy_to_user+0x32/0xd0 [ 742.403290][T21307] simple_read_from_buffer+0xcb/0x170 [ 742.403309][T21307] proc_fail_nth_read+0x1af/0x230 [ 742.403334][T21307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.403358][T21307] ? rw_verify_area+0xce/0x6d0 [ 742.403379][T21307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.403401][T21307] vfs_read+0x1e4/0xb40 [ 742.403427][T21307] ? __pfx_vfs_read+0x10/0x10 [ 742.403448][T21307] ? __fget_files+0x215/0x3d0 [ 742.403469][T21307] ? __fget_files+0x21f/0x3d0 [ 742.403491][T21307] ksys_read+0x12a/0x250 [ 742.403513][T21307] ? __pfx_ksys_read+0x10/0x10 [ 742.403536][T21307] ? trace_hardirqs_off+0x70/0x170 [ 742.403563][T21307] do_syscall_64+0x115/0x870 [ 742.403580][T21307] ? clear_bhb_loop+0x40/0x90 [ 742.403600][T21307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.403616][T21307] RIP: 0033:0x7f62b815e84e [ 742.403631][T21307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 742.403646][T21307] RSP: 002b:00007f62b8f8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.403662][T21307] RAX: ffffffffffffffda RBX: 00007f62b8f8e6c0 RCX: 00007f62b815e84e [ 742.403672][T21307] RDX: 000000000000000f RSI: 00007f62b8f8e0a0 RDI: 0000000000000006 [ 742.403681][T21307] RBP: 00007f62b8f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 742.403690][T21307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.403699][T21307] R13: 00007f62b8426128 R14: 00007f62b8426090 R15: 00007ffcc19b0d78 [ 742.403721][T21307] [ 742.486406][ T7085] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.953919][ T7078] usb 3-1: Using ep0 maxpacket: 32 [ 742.965004][ T7085] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 742.996141][ T7078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.026539][ T7085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.040692][ T7078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.040709][ T7085] usb 2-1: config 0 descriptor?? [ 744.246203][ T7078] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 744.247816][T19791] usb 2-1: USB disconnect, device number 58 [ 744.259957][ T7078] usb 3-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 744.505781][ T30] audit: type=1400 audit(1785544124.829:5572): avc: denied { setattr } for pid=21315 comm="syz.3.5178" name="RAWv6" dev="sockfs" ino=76264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 744.725056][T21317] can0: slcan on ttyS3. [ 744.886966][ T7078] usb 3-1: Manufacturer: syz [ 744.974140][ T7078] usb 3-1: config 0 descriptor?? [ 745.036004][ T7078] usb 3-1: can't set config #0, error -71 [ 745.068037][ T7078] usb 3-1: USB disconnect, device number 56 [ 745.168663][T21327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5179'. [ 745.462019][T21320] can0 (unregistered): slcan off ttyS3. [ 745.665516][ T5712] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 745.865825][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 745.908172][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.973957][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.021456][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.080614][ T5712] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 746.107245][T21328] comedi comedi3: pcl816: I/O base address not correctly aligned [ 746.120959][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.150061][ T5712] usb 2-1: Product: syz [ 746.177149][ T5712] usb 2-1: Manufacturer: syz [ 746.191276][ T30] audit: type=1400 audit(1785544126.589:5573): avc: denied { write } for pid=21326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.218396][ T5712] usb 2-1: SerialNumber: syz [ 746.235833][T21349] FAULT_INJECTION: forcing a failure. [ 746.235833][T21349] name failslab, interval 1, probability 0, space 0, times 0 [ 746.298147][ T5712] usb 2-1: config 0 descriptor?? [ 746.324848][T21332] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 746.338958][T21349] CPU: 0 UID: 0 PID: 21349 Comm: syz.0.5183 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.338986][T21349] Tainted: [L]=SOFTLOCKUP [ 746.338993][T21349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.339003][T21349] Call Trace: [ 746.339008][T21349] [ 746.339014][T21349] dump_stack_lvl+0x100/0x190 [ 746.339040][T21349] should_fail_ex.cold+0x5/0xa [ 746.339061][T21349] should_failslab+0xc2/0x120 [ 746.339084][T21349] __kmalloc_noprof+0xfc/0x820 [ 746.339103][T21349] ? __import_iovec+0x1d2/0x640 [ 746.339124][T21349] ? sock_kmalloc+0x111/0x170 [ 746.339151][T21349] sock_kmalloc+0x111/0x170 [ 746.339178][T21349] ____sys_sendmsg+0x569/0xbe0 [ 746.339206][T21349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.339234][T21349] ? __pfx__kstrtoull+0x10/0x10 [ 746.339256][T21349] ___sys_sendmsg+0x190/0x1e0 [ 746.339283][T21349] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.339321][T21349] ? find_held_lock+0x2b/0x80 [ 746.339351][T21349] __sys_sendmmsg+0x20c/0x440 [ 746.339377][T21349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 746.339396][T21349] ? ksys_write+0x190/0x250 [ 746.339440][T21349] ? fput+0x79/0x100 [ 746.339458][T21349] ? ksys_write+0x1ac/0x250 [ 746.339482][T21349] ? __pfx_ksys_write+0x10/0x10 [ 746.339512][T21349] __x64_sys_sendmmsg+0x9c/0x100 [ 746.339532][T21349] ? lockdep_hardirqs_on+0x78/0x100 [ 746.339551][T21349] do_syscall_64+0x115/0x870 [ 746.339570][T21349] ? clear_bhb_loop+0x40/0x90 [ 746.339591][T21349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.339615][T21349] RIP: 0033:0x7fbef419e019 [ 746.339630][T21349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.339647][T21349] RSP: 002b:00007fbef5014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 746.339663][T21349] RAX: ffffffffffffffda RBX: 00007fbef4425fa0 RCX: 00007fbef419e019 [ 746.339674][T21349] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 746.339684][T21349] RBP: 00007fbef5014090 R08: 0000000000000000 R09: 0000000000000000 [ 746.339694][T21349] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.339704][T21349] R13: 00007fbef4426038 R14: 00007fbef4425fa0 R15: 00007ffe2f3f45d8 [ 746.339727][T21349] [ 746.713382][ T30] audit: type=1326 audit(1785544127.109:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 746.719352][ T5712] rc_core: IR keymap rc-streamzap not found [ 746.740455][ T30] audit: type=1326 audit(1785544127.109:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 746.805276][ T30] audit: type=1326 audit(1785544127.149:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 746.848823][ T5712] Registered IR keymap rc-empty [ 746.916936][ T5712] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 746.971878][ T30] audit: type=1326 audit(1785544127.149:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 747.244359][ T5712] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 747.279667][ T30] audit: type=1326 audit(1785544127.149:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 747.333074][ T5712] usb 2-1: USB disconnect, device number 59 [ 747.356544][ T30] audit: type=1326 audit(1785544127.149:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 747.401340][ T30] audit: type=1326 audit(1785544127.149:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 747.510119][ T30] audit: type=1326 audit(1785544127.149:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21355 comm="syz.0.5185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef419e019 code=0x7ffc0000 [ 747.778224][T21370] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5188'. [ 749.296002][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5192'. [ 749.830574][T21389] netlink: 'syz.0.5192': attribute type 10 has an invalid length. [ 749.838645][T21389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5192'. [ 750.238190][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5194'. [ 751.261656][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 751.261674][ T30] audit: type=1400 audit(1785544131.649:5645): avc: denied { write } for pid=21375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.373832][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5197'. [ 751.665266][T21423] netlink: 'syz.3.5197': attribute type 10 has an invalid length. [ 751.674035][T21423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5197'. [ 751.783897][T19791] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 752.278379][T19791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 752.454333][T19791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 752.603874][T19791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.741093][T19791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 752.848892][ T30] audit: type=1400 audit(1785544133.219:5646): avc: denied { read write } for pid=14271 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.921653][T19791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 753.096181][T19791] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 753.289365][T19791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.319712][ T30] audit: type=1400 audit(1785544133.279:5647): avc: denied { open } for pid=14271 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.552389][T19791] usb 2-1: config 0 descriptor?? [ 753.585314][T21419] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 753.638550][T19791] hub 2-1:0.0: bad descriptor, ignoring hub [ 753.646418][ T30] audit: type=1400 audit(1785544133.289:5648): avc: denied { ioctl } for pid=14271 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.687585][T19791] hub 2-1:0.0: probe with driver hub failed with error -5 [ 753.752261][ T30] audit: type=1400 audit(1785544133.839:5649): avc: denied { search } for pid=21422 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.787227][T21427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5201'. [ 753.791071][ T30] audit: type=1400 audit(1785544133.839:5650): avc: denied { search } for pid=21422 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.800398][T21435] fuse: Unknown parameter '0xffffffffffffffff' [ 753.825164][T21427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5201'. [ 753.835064][ T30] audit: type=1400 audit(1785544133.839:5651): avc: denied { search } for pid=21422 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.933369][ T30] audit: type=1400 audit(1785544133.879:5652): avc: denied { getattr } for pid=21422 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=13851 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 753.978184][ T30] audit: type=1400 audit(1785544133.879:5653): avc: denied { write } for pid=21422 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.002289][ T30] audit: type=1400 audit(1785544133.939:5655): avc: denied { read } for pid=21426 comm="syz.2.5201" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 754.116230][ T5740] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 754.176862][T19791] usb 2-1: USB disconnect, device number 60 [ 754.272609][ T5740] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 754.365288][ T7078] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 754.463606][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.482824][ T5740] usb 3-1: config 0 descriptor?? [ 754.497351][ T5740] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 754.605603][ T7078] usb 4-1: Using ep0 maxpacket: 32 [ 754.618500][T21457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.629236][ T7078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.640649][ T7078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.655938][ T7078] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 754.666527][T21457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.674291][ T7078] usb 4-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 754.682484][ T7078] usb 4-1: Manufacturer: syz [ 754.695720][ T7078] usb 4-1: config 0 descriptor?? [ 754.897349][ T5740] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 755.143626][T21427] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 755.423171][ T7078] usbhid 4-1:0.0: can't add hid device: -71 [ 755.429255][ T7078] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 755.439983][ T7078] usb 4-1: USB disconnect, device number 41 [ 755.460448][ T5740] gspca_cpia1: usb_control_msg 01, error -71 [ 755.471175][ T5740] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 755.483277][ T5740] usb 3-1: USB disconnect, device number 57 [ 756.324490][T21485] tc_dump_action: action bad kind [ 756.753168][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 756.753194][ T30] audit: type=1400 audit(1785544136.709:5724): avc: denied { create } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.210820][ T30] audit: type=1400 audit(1785544136.709:5725): avc: denied { setopt } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.231624][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.255473][ T30] audit: type=1400 audit(1785544136.709:5726): avc: denied { read write } for pid=21478 comm="syz.1.5221" name="video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 757.256655][T21490] FAULT_INJECTION: forcing a failure. [ 757.256655][T21490] name failslab, interval 1, probability 0, space 0, times 0 [ 757.291924][ T30] audit: type=1400 audit(1785544136.709:5727): avc: denied { open } for pid=21478 comm="syz.1.5221" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 757.315814][ T30] audit: type=1400 audit(1785544136.719:5728): avc: denied { connect } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.320105][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.335672][ T30] audit: type=1400 audit(1785544136.719:5729): avc: denied { write } for pid=21478 comm="syz.1.5221" name="route" dev="proc" ino=4026534203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 757.379253][ T30] audit: type=1400 audit(1785544136.739:5730): avc: denied { bind } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.421299][ T30] audit: type=1400 audit(1785544136.739:5731): avc: denied { node_bind } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 757.437550][T21490] CPU: 0 UID: 0 PID: 21490 Comm: syz.4.5224 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.437578][T21490] Tainted: [L]=SOFTLOCKUP [ 757.437584][T21490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 757.437601][T21490] Call Trace: [ 757.437607][T21490] [ 757.437614][T21490] dump_stack_lvl+0x100/0x190 [ 757.437640][T21490] should_fail_ex.cold+0x5/0xa [ 757.437661][T21490] should_failslab+0xc2/0x120 [ 757.437681][T21490] __kmalloc_noprof+0xfc/0x820 [ 757.437699][T21490] ? rcu_is_watching+0x12/0xc0 [ 757.437722][T21490] ? tomoyo_realpath_from_path+0xb6/0x690 [ 757.437743][T21490] tomoyo_realpath_from_path+0xb6/0x690 [ 757.437763][T21490] tomoyo_path_number_perm+0x23c/0x580 [ 757.437784][T21490] ? tomoyo_path_number_perm+0x22e/0x580 [ 757.437807][T21490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 757.437851][T21490] ? find_held_lock+0x2b/0x80 [ 757.437865][T21490] ? __fget_files+0x215/0x3d0 [ 757.437881][T21490] ? hook_file_ioctl_common+0x140/0x440 [ 757.437897][T21490] ? __fget_files+0x215/0x3d0 [ 757.437916][T21490] ? __fget_files+0x21f/0x3d0 [ 757.437936][T21490] security_file_ioctl+0xd3/0x230 [ 757.437960][T21490] __x64_sys_ioctl+0xb7/0x210 [ 757.437984][T21490] do_syscall_64+0x115/0x870 [ 757.438001][T21490] ? clear_bhb_loop+0x40/0x90 [ 757.438020][T21490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.438037][T21490] RIP: 0033:0x7fc7c519e019 [ 757.438050][T21490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.438065][T21490] RSP: 002b:00007fc7c60a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.438081][T21490] RAX: ffffffffffffffda RBX: 00007fc7c5425fa0 RCX: 00007fc7c519e019 [ 757.438092][T21490] RDX: 0000200000000480 RSI: 00000000c02064a4 RDI: 0000000000000003 [ 757.438102][T21490] RBP: 00007fc7c60a1090 R08: 0000000000000000 R09: 0000000000000000 [ 757.438111][T21490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.438119][T21490] R13: 00007fc7c5426038 R14: 00007fc7c5425fa0 R15: 00007fff8609eeb8 [ 757.438141][T21490] [ 757.438149][T21490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 757.443792][ T30] audit: type=1400 audit(1785544136.739:5732): avc: denied { write } for pid=21478 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.459042][T21489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.471298][ T30] audit: type=1400 audit(1785544137.199:5733): avc: denied { connect } for pid=21479 comm="syz.3.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 757.524642][T21489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.565420][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5225'. [ 757.777459][ T7078] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 758.028814][ T7078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.039887][ T7078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.052926][ T7078] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 758.877899][ T7078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.087279][ T7078] usb 3-1: config 0 descriptor?? [ 759.185578][T21522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.212842][T21522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.367695][T19791] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 759.526281][T21527] Invalid ELF header magic: != ELF [ 759.827349][ T7078] hid_parser_main: 80 callbacks suppressed [ 759.827364][ T7078] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 759.840838][ T7078] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 759.848266][ T7078] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 759.855815][ T7078] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 759.863106][ T7078] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 759.868859][T19791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.872639][ T7078] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 759.892066][T19791] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 759.892105][T19791] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 759.892126][T19791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.034419][T21492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.044162][T21492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.109275][ T5740] usb 3-1: USB disconnect, device number 58 [ 760.440496][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5239'. [ 760.463712][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5239'. [ 760.465269][ T7078] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 760.631900][ T5740] usb 4-1: USB disconnect, device number 42 [ 761.592559][ T7078] usb 2-1: Using ep0 maxpacket: 8 [ 761.599337][ T7078] usb 2-1: unable to get BOS descriptor or descriptor too short [ 761.627050][ T7078] usb 2-1: config 31 has an invalid interface number: 152 but max is 0 [ 761.721927][ T7078] usb 2-1: config 31 has no interface number 0 [ 761.728727][ T7078] usb 2-1: config 31 interface 152 has no altsetting 0 [ 761.737700][ T7078] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=6b.29 [ 761.760611][ T7078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.782845][ T7078] usb 2-1: Product: syz [ 761.798883][ T7078] usb 2-1: Manufacturer: syz [ 762.265368][ T7078] usb 2-1: SerialNumber: syz [ 762.775670][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 762.775687][ T30] audit: type=1400 audit(1785544143.179:5765): avc: denied { append } for pid=21560 comm="syz.3.5244" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 762.875920][ T30] audit: type=1400 audit(1785544143.229:5766): avc: denied { connect } for pid=21564 comm="syz.2.5246" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 762.912436][T21538] IPVS: length: 4096 != 8 [ 762.960672][ T30] audit: type=1400 audit(1785544143.249:5767): avc: denied { unlink } for pid=21561 comm="syz.0.5245" name="#1c" dev="tmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 762.961422][ T7078] usb_ehset_test 2-1:31.152: probe with driver usb_ehset_test failed with error -32 [ 763.094487][T21572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5247'. [ 763.145427][T21572] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5247'. [ 763.164518][ T7078] usb 2-1: USB disconnect, device number 61 [ 763.212905][ T30] audit: type=1400 audit(1785544143.249:5768): avc: denied { mount } for pid=21561 comm="syz.0.5245" name="/" dev="overlay" ino=2826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 763.553059][ T30] audit: type=1400 audit(1785544143.309:5769): avc: denied { unmount } for pid=14828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 763.614675][ T30] audit: type=1400 audit(1785544143.349:5770): avc: denied { setopt } for pid=21564 comm="syz.2.5246" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 763.643398][ T30] audit: type=1400 audit(1785544143.489:5771): avc: denied { setopt } for pid=21571 comm="syz.0.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 763.712972][ T30] audit: type=1400 audit(1785544144.109:5772): avc: denied { mount } for pid=21581 comm="syz.0.5251" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 763.868254][ T7078] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 764.030466][ T7078] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 764.088740][ T7078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.343119][ T7078] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 764.363224][ T7078] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 764.389247][ T7078] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 764.390790][ T30] audit: type=1400 audit(1785544144.789:5773): avc: denied { firmware_load } for pid=7078 comm="kworker/1:19" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 764.454527][ T30] audit: type=1400 audit(1785544144.849:5774): avc: denied { create } for pid=21594 comm="syz.4.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.521692][ T6590] Bluetooth: hci3: Frame reassembly failed (-84) [ 764.533260][T21595] Bluetooth: hci3: Frame reassembly failed (-90) [ 764.938570][T21613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5258'. [ 764.940947][T21608] netlink: 'syz.0.5255': attribute type 1 has an invalid length. [ 765.006694][T21603] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 765.022712][T21613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.106718][T21610] syzkaller0: entered promiscuous mode [ 765.136682][T21610] syzkaller0: entered allmulticast mode [ 765.185545][T21610] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 765.660900][ T7085] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 766.068780][T21632] netlink: 'syz.4.5261': attribute type 10 has an invalid length. [ 766.076869][T21632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5261'. [ 766.310108][ T7085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.351531][ T7085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.389831][ T7085] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 766.462691][ T7085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.536807][ T4928] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 766.555006][T21638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5265'. [ 766.564910][ T7085] usb 2-1: config 0 descriptor?? [ 767.512335][ T7085] usb 2-1: language id specifier not provided by device, defaulting to English [ 767.759122][ T7085] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 767.785278][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 767.785294][ T30] audit: type=1326 audit(1785544148.189:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 767.785333][ T7085] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 767.797145][ T30] audit: type=1326 audit(1785544148.189:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 767.876569][T21658] input: syz0 as /devices/virtual/input/input29 [ 767.884924][ T30] audit: type=1326 audit(1785544148.189:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 767.930817][ T30] audit: type=1326 audit(1785544148.189:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47b555e84e code=0x7ffc0000 [ 767.958972][ T7085] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 767.967251][T21658] veth0: entered promiscuous mode [ 767.992780][T21656] syzkaller0: entered promiscuous mode [ 768.001310][ T7085] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 768.012328][T21656] syzkaller0: entered allmulticast mode [ 768.019940][ T7085] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 768.030089][ T30] audit: type=1326 audit(1785544148.189:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47b555e84e code=0x7ffc0000 [ 768.100829][ T30] audit: type=1326 audit(1785544148.189:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 768.107938][ T7085] usb 2-1: USB disconnect, device number 62 [ 768.200585][ T30] audit: type=1326 audit(1785544148.189:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 768.269830][ T30] audit: type=1326 audit(1785544148.189:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 768.394364][ T30] audit: type=1326 audit(1785544148.189:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 768.466915][ T30] audit: type=1326 audit(1785544148.189:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.2.5264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b559e019 code=0x7ffc0000 [ 768.593181][T21669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5273'. [ 768.684514][T21672] netlink: 'syz.4.5273': attribute type 10 has an invalid length. [ 768.692541][T21672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5273'. [ 768.935297][ T7085] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 769.092214][ T7085] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 769.180077][ T7085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.196700][ T7085] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 770.682320][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.701949][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.088107][T21708] syzkaller0: entered promiscuous mode [ 771.113557][T21708] syzkaller0: entered allmulticast mode [ 771.220376][T21701] syzkaller0: entered promiscuous mode [ 771.226155][T21701] syzkaller0: entered allmulticast mode [ 771.447658][T19791] kernel write not supported for file [eventfd] (pid: 19791 comm: kworker/0:0) [ 772.534127][T21738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.545540][T21738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.445275][ T5712] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 773.627011][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 773.636937][ T5712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 773.646660][ T5712] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 773.656813][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.680530][ T5712] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 773.707666][ T5712] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 773.895653][ T30] kauditd_printk_skb: 291 callbacks suppressed [ 773.895668][ T30] audit: type=1400 audit(1785544154.289:6160): avc: denied { mount } for pid=21744 comm="syz.3.5289" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 774.097382][T21745] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 774.118145][T21745] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 774.140112][T21745] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 774.700882][T21749] comedi: valid board names for 8255 driver are: [ 774.723624][T21749] 8255 [ 774.729947][T21749] comedi: valid board names for vmk80xx driver are: [ 774.736951][T21749] vmk80xx [ 774.740109][T21749] comedi: valid board names for usbduxsigma driver are: [ 774.747219][T21749] usbduxsigma [ 774.750766][T21749] comedi: valid board names for usbduxfast driver are: [ 774.758742][T21749] usbduxfast [ 774.762162][T21749] comedi: valid board names for usbdux driver are: [ 774.775655][T21749] usbdux [ 774.778653][T21749] comedi: valid board names for ni6501 driver are: [ 774.786645][T21749] ni6501 [ 774.789641][T21749] comedi: valid board names for dt9812 driver are: [ 774.796225][T21749] dt9812 [ 774.799294][T21749] comedi: valid board names for ni_labpc_cs driver are: [ 774.806317][T21749] ni_labpc_cs [ 774.809824][T21749] comedi: valid board names for ni_daq_700 driver are: [ 774.816766][T21749] ni_daq_700 [ 774.820205][T21749] comedi: valid board names for labpc_pci driver are: [ 774.827690][T21749] labpc_pci [ 774.831069][T21749] comedi: valid board names for adl_pci9118 driver are: [ 774.838186][T21749] pci9118dg [ 774.841517][T21749] pci9118hg [ 774.844765][T21749] pci9118hr [ 774.848047][T21749] comedi: valid board names for 8255_pci driver are: [ 774.854871][T21749] 8255_pci [ 774.858443][T21749] comedi: valid board names for s526 driver are: [ 774.864830][T21749] s526 [ 774.867756][T21749] comedi: valid board names for multiq3 driver are: [ 774.874417][T21749] multiq3 [ 774.877526][T21749] comedi: valid board names for pcmuio driver are: [ 774.884147][T21749] pcmuio48 [ 774.887353][T21749] pcmuio96 [ 774.890483][T21749] comedi: valid board names for pcmmio driver are: [ 774.897121][T21749] pcmmio [ 774.900094][T21749] comedi: valid board names for pcmda12 driver are: [ 774.906748][T21749] pcmda12 [ 774.909856][T21749] comedi: valid board names for pcmad driver are: [ 774.916319][T21749] pcmad12 [ 774.919362][T21749] pcmad16 [ 774.922470][T21749] comedi: valid board names for ni_labpc driver are: [ 774.929219][T21749] lab-pc-1200 [ 774.932656][T21749] lab-pc-1200ai [ 774.936263][T21749] lab-pc+ [ 774.940342][T21749] comedi: valid board names for atmio16 driver are: [ 774.947162][T21749] atmio16 [ 774.950245][T21749] atmio16d [ 774.953367][T21749] comedi: valid board names for ni_at_ao driver are: [ 774.961972][T21749] at-ao-6 [ 774.965057][T21749] at-ao-10 [ 774.968408][T21749] comedi: valid board names for ni_at_a2150 driver are: [ 774.984892][T21749] ni_at_a2150 [ 774.988349][T21749] comedi: valid board names for adq12b driver are: [ 774.994871][T21749] adq12b [ 774.997882][T21749] comedi: valid board names for mpc624 driver are: [ 775.004403][T21749] mpc624 [ 775.007404][T21749] comedi: valid board names for c6xdigio driver are: [ 775.014102][T21749] c6xdigio [ 775.017353][T21749] comedi: valid board names for aio_iiro_16 driver are: [ 775.024330][T21749] aio_iiro_16 [ 775.032746][T21749] comedi: valid board names for aio_aio12_8 driver are: [ 775.039759][T21749] aio_aio12_8 [ 775.043148][T21749] aio_ai12_8 [ 775.046483][T21749] aio_ao12_4 [ 775.049798][T21749] comedi: valid board names for fl512 driver are: [ 775.057080][T21749] fl512 [ 775.059961][T21749] comedi: valid board names for dmm32at driver are: [ 775.066616][T21749] dmm32at [ 775.069743][T21749] comedi: valid board names for dt282x driver are: [ 775.078269][T21749] dt2821 [ 775.081232][T21749] dt2821-f [ 775.084364][T21749] dt2821-g [ 775.087784][T21749] dt2823 [ 775.090748][T21749] dt2824-pgh [ 775.094042][T21749] dt2824-pgl [ 775.099624][T21749] dt2825 [ 775.102605][T21749] dt2827 [ 775.105797][T21749] dt2828 [ 775.108761][T21749] dt2829 [ 775.112355][T21749] dt21-ez [ 775.115451][T21749] dt23-ez [ 775.118486][T21749] dt24-ez [ 775.121518][T21749] dt24-ez-pgl [ 775.124906][T21749] comedi: valid board names for dt2817 driver are: [ 775.131459][T21749] dt2817 [ 775.134415][T21749] comedi: valid board names for dt2815 driver are: [ 775.141001][T21749] dt2815 [ 775.143959][T21749] comedi: valid board names for dt2814 driver are: [ 775.150519][T21749] dt2814 [ 775.153475][T21749] comedi: valid board names for dt2811 driver are: [ 775.160051][T21749] dt2811-pgh [ 775.163358][T21749] dt2811-pgl [ 775.167467][T21749] comedi: valid board names for dt2801 driver are: [ 775.174031][T21749] dt2801 [ 775.177033][T21749] comedi: valid board names for das6402 driver are: [ 775.183636][T21749] das6402-12 [ 775.188391][T21749] das6402-16 [ 775.191715][T21749] comedi: valid board names for das1800 driver are: [ 775.199124][T21749] das-1701st [ 775.202484][T21749] das-1701st-da [ 775.206116][T21749] das-1702st [ 775.209417][T21749] das-1702st-da [ 775.213004][T21749] das-1702hr [ 775.221771][T21749] das-1702hr-da [ 775.226942][T21749] das-1701ao [ 775.230265][T21749] das-1702ao [ 775.233561][T21749] das-1801st [ 775.237056][T21749] das-1801st-da [ 775.240733][T21749] das-1802st [ 775.244125][T21749] das-1802st-da [ 775.247878][T21749] das-1802hr [ 775.251273][T21749] das-1802hr-da [ 775.254935][T21749] das-1801hc [ 775.259025][T21749] das-1802hc [ 775.262619][T21749] das-1801ao [ 775.266008][T21749] das-1802ao [ 775.269422][T21749] comedi: valid board names for das800 driver are: [ 775.276210][T21749] das-800 [ 775.279364][T21749] cio-das800 [ 775.282756][T21749] das-801 [ 775.285866][T21749] cio-das801 [ 775.289199][T21749] das-802 [ 775.292293][T21749] cio-das802 [ 775.295747][T21749] cio-das802/16 [ 775.299342][T21749] comedi: valid board names for isa-das08 driver are: [ 775.306211][T21749] isa-das08 [ 775.309444][T21749] das08-pgm [ 775.312659][T21749] das08-pgh [ 775.316501][T21749] das08-pgl [ 775.319733][T21749] das08-aoh [ 775.322943][T21749] das08-aol [ 775.326268][T21749] das08-aom [ 775.329499][T21749] das08/jr-ao [ 775.332884][T21749] das08jr-16-ao [ 775.336548][T21749] pc104-das08 [ 775.339947][T21749] das08jr/16 [ 775.343241][T21749] comedi: valid board names for das16m1 driver are: [ 775.349899][T21749] das16m1 [ 775.352981][T21749] comedi: valid board names for dac02 driver are: [ 775.359491][T21749] dac02 [ 775.362366][T21749] comedi: valid board names for rti802 driver are: [ 775.371864][T21749] rti802 [ 775.374842][T21749] comedi: valid board names for rti800 driver are: [ 775.381536][T21749] rti800 [ 775.384517][T21749] rti815 [ 775.387501][T21749] comedi: valid board names for pcm3724 driver are: [ 775.394698][T21749] pcm3724 [ 775.397919][T21749] comedi: valid board names for pcl818 driver are: [ 775.404464][T21749] pcl818l [ 775.407786][T21749] pcl818h [ 775.410848][T21749] pcl818hd [ 775.415859][T21749] pcl818hg [ 775.419013][T21749] pcl818 [ 775.422055][T21749] pcl718 [ 775.425052][T21749] pcm3718 [ 775.429754][T21749] comedi: valid board names for pcl816 driver are: [ 775.436786][T21749] pcl816 [ 775.439761][T21749] pcl814b [ 775.442795][T21749] comedi: valid board names for pcl812 driver are: [ 775.449375][T21749] pcl812 [ 775.452335][T21749] pcl812pg [ 775.455492][T21749] acl8112pg [ 775.458722][T21749] acl8112dg [ 775.461958][T21749] acl8112hg [ 775.465168][T21749] a821pgl [ 775.468379][T21749] a821pglnda [ 775.471696][T21749] a821pgh [ 775.474730][T21749] a822pgl [ 775.478065][T21749] a822pgh [ 775.481129][T21749] a823pgl [ 775.484161][T21749] a823pgh [ 775.496525][T21749] pcl813 [ 775.512098][T21749] pcl813b [ 775.515258][T21749] acl8113 [ 775.518322][T21749] iso813 [ 775.521279][T21749] acl8216 [ 775.524319][T21749] a826pg [ 775.528952][T21749] comedi: valid board names for pcl730 driver are: [ 775.543640][T21749] pcl730 [ 775.546656][T21749] iso730 [ 775.549606][T21749] acl7130 [ 775.552645][T21749] pcm3730 [ 775.556307][T21749] pcl725 [ 775.559272][T21749] p8r8dio [ 775.562305][T21749] acl7225b [ 775.565446][T21749] p16r16dio [ 775.568673][T21749] pcl733 [ 775.571624][T21749] pcl734 [ 775.574568][T21749] opmm-1616-xt [ 775.578211][T21749] pearl-mm-p [ 775.581531][T21749] ir104-pbf [ 775.584737][T21749] comedi: valid board names for pcl726 driver are: [ 775.591282][T21749] pcl726 [ 775.594240][T21749] pcl727 [ 775.597226][T21749] pcl728 [ 775.600175][T21749] acl6126 [ 775.603216][T21749] acl6128 [ 775.606599][T21749] comedi: valid board names for pcl724 driver are: [ 775.613718][T21749] pcl724 [ 775.616830][T21749] pcl722 [ 775.619797][T21749] pcl731 [ 775.623323][T21749] acl7122 [ 775.630656][T21749] acl7124 [ 775.633876][T21749] pet48dio [ 775.638405][T21749] pcmio48 [ 775.641457][T21749] onyx-mm-dio [ 775.644858][T21749] comedi: valid board names for pcl711 driver are: [ 775.651486][T21749] pcl711 [ 775.654464][T21749] pcl711b [ 775.657644][T21749] acl8112hg [ 775.660869][T21749] acl8112dg [ 775.664099][T21749] comedi: valid board names for amplc_pc263 driver are: [ 775.671194][T21749] pc263 [ 775.674105][T21749] comedi: valid board names for amplc_pc236 driver are: [ 775.681768][T21749] pc36at [ 775.684750][T21749] comedi: valid board names for amplc_dio200 driver are: [ 775.691833][T21749] pc212e [ 775.694806][T21749] pc214e [ 775.697822][T21749] pc215e [ 775.700770][T21749] pc218e [ 775.703755][T21749] pc272e [ 775.706740][T21749] comedi: valid board names for comedi_parport driver are: [ 775.713972][T21749] comedi_parport [ 775.718280][T21749] comedi: valid board names for comedi_test driver are: [ 775.725423][T21749] comedi_test [ 775.728835][T21749] comedi: valid board names for comedi_bond driver are: [ 775.735855][T21749] comedi_bond [ 777.023409][T21662] veth0: left promiscuous mode [ 777.128418][T21759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.157176][T21759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.178212][T21745] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 777.206897][ T7066] usb 4-1: USB disconnect, device number 43 [ 777.225011][ T30] audit: type=1400 audit(1785544157.609:6161): avc: denied { unmount } for pid=12455 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 777.259782][ T7066] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 777.281990][ T7066] spcp8x5 4-1:1.0: device disconnected [ 777.290429][ T30] audit: type=1400 audit(1785544157.629:6162): avc: denied { mount } for pid=21760 comm="syz.1.5295" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 777.349875][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.374868][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.394967][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5298'. [ 777.418097][ T30] audit: type=1400 audit(1785544157.809:6163): avc: denied { ioctl } for pid=21762 comm="syz.0.5294" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 777.871420][T21765] input: syz1 as /devices/virtual/input/input30 [ 778.812179][T21794] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 778.880179][T21794] file system registered [ 779.034757][ T30] audit: type=1400 audit(1785544159.279:6164): avc: denied { write } for pid=21790 comm="syz.4.5302" name="functions" dev="configfs" ino=14371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 779.229560][ T30] audit: type=1400 audit(1785544159.629:6165): avc: denied { ioctl } for pid=21795 comm="syz.0.5303" path="socket:[78473]" dev="sockfs" ino=78473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 779.971625][ T30] audit: type=1400 audit(1785544160.369:6166): avc: denied { write } for pid=21803 comm="syz.1.5306" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 780.078194][ T30] audit: type=1400 audit(1785544160.369:6167): avc: denied { mmap_zero } for pid=21803 comm="syz.1.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 780.135035][T21806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.145179][T21806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.193945][ T30] audit: type=1400 audit(1785544160.399:6168): avc: denied { create } for pid=21803 comm="syz.1.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 780.272169][ T30] audit: type=1400 audit(1785544160.399:6169): avc: denied { bind } for pid=21803 comm="syz.1.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 780.387156][ T30] audit: type=1400 audit(1785544160.399:6170): avc: denied { getopt } for pid=21803 comm="syz.1.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 780.484287][ T30] audit: type=1400 audit(1785544160.699:6171): avc: denied { write } for pid=21807 comm="syz.3.5308" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 780.558754][ T30] audit: type=1400 audit(1785544160.699:6172): avc: denied { open } for pid=21807 comm="syz.3.5308" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 780.605027][ T30] audit: type=1400 audit(1785544160.709:6173): avc: denied { getopt } for pid=21807 comm="syz.3.5308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 780.723494][T21819] tipc: Enabled bearer , priority 0 [ 780.741506][T21819] syzkaller0: entered promiscuous mode [ 780.755861][T21819] syzkaller0: entered allmulticast mode [ 780.803448][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.823165][T21819] tipc: Resetting bearer [ 780.834664][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.845731][T21818] tipc: Resetting bearer [ 780.880331][T21818] tipc: Disabling bearer [ 783.741463][ T5740] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 783.850158][T21863] tipc: Enabled bearer , priority 0 [ 783.873492][T21863] syzkaller0: entered promiscuous mode [ 783.891930][T21863] syzkaller0: entered allmulticast mode [ 783.920701][T21869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.930254][ T5740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.932912][T21869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.944183][ T5740] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 783.974139][T21862] tipc: Resetting bearer [ 783.981920][ T5740] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 784.000204][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.009689][T21870] netlink: 'syz.1.5327': attribute type 10 has an invalid length. [ 784.021270][T21870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5327'. [ 784.022880][T21862] tipc: Disabling bearer [ 784.146770][ T5740] usb 4-1: config 0 descriptor?? [ 784.338575][ T5740] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 784.350859][ T5740] dvb-usb: bulk message failed: -22 (3/0) [ 784.373989][ T5740] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 784.386457][ T5740] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 784.398034][ T5740] usb 4-1: media controller created [ 784.406521][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 784.441001][ T5740] dvb-usb: bulk message failed: -22 (6/0) [ 784.447703][ T5740] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 784.457164][ T5740] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 784.533927][T21852] dvb-usb: bulk message failed: -22 (2/0) [ 784.546340][T21852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.556763][T21852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.569799][ T5740] dvb-usb: schedule remote query interval to 150 msecs. [ 784.579237][ T5740] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 784.600077][ T5740] usb 4-1: USB disconnect, device number 44 [ 785.089238][ T5740] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 786.151522][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 786.151534][ T30] audit: type=1400 audit(1785544166.549:6185): avc: denied { connect } for pid=21884 comm="syz.4.5331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 787.528483][T21911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5336'. [ 787.613270][T21914] tipc: Enabled bearer , priority 0 [ 787.630652][T21914] syzkaller0: entered promiscuous mode [ 787.638863][ T30] audit: type=1400 audit(1785544167.939:6186): avc: denied { firmware_load } for pid=21908 comm="syz.3.5338" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 787.665459][T21914] syzkaller0: entered allmulticast mode [ 787.851703][ T30] audit: type=1400 audit(1785544167.979:6187): avc: denied { audit_read } for pid=21910 comm="syz.4.5336" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 787.994595][ T30] audit: type=1400 audit(1785544168.319:6188): avc: denied { ioctl } for pid=21908 comm="syz.3.5338" path="socket:[79918]" dev="sockfs" ino=79918 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 788.031484][T21913] tipc: Resetting bearer [ 788.134039][T21921] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 788.144838][T21913] tipc: Disabling bearer [ 788.166663][T21921] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 788.219488][ T30] audit: type=1400 audit(1785544168.619:6189): avc: denied { unmount } for pid=15081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 788.256331][T21925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.281835][ T30] audit: type=1400 audit(1785544168.639:6190): avc: denied { create } for pid=21910 comm="syz.4.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.308189][T21923] comedi comedi3: pcl816: I/O base address not correctly aligned [ 788.322069][ T30] audit: type=1400 audit(1785544168.639:6191): avc: denied { setopt } for pid=21910 comm="syz.4.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.355868][ T30] audit: type=1400 audit(1785544168.649:6192): avc: denied { read } for pid=21924 comm="syz.3.5341" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 788.473506][ T30] audit: type=1400 audit(1785544168.649:6193): avc: denied { open } for pid=21924 comm="syz.3.5341" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 788.594232][ T30] audit: type=1400 audit(1785544168.949:6194): avc: denied { read write } for pid=21927 comm="syz.1.5342" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 788.804754][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5347'. [ 788.875547][ T5711] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 788.893954][T21944] 9p: Bad value for 'wfdno' [ 789.076449][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 789.088941][ T5711] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 789.101182][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.130382][ T5711] usb 4-1: config 0 descriptor?? [ 789.605209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 789.687757][ T5711] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 789.735372][ T5711] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 790.033529][ T5711] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 790.969838][T21964] netlink: zone id is out of range [ 790.978578][T21964] netlink: zone id is out of range [ 790.994477][T21964] netlink: zone id is out of range [ 790.999246][T21967] tipc: Enabled bearer , priority 0 [ 791.007430][T21967] syzkaller0: entered promiscuous mode [ 791.010759][T21964] netlink: zone id is out of range [ 791.012970][T21967] syzkaller0: entered allmulticast mode [ 791.031164][T21964] netlink: zone id is out of range [ 791.036539][T21964] netlink: zone id is out of range [ 791.072726][T21963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5352'. [ 791.135789][T21964] netlink: del zone limit has 4 unknown bytes [ 791.198597][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 791.198613][ T30] audit: type=1400 audit(1785544171.599:6201): avc: denied { ioctl } for pid=21971 comm="syz.1.5355" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 791.269414][T21965] tipc: Resetting bearer [ 791.320016][ T30] audit: type=1400 audit(1785544171.629:6202): avc: denied { set_context_mgr } for pid=21971 comm="syz.1.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 791.342051][ T30] audit: type=1400 audit(1785544171.639:6203): avc: denied { map } for pid=21971 comm="syz.1.5355" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 791.797298][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5360'. [ 792.110486][ T30] audit: type=1400 audit(1785544171.639:6204): avc: denied { call } for pid=21971 comm="syz.1.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 792.132791][ T30] audit: type=1400 audit(1785544171.639:6205): avc: denied { nlmsg_read } for pid=21971 comm="syz.1.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.201240][T21965] tipc: Disabling bearer [ 792.212318][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5354'. [ 792.269185][ T5803] tipc: Node number set to 411211926 [ 792.423231][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.468653][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.730179][ T30] audit: type=1400 audit(1785544174.129:6206): avc: denied { mount } for pid=22013 comm="syz.0.5366" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 793.849861][T22015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.003485][T22015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.248498][T22038] xt_hashlimit: size too large, truncated to 1048576 [ 796.369779][T22044] NILFS (nullb0): couldn't find nilfs on the device [ 796.455416][ T30] audit: type=1400 audit(1785544176.789:6207): avc: denied { read } for pid=22035 comm="syz.0.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 796.703893][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5376'. [ 797.193848][T22070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.203099][T22070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.213288][T22070] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 797.226453][ T30] audit: type=1400 audit(1785544177.629:6208): avc: denied { map } for pid=22064 comm="syz.0.5381" path="socket:[80183]" dev="sockfs" ino=80183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 797.745960][ T30] audit: type=1400 audit(1785544178.139:6209): avc: denied { cmd } for pid=22064 comm="iou-wrk-22070" path="socket:[80183]" dev="sockfs" ino=80183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 798.011292][ T30] audit: type=1400 audit(1785544178.409:6210): avc: denied { create } for pid=22074 comm="syz.2.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 798.069005][T22075] pim6reg: entered allmulticast mode [ 798.152758][T22079] overlayfs: failed to resolve './file1': -2 [ 798.275978][T22081] netlink: 'syz.2.5385': attribute type 5 has an invalid length. [ 798.596330][T22082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5384'. [ 798.879519][T22086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.888621][T22086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.806021][T22089] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 799.830946][ T30] audit: type=1400 audit(1785544180.229:6211): avc: denied { setattr } for pid=22047 comm="syz.1.5376" path="socket:[80283]" dev="sockfs" ino=80283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 799.855412][ T30] audit: type=1400 audit(1785544180.229:6212): avc: denied { read write } for pid=22047 comm="syz.1.5376" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 799.882670][ T30] audit: type=1400 audit(1785544180.229:6213): avc: denied { open } for pid=22047 comm="syz.1.5376" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 799.908203][ T30] audit: type=1400 audit(1785544180.239:6214): avc: denied { create } for pid=22047 comm="syz.1.5376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 799.932798][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5388'. [ 800.108086][T22093] netlink: 'syz.3.5388': attribute type 10 has an invalid length. [ 800.200605][T22093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5388'. [ 800.296907][T22100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.308598][T22100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.440134][ T30] audit: type=1400 audit(1785544180.839:6215): avc: denied { connect } for pid=22099 comm="syz.0.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 800.460926][ T30] audit: type=1400 audit(1785544180.839:6216): avc: denied { write } for pid=22099 comm="syz.0.5391" path="socket:[81255]" dev="sockfs" ino=81255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.554246][T22124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.564284][T22124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.632885][T22140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.642471][T22140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.652975][T22140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.661549][T22140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.986363][T22147] Cannot find set identified by id 0 to match [ 803.010003][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 803.010014][ T30] audit: type=1400 audit(1785544183.409:6218): avc: denied { write } for pid=22144 comm="syz.0.5404" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 803.098476][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.114918][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.146164][T22150] batadv_slave_1: entered promiscuous mode [ 803.401083][T22146] batadv_slave_1: left promiscuous mode [ 803.559266][ T30] audit: type=1400 audit(1785544183.959:6219): avc: denied { watch watch_reads } for pid=22153 comm="syz.0.5406" path="/565/file0" dev="tmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 804.170443][T22166] syzkaller0: entered promiscuous mode [ 804.807211][T22166] syzkaller0: entered allmulticast mode [ 806.096238][ T30] audit: type=1400 audit(1785544186.489:6220): avc: denied { create } for pid=22183 comm="syz.3.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 806.124328][ T30] audit: type=1400 audit(1785544186.489:6221): avc: denied { getopt } for pid=22183 comm="syz.3.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 806.441864][ T30] audit: type=1400 audit(1785544186.829:6222): avc: denied { write } for pid=22183 comm="syz.3.5414" name="c.1" dev="configfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 806.487282][ T30] audit: type=1400 audit(1785544186.829:6223): avc: denied { write } for pid=22183 comm="syz.3.5414" name="UDC" dev="configfs" ino=81541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 806.511261][ T30] audit: type=1400 audit(1785544186.829:6224): avc: denied { open } for pid=22183 comm="syz.3.5414" path="/567/mnt/usb_gadget/g1/UDC" dev="configfs" ino=81541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 806.538603][ T30] audit: type=1400 audit(1785544186.829:6225): avc: denied { create } for pid=22185 comm="syz.0.5415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 806.685711][ T7065] usb 1-1: USB disconnect, device number 4 [ 806.791843][T22199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5417'. [ 806.977760][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5418'. [ 806.989522][ T30] audit: type=1400 audit(1785544187.389:6226): avc: denied { getopt } for pid=22203 comm="syz.1.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 807.095055][T22202] Cannot find add_set index 0 as target [ 807.129770][ T30] audit: type=1400 audit(1785544187.529:6227): avc: denied { connect } for pid=22201 comm="syz.2.5418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.234194][T22210] 9p: Bad value for 'wfdno' [ 808.091731][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 808.091747][ T30] audit: type=1400 audit(1785544188.489:6230): avc: denied { write } for pid=22217 comm="syz.1.5425" name="cluster" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 808.178110][T22232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.187394][T22232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.214957][ T30] audit: type=1400 audit(1785544188.609:6231): avc: denied { append } for pid=22231 comm="syz.4.5427" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 808.675413][ T30] audit: type=1400 audit(1785544189.039:6232): avc: denied { name_bind } for pid=22234 comm="syz.2.5429" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 810.960376][T22254] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 810.987142][T22257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.997991][T22257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.014523][T22257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.039108][ T30] audit: type=1400 audit(1785544191.439:6233): avc: denied { mount } for pid=22253 comm="syz.2.5433" name="/" dev="rpc_pipefs" ino=81805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 811.092523][T22257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.106419][ T30] audit: type=1400 audit(1785544191.509:6234): avc: denied { unmount } for pid=14271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 811.200757][ T30] audit: type=1400 audit(1785544191.599:6235): avc: denied { append } for pid=22265 comm="syz.2.5438" name="v4l-subdev5" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 811.210305][T22268] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5438'. [ 811.433024][T22270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5439'. [ 811.765155][ T30] audit: type=1400 audit(1785544192.159:6236): avc: denied { create } for pid=22275 comm="syz.1.5442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 811.828119][ T30] audit: type=1400 audit(1785544192.229:6237): avc: denied { read } for pid=22278 comm="syz.1.5443" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 811.853407][ T30] audit: type=1400 audit(1785544192.229:6238): avc: denied { open } for pid=22278 comm="syz.1.5443" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 811.925266][ T5740] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 812.076527][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.087663][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.097437][ T5740] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 812.106615][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.117515][ T5740] usb 1-1: config 0 descriptor?? [ 812.534820][ T5740] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 812.545107][ T5740] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 812.552459][ T5740] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 812.560752][ T5740] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 812.568957][ T5740] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 812.577588][ T5740] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 812.739527][T22272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.751603][T22272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.822182][T16137] usb 1-1: USB disconnect, device number 5 [ 813.473699][ T30] audit: type=1400 audit(1785544193.869:6239): avc: denied { read write } for pid=22298 comm="syz.0.5449" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 813.498702][ T30] audit: type=1400 audit(1785544193.899:6240): avc: denied { open } for pid=22298 comm="syz.0.5449" path="/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 813.523441][ T30] audit: type=1400 audit(1785544193.899:6241): avc: denied { ioctl } for pid=22298 comm="syz.0.5449" path="/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 813.799428][ T30] audit: type=1400 audit(1785544194.199:6242): avc: denied { write } for pid=22304 comm="syz.0.5451" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 813.901030][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5452'. [ 813.912102][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5452'. [ 814.145396][ T6591] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.160645][ T6591] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.188115][ T6591] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.201055][T22311] syzkaller0: entered promiscuous mode [ 814.209899][T22311] syzkaller0: entered allmulticast mode [ 814.215754][ T30] audit: type=1400 audit(1785544194.609:6243): avc: denied { write } for pid=22313 comm="syz.3.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 814.240091][ T30] audit: type=1400 audit(1785544194.609:6244): avc: denied { read } for pid=22313 comm="syz.3.5454" lport=13475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 814.295494][ T3356] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.400526][T22317] 9p: Bad value for 'wfdno' [ 815.021048][ T30] audit: type=1400 audit(1785544195.419:6245): avc: denied { name_connect } for pid=22322 comm="syz.4.5457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 815.756694][ T30] audit: type=1400 audit(1785544195.529:6246): avc: denied { mount } for pid=22322 comm="syz.4.5457" name="/" dev="hugetlbfs" ino=81947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 815.815201][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5462'. [ 815.976148][ T30] audit: type=1400 audit(1785544196.369:6247): avc: denied { mount } for pid=22343 comm="syz.2.5463" name="/" dev="ramfs" ino=82058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 816.065432][ T7065] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 816.216702][T22354] syzkaller0: entered promiscuous mode [ 816.225491][T22354] syzkaller0: entered allmulticast mode [ 816.248276][ T7065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.272249][ T7065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.303892][T22355] 9p: Bad value for 'wfdno' [ 816.308817][ T7065] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 816.322346][ T7065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.386002][ T7065] usb 1-1: config 0 descriptor?? [ 816.689202][T22358] binder: 22357:22358 ioctl c0306201 0 returned -14 [ 816.750616][T22359] binder: 22357:22359 ioctl c0306201 0 returned -14 [ 816.773335][T22359] binder: 22357:22359 ioctl c0306201 0 returned -14 [ 816.841572][ T7065] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 816.867839][ T7065] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 816.893655][ T7065] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 816.918258][ T7065] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 816.944018][ T7065] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 816.986895][ T7065] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 817.035894][T22330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.070682][T22330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.400688][T22367] netlink: 'syz.1.5470': attribute type 10 has an invalid length. [ 817.431014][T22367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5470'. [ 817.458069][T22369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.514453][ T7065] usb 1-1: USB disconnect, device number 6 [ 817.569332][T22369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.997508][ T30] audit: type=1400 audit(1785544198.399:6248): avc: denied { getopt } for pid=22380 comm="syz.2.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.170865][T22389] FAULT_INJECTION: forcing a failure. [ 818.170865][T22389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.201557][T22389] CPU: 0 UID: 0 PID: 22389 Comm: syz.0.5477 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.201586][T22389] Tainted: [L]=SOFTLOCKUP [ 818.201592][T22389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 818.201602][T22389] Call Trace: [ 818.201608][T22389] [ 818.201615][T22389] dump_stack_lvl+0x100/0x190 [ 818.201642][T22389] should_fail_ex.cold+0x5/0xa [ 818.201665][T22389] _copy_from_user+0x2e/0xd0 [ 818.201692][T22389] move_addr_to_kernel+0x65/0x170 [ 818.201721][T22389] __sys_sendto+0x1b8/0x4e0 [ 818.201741][T22389] ? __pfx___sys_sendto+0x10/0x10 [ 818.201766][T22389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 818.201797][T22389] ? ksys_write+0x1ac/0x250 [ 818.201823][T22389] ? __pfx_ksys_write+0x10/0x10 [ 818.201852][T22389] __x64_sys_sendto+0xe0/0x1c0 [ 818.201870][T22389] ? do_syscall_64+0x90/0x870 [ 818.201889][T22389] ? lockdep_hardirqs_on+0x78/0x100 [ 818.201908][T22389] do_syscall_64+0x115/0x870 [ 818.201927][T22389] ? clear_bhb_loop+0x40/0x90 [ 818.201948][T22389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.201966][T22389] RIP: 0033:0x7fbef419e019 [ 818.201981][T22389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.201998][T22389] RSP: 002b:00007fbef5014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 818.202015][T22389] RAX: ffffffffffffffda RBX: 00007fbef4425fa0 RCX: 00007fbef419e019 [ 818.202027][T22389] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 818.202038][T22389] RBP: 00007fbef5014090 R08: 0000200000000240 R09: 000000000000001c [ 818.202048][T22389] R10: 00000000000001f4 R11: 0000000000000246 R12: 0000000000000001 [ 818.202059][T22389] R13: 00007fbef4426038 R14: 00007fbef4425fa0 R15: 00007ffe2f3f45d8 [ 818.202082][T22389] [ 818.393730][T22391] FAULT_INJECTION: forcing a failure. [ 818.393730][T22391] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 818.410051][T22391] CPU: 1 UID: 0 PID: 22391 Comm: syz.2.5478 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.410079][T22391] Tainted: [L]=SOFTLOCKUP [ 818.410086][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 818.410095][T22391] Call Trace: [ 818.410101][T22391] [ 818.410108][T22391] dump_stack_lvl+0x100/0x190 [ 818.410134][T22391] should_fail_ex.cold+0x5/0xa [ 818.410153][T22391] ? prepare_alloc_pages+0x16d/0x5f0 [ 818.410179][T22391] should_fail_alloc_page+0xeb/0x140 [ 818.410203][T22391] prepare_alloc_pages+0x1f0/0x5f0 [ 818.410227][T22391] ? look_up_lock_class+0x64/0x120 [ 818.410251][T22391] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 818.410270][T22391] ? ima_match_policy+0x8b8/0x2340 [ 818.410296][T22391] ? __lock_acquire+0x49f/0x1a40 [ 818.410322][T22391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 818.410345][T22391] ? __pfx___might_resched+0x10/0x10 [ 818.410366][T22391] ? find_held_lock+0x2b/0x80 [ 818.410381][T22391] ? process_measurement+0x4c8/0x2350 [ 818.410398][T22391] ? process_measurement+0x4c8/0x2350 [ 818.410416][T22391] ? down_write+0x146/0x1f0 [ 818.410440][T22391] ? up_write+0x2e5/0x5c0 [ 818.410464][T22391] ? vma_is_special_huge+0x23f/0x2d0 [ 818.410486][T22391] ? __pfx_vma_is_special_huge+0x10/0x10 [ 818.410509][T22391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 818.410532][T22391] ? policy_nodemask+0xed/0x4f0 [ 818.410559][T22391] alloc_pages_mpol+0x1fb/0x540 [ 818.410584][T22391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 818.410611][T22391] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 818.410641][T22391] alloc_pages_noprof+0x1a/0x160 [ 818.410667][T22391] __pmd_alloc+0x3b/0x950 [ 818.410695][T22391] __handle_mm_fault+0xa9c/0x2a00 [ 818.410727][T22391] ? mt_find+0x45e/0x8e0 [ 818.410750][T22391] ? __pfx___handle_mm_fault+0x10/0x10 [ 818.410773][T22391] ? __pfx_mt_find+0x10/0x10 [ 818.410807][T22391] ? find_vma+0xbf/0x140 [ 818.410835][T22391] ? __pfx_find_vma+0x10/0x10 [ 818.410857][T22391] handle_mm_fault+0x37b/0xa30 [ 818.410887][T22391] do_user_addr_fault+0x74c/0x12f0 [ 818.410921][T22391] exc_page_fault+0x6f/0xd0 [ 818.410942][T22391] asm_exc_page_fault+0x26/0x30 [ 818.410960][T22391] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 818.410987][T22391] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 [ 818.411004][T22391] RSP: 0018:ffffc90005207bd0 EFLAGS: 00050202 [ 818.411019][T22391] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 818.411030][T22391] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005207cf0 [ 818.411041][T22391] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000a40f9e [ 818.411051][T22391] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 818.411064][T22391] R13: ffffc90005207cf0 R14: 0000000000000000 R15: 0000000000000118 [ 818.411087][T22391] _copy_from_user+0x98/0xd0 [ 818.411112][T22391] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 818.411142][T22391] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 818.411178][T22391] do_sock_getsockopt+0x530/0x6e0 [ 818.411202][T22391] ? __lock_acquire+0x49f/0x1a40 [ 818.411226][T22391] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 818.411252][T22391] ? rcu_read_lock_any_held+0x6a/0xa0 [ 818.411276][T22391] ? find_held_lock+0x2b/0x80 [ 818.411299][T22391] ? __fget_files+0x21f/0x3d0 [ 818.411322][T22391] __sys_getsockopt+0x148/0x260 [ 818.411351][T22391] ? __x64_sys_getsockopt+0xbd/0x160 [ 818.411371][T22391] __x64_sys_getsockopt+0xbd/0x160 [ 818.411391][T22391] ? do_syscall_64+0x90/0x870 [ 818.411411][T22391] ? lockdep_hardirqs_on+0x78/0x100 [ 818.411431][T22391] do_syscall_64+0x115/0x870 [ 818.411450][T22391] ? clear_bhb_loop+0x40/0x90 [ 818.411470][T22391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.411488][T22391] RIP: 0033:0x7f47b559e019 [ 818.411503][T22391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.411519][T22391] RSP: 002b:00007f47b6492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 818.411535][T22391] RAX: ffffffffffffffda RBX: 00007f47b5825fa0 RCX: 00007f47b559e019 [ 818.411546][T22391] RDX: 0000000000000000 RSI: 0000000000000118 RDI: 0000000000000004 [ 818.411556][T22391] RBP: 00007f47b6492090 R08: 0000000000000000 R09: 0000000000000000 [ 818.411566][T22391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.411576][T22391] R13: 00007f47b5826038 R14: 00007f47b5825fa0 R15: 00007ffdec702568 [ 818.411600][T22391] [ 819.073857][ T30] audit: type=1400 audit(1785544199.469:6249): avc: denied { ioctl } for pid=22392 comm="syz.0.5479" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 819.440771][T22412] Invalid ELF header magic: != ELF [ 819.904489][ T30] audit: type=1400 audit(1785544200.299:6250): avc: denied { getopt } for pid=22414 comm="syz.3.5485" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 820.172015][T22424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.187782][ T30] audit: type=1400 audit(1785544200.589:6251): avc: denied { lock } for pid=22420 comm="syz.1.5488" path="socket:[82189]" dev="sockfs" ino=82189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 820.208149][T22424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.258825][T22424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.292507][T22424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.479988][T22431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5486'. [ 820.630815][ T30] audit: type=1400 audit(1785544201.019:6252): avc: denied { mounton } for pid=22436 comm="syz.1.5493" path="/412/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 820.700504][ T30] audit: type=1400 audit(1785544201.019:6253): avc: denied { search } for pid=22436 comm="syz.1.5493" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 820.741184][ T30] audit: type=1400 audit(1785544201.019:6254): avc: denied { write } for pid=22436 comm="syz.1.5493" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 820.786975][ T30] audit: type=1400 audit(1785544201.059:6255): avc: denied { open } for pid=22436 comm="syz.1.5493" path="/412/proc/fs/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 820.851544][ T30] audit: type=1400 audit(1785544201.189:6256): avc: denied { setattr } for pid=22436 comm="syz.1.5493" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 821.402231][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5499'. [ 821.460565][ T30] audit: type=1400 audit(1785544201.859:6257): avc: denied { read } for pid=22453 comm="syz.4.5500" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 821.515263][ T30] audit: type=1400 audit(1785544201.859:6258): avc: denied { open } for pid=22453 comm="syz.4.5500" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 821.685246][T16137] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 821.716773][T22457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5501'. [ 821.804640][T22458] netlink: 'syz.4.5501': attribute type 10 has an invalid length. [ 821.815403][T22458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5501'. [ 821.863825][T16137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.902563][T16137] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 821.918963][T16137] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.940099][T16137] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 821.951104][T16137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.963291][T16137] usb 1-1: Product: syz [ 821.969009][T16137] usb 1-1: Manufacturer: syz [ 821.974212][T16137] usb 1-1: SerialNumber: syz [ 822.251155][T22452] SELinux: syz.0.5499 (22452) wrote to user. This is no longer supported. [ 822.385984][T16137] usb 1-1: USB disconnect, device number 7 [ 822.672566][T22460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5502'. [ 823.039164][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.049753][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.062989][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.073261][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.099360][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5508'. [ 823.923284][T22484] FAULT_INJECTION: forcing a failure. [ 823.923284][T22484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.938883][T22484] CPU: 1 UID: 0 PID: 22484 Comm: syz.4.5511 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.938912][T22484] Tainted: [L]=SOFTLOCKUP [ 823.938918][T22484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 823.938929][T22484] Call Trace: [ 823.938936][T22484] [ 823.938943][T22484] dump_stack_lvl+0x100/0x190 [ 823.938970][T22484] should_fail_ex.cold+0x5/0xa [ 823.938997][T22484] _copy_from_user+0x2e/0xd0 [ 823.939022][T22484] copy_msghdr_from_user+0x9f/0x4c0 [ 823.939051][T22484] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 823.939083][T22484] ? __pfx__kstrtoull+0x10/0x10 [ 823.939106][T22484] ___sys_sendmsg+0x106/0x1e0 [ 823.939135][T22484] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.939172][T22484] ? find_held_lock+0x2b/0x80 [ 823.939204][T22484] __sys_sendmmsg+0x20c/0x440 [ 823.939229][T22484] ? __pfx___sys_sendmmsg+0x10/0x10 [ 823.939249][T22484] ? ksys_write+0x190/0x250 [ 823.939300][T22484] ? fput+0x79/0x100 [ 823.939320][T22484] ? ksys_write+0x1ac/0x250 [ 823.939345][T22484] ? __pfx_ksys_write+0x10/0x10 [ 823.939375][T22484] __x64_sys_sendmmsg+0x9c/0x100 [ 823.939397][T22484] ? lockdep_hardirqs_on+0x78/0x100 [ 823.939418][T22484] do_syscall_64+0x115/0x870 [ 823.939437][T22484] ? clear_bhb_loop+0x40/0x90 [ 823.939459][T22484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.939476][T22484] RIP: 0033:0x7fc7c519e019 [ 823.939491][T22484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.939507][T22484] RSP: 002b:00007fc7c60a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 823.939525][T22484] RAX: ffffffffffffffda RBX: 00007fc7c5425fa0 RCX: 00007fc7c519e019 [ 823.939537][T22484] RDX: 0000000000000001 RSI: 0000200000003d80 RDI: 0000000000000005 [ 823.939547][T22484] RBP: 00007fc7c60a1090 R08: 0000000000000000 R09: 0000000000000000 [ 823.939557][T22484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.939567][T22484] R13: 00007fc7c5426038 R14: 00007fc7c5425fa0 R15: 00007fff8609eeb8 [ 823.939592][T22484] [ 824.020547][T22487] random: crng reseeded on system resumption [ 824.098289][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 824.098304][ T30] audit: type=1400 audit(1785544204.419:6262): avc: denied { append } for pid=22485 comm="syz.3.5512" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 824.223715][ T30] audit: type=1400 audit(1785544204.419:6263): avc: denied { open } for pid=22485 comm="syz.3.5512" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 824.293563][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5514'. [ 824.424253][ T30] audit: type=1400 audit(1785544204.819:6264): avc: denied { getattr } for pid=22499 comm="syz.2.5516" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 824.482912][T22500] efs: cannot read volume header [ 824.507747][ T30] audit: type=1400 audit(1785544204.859:6265): avc: denied { mounton } for pid=22499 comm="syz.2.5516" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 824.533953][ T30] audit: type=1400 audit(1785544204.909:6266): avc: denied { mount } for pid=22499 comm="syz.2.5516" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 824.558452][ T30] audit: type=1400 audit(1785544204.909:6267): avc: denied { read } for pid=22499 comm="syz.2.5516" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 824.582687][ T30] audit: type=1400 audit(1785544204.909:6268): avc: denied { open } for pid=22499 comm="syz.2.5516" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 824.606679][ T7088] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 824.622761][ T30] audit: type=1400 audit(1785544204.909:6269): avc: denied { ioctl } for pid=22499 comm="syz.2.5516" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 824.724818][ T30] audit: type=1804 audit(1785544205.119:6270): pid=22505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.5516" name="/newroot/487/file0" dev="tmpfs" ino=2569 res=1 errno=0 [ 824.765420][ T7088] usb 1-1: Using ep0 maxpacket: 8 [ 824.776844][ T7088] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 824.783459][ T30] audit: type=1400 audit(1785544205.119:6271): avc: denied { watch } for pid=22504 comm="syz.4.5518" path="/411" dev="tmpfs" ino=2174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 824.785048][ T7088] usb 1-1: config 0 has no interface number 0 [ 824.874143][ T7088] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 824.887296][ T7088] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 824.902584][ T7088] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.914165][ T7088] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.927929][ T7088] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 824.981322][ T7088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.996327][ T7088] usb 1-1: config 0 descriptor?? [ 825.014972][ T7088] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 825.229502][ C0] ================================================================== [ 825.237587][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 825.245132][ C0] Read of size 1 at addr ffff888056d694e8 by task syz-executor/15081 [ 825.253188][ C0] [ 825.255507][ C0] CPU: 0 UID: 0 PID: 15081 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 825.255526][ C0] Tainted: [L]=SOFTLOCKUP [ 825.255531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 825.255547][ C0] Call Trace: [ 825.255557][ C0] [ 825.255565][ C0] dump_stack_lvl+0x100/0x190 [ 825.255590][ C0] print_report+0x13d/0x4b0 [ 825.255615][ C0] ? __virt_addr_valid+0x239/0x430 [ 825.255640][ C0] ? find_endpoint+0x2a3/0x2c0 [ 825.255660][ C0] kasan_report+0xdf/0x1c0 [ 825.255676][ C0] ? find_endpoint+0x2a3/0x2c0 [ 825.255691][ C0] find_endpoint+0x2a3/0x2c0 [ 825.255706][ C0] dummy_timer+0x500/0x36f0 [ 825.255724][ C0] ? do_raw_spin_lock+0x128/0x260 [ 825.255740][ C0] ? find_held_lock+0x2b/0x80 [ 825.255750][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 825.255765][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 825.255780][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 825.255793][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 825.255808][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 825.255824][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 825.255841][ C0] ? rcu_is_watching+0x12/0xc0 [ 825.255862][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 825.255873][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 825.255889][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 825.255914][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 825.255938][ C0] handle_softirqs+0x1ea/0x9b0 [ 825.255953][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 825.255968][ C0] ? _raw_spin_unlock+0x28/0x50 [ 825.255978][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 825.255989][ C0] __irq_exit_rcu+0x162/0x210 [ 825.256003][ C0] irq_exit_rcu+0x9/0x30 [ 825.256017][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 825.256030][ C0] [ 825.256033][ C0] [ 825.256037][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.256050][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 825.256064][ C0] Code: 05 3b 6d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 8d 3c 0f 0f 82 ac 02 00 00 8b 35 8e c1 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 6c 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 825.256076][ C0] RSP: 0018:ffffc900052c7490 EFLAGS: 00000206 [ 825.256087][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 825.256094][ C0] RDX: 0000000000000000 RSI: ffffffff8e181841 RDI: ffffffff8c402680 [ 825.256101][ C0] RBP: ffffffff8ebe8200 R08: 00000000ffffffff R09: 0000000000000007 [ 825.256108][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 825.256115][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.256126][ C0] ? unwind_next_frame+0x3be/0x2090 [ 825.256137][ C0] ? unwind_next_frame+0x3be/0x2090 [ 825.256148][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.256160][ C0] unwind_next_frame+0xd1/0x2090 [ 825.256170][ C0] ? unwind_next_frame+0xbd/0x2090 [ 825.256181][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 825.256195][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.256206][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.256218][ C0] arch_stack_walk+0x94/0xf0 [ 825.256236][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 825.256251][ C0] stack_trace_save+0x8e/0xc0 [ 825.256262][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 825.256274][ C0] ? __lock_acquire+0x49f/0x1a40 [ 825.256288][ C0] kasan_save_stack+0x30/0x50 [ 825.256300][ C0] ? kasan_save_stack+0x30/0x50 [ 825.256312][ C0] ? kasan_save_track+0x14/0x30 [ 825.256325][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 825.256338][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 825.256357][ C0] ? proc_reg_open+0x23f/0x5f0 [ 825.256370][ C0] ? do_dentry_open+0x6ab/0x14d0 [ 825.256380][ C0] ? vfs_open+0x82/0x3f0 [ 825.256392][ C0] ? path_openat+0x2873/0x4280 [ 825.256403][ C0] ? do_file_open+0x20e/0x430 [ 825.256413][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 825.256434][ C0] kasan_save_track+0x14/0x30 [ 825.256446][ C0] __kasan_slab_alloc+0x89/0x90 [ 825.256460][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 825.256473][ C0] ? proc_reg_open+0x23f/0x5f0 [ 825.256486][ C0] proc_reg_open+0x23f/0x5f0 [ 825.256499][ C0] do_dentry_open+0x6ab/0x14d0 [ 825.256509][ C0] ? __pfx_proc_reg_open+0x10/0x10 [ 825.256523][ C0] vfs_open+0x82/0x3f0 [ 825.256536][ C0] path_openat+0x2873/0x4280 [ 825.256550][ C0] ? __pfx_path_openat+0x10/0x10 [ 825.256563][ C0] do_file_open+0x20e/0x430 [ 825.256575][ C0] ? __pfx_do_file_open+0x10/0x10 [ 825.256591][ C0] ? alloc_fd+0x471/0x7a0 [ 825.256603][ C0] ? do_getname+0x191/0x390 [ 825.256617][ C0] do_sys_openat2+0x10f/0x1e0 [ 825.256633][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 825.256657][ C0] __x64_sys_openat+0x12d/0x210 [ 825.256679][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 825.256702][ C0] do_syscall_64+0x115/0x870 [ 825.256715][ C0] ? clear_bhb_loop+0x40/0x90 [ 825.256727][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.256738][ C0] RIP: 0033:0x7f59e835e84e [ 825.256749][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 825.256759][ C0] RSP: 002b:00007fff58d5af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 825.256769][ C0] RAX: ffffffffffffffda RBX: 00005555758fd500 RCX: 00007f59e835e84e [ 825.256776][ C0] RDX: 0000000000000000 RSI: 00007fff58d5b0a0 RDI: ffffffffffffff9c [ 825.256783][ C0] RBP: 00007fff58d5b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 825.256790][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff58d5c190 [ 825.256797][ C0] R13: 00007f59e843445c R14: 00005555758fd4e8 R15: 0000000000000006 [ 825.256806][ C0] [ 825.256811][ C0] [ 825.809496][ C0] Allocated by task 7708: [ 825.813801][ C0] kasan_save_stack+0x30/0x50 [ 825.818457][ C0] kasan_save_track+0x14/0x30 [ 825.823106][ C0] __kasan_kmalloc+0xaa/0xb0 [ 825.827681][ C0] __kmalloc_noprof+0x322/0x820 [ 825.832502][ C0] usb_copy_descriptors+0xcd/0x320 [ 825.837587][ C0] f_midi2_bind+0x1dad/0x2770 [ 825.842235][ C0] usb_add_function+0x219/0x890 [ 825.847073][ C0] configfs_composite_bind+0xd83/0x1960 [ 825.852601][ C0] gadget_bind_driver+0x28c/0xbf0 [ 825.857600][ C0] really_probe+0x241/0xa60 [ 825.862075][ C0] __driver_probe_device+0x20e/0x450 [ 825.867341][ C0] driver_probe_device+0x4a/0x140 [ 825.872337][ C0] __driver_attach+0x21f/0x5b0 [ 825.877071][ C0] bus_for_each_dev+0x13e/0x1d0 [ 825.881902][ C0] bus_add_driver+0x305/0x5b0 [ 825.886548][ C0] driver_register+0x1e2/0x360 [ 825.891283][ C0] usb_gadget_register_driver_owner+0x132/0x210 [ 825.897498][ C0] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 825.903101][ C0] configfs_write_iter+0x302/0x4e0 [ 825.908183][ C0] vfs_write+0x6ac/0x1050 [ 825.912514][ C0] ksys_write+0x12a/0x250 [ 825.916833][ C0] do_syscall_64+0x115/0x870 [ 825.921416][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.927293][ C0] [ 825.929590][ C0] Freed by task 22184: [ 825.933626][ C0] kasan_save_stack+0x30/0x50 [ 825.938291][ C0] kasan_save_track+0x14/0x30 [ 825.942940][ C0] kasan_save_free_info+0x3b/0x70 [ 825.947950][ C0] __kasan_slab_free+0x5f/0x80 [ 825.952686][ C0] kfree+0x22b/0x6c0 [ 825.956569][ C0] usb_free_all_descriptors+0x81/0x1a0 [ 825.962000][ C0] purge_configs_funcs+0x285/0x510 [ 825.967095][ C0] configfs_composite_unbind+0xae/0x210 [ 825.972614][ C0] gadget_unbind_driver+0x20c/0x4f0 [ 825.977790][ C0] device_remove+0xcb/0x180 [ 825.982276][ C0] device_release_driver_internal+0x44e/0x620 [ 825.988323][ C0] driver_detach+0xd8/0x1b0 [ 825.992811][ C0] bus_remove_driver+0x13b/0x2e0 [ 825.997717][ C0] driver_unregister+0x76/0xb0 [ 826.002455][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 826.008149][ C0] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 826.013764][ C0] configfs_write_iter+0x302/0x4e0 [ 826.018858][ C0] vfs_write+0x6ac/0x1050 [ 826.023180][ C0] ksys_write+0x12a/0x250 [ 826.027510][ C0] do_syscall_64+0x115/0x870 [ 826.032092][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.037963][ C0] [ 826.040262][ C0] The buggy address belongs to the object at ffff888056d69400 [ 826.040262][ C0] which belongs to the cache kmalloc-512 of size 512 [ 826.054284][ C0] The buggy address is located 232 bytes inside of [ 826.054284][ C0] freed 512-byte region [ffff888056d69400, ffff888056d69600) [ 826.068053][ C0] [ 826.070350][ C0] The buggy address belongs to the physical page: [ 826.076731][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056d69000 pfn:0x56d68 [ 826.086770][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 826.095249][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 826.103734][ C0] page_type: f5(slab) [ 826.107710][ C0] raw: 00fff00000000240 ffff88813fe23c80 ffffea00015b5210 ffffea0001579f10 [ 826.116266][ C0] raw: ffff888056d69000 000000080010000a 00000000f5000000 0000000000000000 [ 826.124823][ C0] head: 00fff00000000240 ffff88813fe23c80 ffffea00015b5210 ffffea0001579f10 [ 826.133471][ C0] head: ffff888056d69000 000000080010000a 00000000f5000000 0000000000000000 [ 826.142122][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 826.150787][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 826.159452][ C0] page dumped because: kasan: bad access detected [ 826.165846][ C0] page_owner tracks the page as allocated [ 826.171536][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7708, tgid 7705 (syz.1.611), ts 160724086605, free_ts 79553697779 [ 826.192696][ C0] post_alloc_hook+0xfd/0x120 [ 826.197356][ C0] get_page_from_freelist+0xf48/0x3530 [ 826.202796][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 826.208670][ C0] new_slab+0xa2/0x640 [ 826.212716][ C0] refill_objects+0xe3/0x410 [ 826.217289][ C0] __pcs_replace_empty_main+0x376/0x680 [ 826.222811][ C0] __kmalloc_cache_noprof+0x479/0x6c0 [ 826.228158][ C0] snd_mixer_oss_build_test+0x7a/0x380 [ 826.233600][ C0] snd_mixer_oss_build_test_all+0x5d0/0x6e0 [ 826.239466][ C0] snd_mixer_oss_build_input+0x139/0xd50 [ 826.245082][ C0] snd_mixer_oss_notify_handler+0x48d/0x990 [ 826.250980][ C0] snd_card_register+0x2af/0x760 [ 826.255893][ C0] f_midi2_bind+0x1198/0x2770 [ 826.260541][ C0] usb_add_function+0x219/0x890 [ 826.265369][ C0] configfs_composite_bind+0xd83/0x1960 [ 826.270897][ C0] gadget_bind_driver+0x28c/0xbf0 [ 826.275897][ C0] page last free pid 5625 tgid 5625 stack trace: [ 826.282204][ C0] __free_frozen_pages+0x79f/0x1090 [ 826.287390][ C0] qlist_free_all+0x47/0xf0 [ 826.291873][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 826.297306][ C0] __kasan_slab_alloc+0x69/0x90 [ 826.302135][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 826.307499][ C0] kernfs_iop_get_link+0x65/0x16a0 [ 826.312602][ C0] vfs_readlink+0x213/0x440 [ 826.317081][ C0] do_readlinkat+0x250/0x370 [ 826.321660][ C0] __x64_sys_readlink+0x78/0xc0 [ 826.326484][ C0] do_syscall_64+0x115/0x870 [ 826.331061][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.336931][ C0] [ 826.339250][ C0] Memory state around the buggy address: [ 826.344876][ C0] ffff888056d69380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 826.352926][ C0] ffff888056d69400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 826.360971][ C0] >ffff888056d69480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 826.369020][ C0] ^ [ 826.376453][ C0] ffff888056d69500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 826.384484][ C0] ffff888056d69580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 826.392513][ C0] ================================================================== [ 826.400542][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 826.407710][ C0] CPU: 0 UID: 0 PID: 15081 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 826.418791][ C0] Tainted: [L]=SOFTLOCKUP [ 826.423102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 826.433131][ C0] Call Trace: [ 826.436387][ C0] [ 826.439205][ C0] dump_stack_lvl+0x100/0x190 [ 826.443858][ C0] vpanic+0x552/0x970 [ 826.447813][ C0] ? __pfx_vpanic+0x10/0x10 [ 826.452287][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 826.457298][ C0] ? find_endpoint+0x2a3/0x2c0 [ 826.462050][ C0] panic+0xd1/0xe0 [ 826.465742][ C0] ? __pfx_panic+0x10/0x10 [ 826.470130][ C0] ? end_report.part.0+0x23/0x90 [ 826.475045][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.479799][ C0] ? end_report.part.0+0x23/0x90 [ 826.484731][ C0] ? check_panic_on_warn+0x1f/0x90 [ 826.489813][ C0] check_panic_on_warn.cold+0x19/0x34 [ 826.495156][ C0] end_report.part.0+0x3a/0x90 [ 826.499909][ C0] kasan_report.cold+0xe/0x18 [ 826.504561][ C0] ? find_endpoint+0x2a3/0x2c0 [ 826.509305][ C0] find_endpoint+0x2a3/0x2c0 [ 826.513885][ C0] dummy_timer+0x500/0x36f0 [ 826.518370][ C0] ? do_raw_spin_lock+0x128/0x260 [ 826.523384][ C0] ? find_held_lock+0x2b/0x80 [ 826.528032][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 826.533638][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 826.539255][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 826.545033][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 826.550641][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 826.556596][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 826.561509][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.566252][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 826.572038][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 826.576950][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 826.582133][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 826.587235][ C0] handle_softirqs+0x1ea/0x9b0 [ 826.591974][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 826.597234][ C0] ? _raw_spin_unlock+0x28/0x50 [ 826.602066][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 826.607669][ C0] __irq_exit_rcu+0x162/0x210 [ 826.612333][ C0] irq_exit_rcu+0x9/0x30 [ 826.616564][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 826.622180][ C0] [ 826.625084][ C0] [ 826.627988][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.633939][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 826.639120][ C0] Code: 05 3b 6d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 8d 3c 0f 0f 82 ac 02 00 00 8b 35 8e c1 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 6c 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 826.658706][ C0] RSP: 0018:ffffc900052c7490 EFLAGS: 00000206 [ 826.664745][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 826.672692][ C0] RDX: 0000000000000000 RSI: ffffffff8e181841 RDI: ffffffff8c402680 [ 826.680652][ C0] RBP: ffffffff8ebe8200 R08: 00000000ffffffff R09: 0000000000000007 [ 826.688606][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 826.696548][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.704496][ C0] ? unwind_next_frame+0x3be/0x2090 [ 826.709666][ C0] ? unwind_next_frame+0x3be/0x2090 [ 826.714846][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 826.720982][ C0] unwind_next_frame+0xd1/0x2090 [ 826.725904][ C0] ? unwind_next_frame+0xbd/0x2090 [ 826.730988][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 826.735832][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.741870][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 826.748013][ C0] arch_stack_walk+0x94/0xf0 [ 826.752583][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 826.757417][ C0] stack_trace_save+0x8e/0xc0 [ 826.762077][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 826.767420][ C0] ? __lock_acquire+0x49f/0x1a40 [ 826.772332][ C0] kasan_save_stack+0x30/0x50 [ 826.776984][ C0] ? kasan_save_stack+0x30/0x50 [ 826.781809][ C0] ? kasan_save_track+0x14/0x30 [ 826.786632][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 826.791630][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 826.797235][ C0] ? proc_reg_open+0x23f/0x5f0 [ 826.801970][ C0] ? do_dentry_open+0x6ab/0x14d0 [ 826.806878][ C0] ? vfs_open+0x82/0x3f0 [ 826.811103][ C0] ? path_openat+0x2873/0x4280 [ 826.815838][ C0] ? do_file_open+0x20e/0x430 [ 826.820497][ C0] ? do_sys_openat2+0x10f/0x1e0 [ 826.825336][ C0] kasan_save_track+0x14/0x30 [ 826.829990][ C0] __kasan_slab_alloc+0x89/0x90 [ 826.834815][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 826.840248][ C0] ? proc_reg_open+0x23f/0x5f0 [ 826.844994][ C0] proc_reg_open+0x23f/0x5f0 [ 826.849558][ C0] do_dentry_open+0x6ab/0x14d0 [ 826.854298][ C0] ? __pfx_proc_reg_open+0x10/0x10 [ 826.859385][ C0] vfs_open+0x82/0x3f0 [ 826.863428][ C0] path_openat+0x2873/0x4280 [ 826.867991][ C0] ? __pfx_path_openat+0x10/0x10 [ 826.872913][ C0] do_file_open+0x20e/0x430 [ 826.877387][ C0] ? __pfx_do_file_open+0x10/0x10 [ 826.882398][ C0] ? alloc_fd+0x471/0x7a0 [ 826.886698][ C0] ? do_getname+0x191/0x390 [ 826.891176][ C0] do_sys_openat2+0x10f/0x1e0 [ 826.895825][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.901000][ C0] __x64_sys_openat+0x12d/0x210 [ 826.905826][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.911175][ C0] do_syscall_64+0x115/0x870 [ 826.915748][ C0] ? clear_bhb_loop+0x40/0x90 [ 826.920397][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.926261][ C0] RIP: 0033:0x7f59e835e84e [ 826.930648][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 826.950226][ C0] RSP: 002b:00007fff58d5af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.958610][ C0] RAX: ffffffffffffffda RBX: 00005555758fd500 RCX: 00007f59e835e84e [ 826.966556][ C0] RDX: 0000000000000000 RSI: 00007fff58d5b0a0 RDI: ffffffffffffff9c [ 826.974499][ C0] RBP: 00007fff58d5b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 826.982440][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff58d5c190 [ 826.990382][ C0] R13: 00007f59e843445c R14: 00005555758fd4e8 R15: 0000000000000006 [ 826.998328][ C0] [ 827.001525][ C0] Kernel Offset: disabled [ 827.005823][ C0] Rebooting in 86400 seconds..