last executing test programs: 2m2.375547639s ago: executing program 2 (id=1657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) (fail_nth: 1) 2m2.135308564s ago: executing program 2 (id=1660): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0xe31, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = syz_open_procfs(0x0, 0x0) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r8) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) r15 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x180) r16 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x20, r18, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r19 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r19, 0xffffffffffffffff, 0x0) r20 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r20, r7, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf514, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x333, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x2, 0x0, r20, 0xc0107526, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb55, 0x1400, 0x0}}, 0x0) 2m1.527419569s ago: executing program 2 (id=1663): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e486dd49c416b90900000093291cfc5e8b99007f8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRES8=r3, @ANYRES64=r4], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x4b}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000480), 0x1, 0x464402) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', &(0x7f00000002c0)='f2fs\x00', 0x32494, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xfc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') 1m59.467256037s ago: executing program 2 (id=1669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x42, &(0x7f0000000380)=@generic={0x4, 0x0, 0x3a, "ddbf5ceb", "a7399140ed885214f0d1f8eb521810b668416c175480b255c37f054d6b1eeecb3d7fe80a55fcfb829303ccc7b1ad9fb1db2b724ba673928981e5"}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00006c4000/0x4000)=nil, 0x4000}}) io_setup(0x66, &(0x7f0000000400)=0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) r4 = eventfd(0xca6b) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000140)="30a20c685fe8975a0b9b1e74925a17cba0e5c7be3ef063211e5932387222f20e9a00f584aeeec11dae9074f9a557e48151fce8d169b1db0e4b00c60ff78e10491e077291c41029a28782d0c27fd559ba2c79bd9c53462a84103f6c78d6879074d26dafcddcba4e4875dfd601b6c8b27194a883670f83", 0x76, 0x3, 0x0, 0x0, r4}, &(0x7f0000000200)) io_setup(0xfab, &(0x7f0000000000)) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setuid(0xee01) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, r4}]) 1m55.330908637s ago: executing program 2 (id=1682): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x1) r2 = syz_open_pts(r1, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x5) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000300)="0200") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)="28fcb5a0cf", &(0x7f0000000400)="93777c9c42ddc6020000004ee97046b2070b590824123b45a5e6631d15c83d53589be3e08f76c348339409e0035e040b405ad4ef10076e18ab6a000000000000000000000000000090467c7a978050503afe1261357fe13824a1c6d3d8bd9c94f8", 0x7, r6}, 0x38) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r8, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x335c, 0x30}, &(0x7f0000000140)=0xc) 1m51.506010768s ago: executing program 2 (id=1684): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = epoll_create(0x50) epoll_pwait2(r0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180), &(0x7f0000000240)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000280)='jffs2\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) timerfd_create(0x9, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0xa, 0x3, 0x7) r3 = syz_clone(0xc4050100, &(0x7f0000002d80)="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", 0x1000, &(0x7f0000003d80), &(0x7f0000003dc0), &(0x7f0000003e00)="8ba5851146af356ef194d50763332181eb0b73c00cf99bd0f16d9005d56bd441c359d1e621ea04d9fa8a1e70d58db125a09abce54ec91356f28cc6d050ef92ad3b1fd823526f9729c4905294cbbee49abe97c377dc8bac6a8179f06b60b9d0acd8431614934bad94bd64b85306c65f2ef4b4fb189f02aab878f06e9f4b38d81420f3780d5db3eda173a6017d842da98deffb06ca07ab3540") sched_setscheduler(r3, 0x6, &(0x7f0000003ec0)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e26, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x63d}}}, 0xa0) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) sync() write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x40}, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m36.218232205s ago: executing program 32 (id=1684): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = epoll_create(0x50) epoll_pwait2(r0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180), &(0x7f0000000240)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000280)='jffs2\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) timerfd_create(0x9, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0xa, 0x3, 0x7) r3 = syz_clone(0xc4050100, &(0x7f0000002d80)="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", 0x1000, &(0x7f0000003d80), &(0x7f0000003dc0), &(0x7f0000003e00)="8ba5851146af356ef194d50763332181eb0b73c00cf99bd0f16d9005d56bd441c359d1e621ea04d9fa8a1e70d58db125a09abce54ec91356f28cc6d050ef92ad3b1fd823526f9729c4905294cbbee49abe97c377dc8bac6a8179f06b60b9d0acd8431614934bad94bd64b85306c65f2ef4b4fb189f02aab878f06e9f4b38d81420f3780d5db3eda173a6017d842da98deffb06ca07ab3540") sched_setscheduler(r3, 0x6, &(0x7f0000003ec0)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e26, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x63d}}}, 0xa0) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) sync() write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x40}, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.615017132s ago: executing program 0 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 6.944530173s ago: executing program 0 (id=1983): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0x8, 0x2, 0x0) 6.941206733s ago: executing program 4 (id=1984): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x810, r3, 0x108000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x4, 0x1, 0x5, 0x5360, 0x7}, 0x8, 0x5, 0xab2e, 0x0, 0x400001, 0x101, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.772600742s ago: executing program 4 (id=1989): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/comedi4\x00', 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x0, &(0x7f000010b880)}) 5.571502553s ago: executing program 4 (id=1990): open_tree(0xffffffffffffffff, 0x0, 0x9901) 5.012271657s ago: executing program 4 (id=1992): syz_open_dev$loop(0x0, 0xf01c, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000100009044300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e26, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2, 0x14, 0x1c, "fee8a2ab78fc9746d1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) fsopen(&(0x7f0000000440)='btrfs\x00', 0x0) 4.159305791s ago: executing program 0 (id=1997): write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) fstatfs(r0, 0x0) 4.062840687s ago: executing program 5 (id=1998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r0) 4.038382642s ago: executing program 3 (id=2000): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x25, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x81, 0x34}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r4, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b4", 0x10) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYRESHEX=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'security.', ':!\x00'}, &(0x7f0000000300), 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.943310109s ago: executing program 0 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.30359501s ago: executing program 5 (id=2004): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 2.743539863s ago: executing program 3 (id=2005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000040)="8c03fa92b5f384c8021b0a08ae03bcaa0db2fbc3"}) 2.612994011s ago: executing program 5 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/i2c_designware\x00', &(0x7f0000000500)=""/256, 0x100) 2.55760345s ago: executing program 3 (id=2008): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f00000004c0), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2.444246595s ago: executing program 1 (id=2009): pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x6, 0x10000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x8, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 2.442339209s ago: executing program 3 (id=2010): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.298778182s ago: executing program 1 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) write(r0, &(0x7f0000000400)='!*:*', 0x4) 1.948823224s ago: executing program 1 (id=2012): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.936226206s ago: executing program 0 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) close(r1) 1.750655028s ago: executing program 5 (id=2014): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x7, 0x1]}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000500)) 1.568160904s ago: executing program 1 (id=2015): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x4, 0x0, @loopback, @multicast1}}}}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) 1.554707247s ago: executing program 5 (id=2016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) 1.444882541s ago: executing program 4 (id=2017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 449.839116ms ago: executing program 3 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x0, 0x0) close(r0) 299.714309ms ago: executing program 4 (id=2019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) 273.511677ms ago: executing program 5 (id=2020): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'comedi_test\x00'}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00'}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000400)={0xc000002, 0x2, &(0x7f0000000500)=[0x1, 0x1]}) 255.529286ms ago: executing program 1 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001001000050000000500", @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) 131.271442ms ago: executing program 3 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa2203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="64f3460f001a66bad004ecc4c1f817070fc79e00600000440f20c0350f000000440f22c00f01c967459b0f23ac0fc7bd09000000c7442400cdd30000c744240210000000c7442406000000000f011c24", 0x50}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000955000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x40, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.299912ms ago: executing program 1 (id=2023): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) write(r0, &(0x7f0000000400)='!*:*', 0x4) 0s ago: executing program 0 (id=2024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='pch_udc\x00', 0x8) close(r2) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/pch_udc\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd) close(r4) close(r3) kernel console output (not intermixed with test programs): _sendmsg+0x160/0x210 [ 746.369946][T11678] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.369974][T11678] ? trace_hardirqs_off+0x70/0x170 [ 746.370004][T11678] do_syscall_64+0x123/0x790 [ 746.370033][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.370064][T11678] RIP: 0033:0x7f23aa59e159 [ 746.370078][T11678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.370095][T11678] RSP: 002b:00007f23ab447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.370115][T11678] RAX: ffffffffffffffda RBX: 00007f23aa825fa0 RCX: 00007f23aa59e159 [ 746.370127][T11678] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 746.370139][T11678] RBP: 00007f23ab447090 R08: 0000000000000000 R09: 0000000000000000 [ 746.370150][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.370162][T11678] R13: 00007f23aa826038 R14: 00007f23aa825fa0 R15: 00007ffcd5d51ef8 [ 746.370188][T11678] [ 746.488896][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 746.719652][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 746.727880][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 746.727915][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.727944][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 746.728135][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.820051][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 746.820123][ T10] usb 2-1: Product: syz [ 746.820173][ T10] usb 2-1: Manufacturer: syz [ 746.991958][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 746.991994][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 747.152561][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 747.152645][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 748.026397][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 748.180713][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 748.184528][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 748.227584][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 748.227820][T11691] fuse: Unknown parameter 'user_i00000000000000000000' [ 748.228029][ T10] usb 3-1: config 0 has no interface number 0 [ 748.288257][T11691] FAULT_INJECTION: forcing a failure. [ 748.288257][T11691] name failslab, interval 1, probability 0, space 0, times 0 [ 748.288712][T11691] CPU: 0 UID: 0 PID: 11691 Comm: syz.4.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.288746][T11691] Tainted: [L]=SOFTLOCKUP [ 748.288755][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 748.288770][T11691] Call Trace: [ 748.288778][T11691] [ 748.288787][T11691] dump_stack_lvl+0x100/0x190 [ 748.288820][T11691] should_fail_ex.cold+0x5/0xa [ 748.288848][T11691] should_failslab+0xc2/0x120 [ 748.288876][T11691] kmem_cache_alloc_noprof+0x92/0x6a0 [ 748.288899][T11691] ? anon_vma_clone+0x2b3/0xca0 [ 748.288930][T11691] anon_vma_clone+0x2b3/0xca0 [ 748.288962][T11691] __split_vma+0x750/0x1de0 [ 748.288995][T11691] ? __pfx___split_vma+0x10/0x10 [ 748.289037][T11691] vma_modify+0x1ef4/0x29b0 [ 748.289068][T11691] ? finish_task_switch.isra.0+0x260/0x10d0 [ 748.289101][T11691] ? __pfx_vma_modify+0x10/0x10 [ 748.289130][T11691] ? __schedule+0x126b/0x6920 [ 748.289169][T11691] vma_modify_flags_uffd+0x312/0x470 [ 748.289202][T11691] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 748.289245][T11691] ? __pfx_vma_can_userfault+0x10/0x10 [ 748.289280][T11691] ? __pfx___might_resched+0x10/0x10 [ 748.289305][T11691] userfaultfd_register_range+0x4be/0x770 [ 748.289345][T11691] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 748.289383][T11691] ? vma_can_userfault+0x124/0x3f0 [ 748.289417][T11691] ? __pfx_vma_can_userfault+0x10/0x10 [ 748.289450][T11691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.289479][T11691] userfaultfd_register+0x900/0xe40 [ 748.289520][T11691] ? __pfx_userfaultfd_register+0x10/0x10 [ 748.289553][T11691] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 748.289586][T11691] ? __schedule+0x126b/0x6920 [ 748.289609][T11691] ? tomoyo_path_number_perm+0x188/0x580 [ 748.289636][T11691] userfaultfd_ioctl+0x2e6e/0x61d0 [ 748.289661][T11691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.289688][T11691] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 748.289712][T11691] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.289735][T11691] ? irqentry_exit+0x24d/0xa10 [ 748.289763][T11691] ? lockdep_hardirqs_on+0x7d/0x110 [ 748.289791][T11691] ? irqentry_exit+0x24d/0xa10 [ 748.289831][T11691] ? security_file_ioctl+0x33/0x230 [ 748.289855][T11691] ? __sanitizer_cov_trace_pc+0x4b/0x70 [ 748.289879][T11691] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 748.289903][T11691] ? __x64_sys_ioctl+0x18e/0x210 [ 748.289922][T11691] __x64_sys_ioctl+0x18e/0x210 [ 748.289947][T11691] do_syscall_64+0x123/0x790 [ 748.289977][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.289999][T11691] RIP: 0033:0x7f89dbf9e159 [ 748.290017][T11691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.290051][T11691] RSP: 002b:00007f89dcdaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.290074][T11691] RAX: ffffffffffffffda RBX: 00007f89dc225fa0 RCX: 00007f89dbf9e159 [ 748.290089][T11691] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 748.290102][T11691] RBP: 00007f89dc03503b R08: 0000000000000000 R09: 0000000000000000 [ 748.290115][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.290128][T11691] R13: 00007f89dc226038 R14: 00007f89dc225fa0 R15: 00007ffe8a1849f8 [ 748.290155][T11691] [ 748.322703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.322740][ T10] usb 3-1: Product: syz [ 748.322823][ T10] usb 3-1: Manufacturer: syz [ 748.322907][ T10] usb 3-1: SerialNumber: syz [ 748.797925][ T10] usb 3-1: config 0 descriptor?? [ 748.825202][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 748.825231][ T10] usb 3-1: selecting invalid altsetting 1 [ 748.825246][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 748.826844][ T5734] usb 2-1: USB disconnect, device number 42 [ 748.872506][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 748.872727][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 748.872761][ T10] usb 3-1: media controller created [ 748.904646][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 748.929992][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.023626][T11686] netlink: 'syz.2.1537': attribute type 2 has an invalid length. [ 749.023646][T11686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1537'. [ 749.077822][T11699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.261130][ T5695] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 749.467873][ T5695] usb 1-1: not running at top speed; connect to a high speed hub [ 749.468082][ T5695] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 749.521776][ T5695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.606127][ T5695] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 749.606166][ T5695] usb 1-1: Product: syz [ 749.606218][ T5695] usb 1-1: Manufacturer: syz [ 750.042911][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 750.043200][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 750.105433][ T5695] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 750.105904][ T5695] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 750.224130][ T5695] usb 1-1: USB disconnect, device number 46 [ 751.265476][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1539'. [ 751.300838][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1539'. [ 751.318047][ T5695] usb 3-1: USB disconnect, device number 45 [ 751.496468][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 751.595686][ T5734] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 751.684744][ T44] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 751.690934][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 751.695904][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.695927][ T44] usb 4-1: Product: syz [ 751.695939][ T44] usb 4-1: Manufacturer: syz [ 751.695952][ T44] usb 4-1: SerialNumber: syz [ 751.746312][ T5734] usb 5-1: device descriptor read/64, error -71 [ 751.899867][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 752.016844][ T5734] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 752.166981][ T5734] usb 5-1: device descriptor read/64, error -71 [ 752.169937][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 752.291659][ T5734] usb usb5-port1: attempt power cycle [ 752.324166][ T44] r8152-cfgselector 4-1: USB disconnect, device number 49 [ 752.696364][ T5734] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 752.935965][T11725] nbd0: detected capacity change from 0 to 63 [ 752.938577][ T5617] block nbd0: Receive control failed (result -32) [ 752.959959][ T8368] block nbd0: Dead connection, failed to find a fallback [ 752.960029][ T8368] block nbd0: shutting down sockets [ 752.960126][ T8368] blk_print_req_error: 10 callbacks suppressed [ 752.960173][ T8368] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 752.960317][ T8368] buffer_io_error: 10 callbacks suppressed [ 752.960415][ T8368] Buffer I/O error on dev nbd0, logical block 0, async page read [ 753.048059][ T8368] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.048200][ T8368] Buffer I/O error on dev nbd0, logical block 1, async page read [ 753.048713][ T8368] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 753.048800][ T8368] Buffer I/O error on dev nbd0, logical block 2, async page read [ 753.048848][ T8368] Buffer I/O error on dev nbd0, logical block 3, async page read [ 753.051847][ T8368] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.051973][ T8368] Buffer I/O error on dev nbd0, logical block 0, async page read [ 753.166466][ T8368] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.166605][ T8368] Buffer I/O error on dev nbd0, logical block 1, async page read [ 753.167467][ T8368] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 753.167584][ T8368] Buffer I/O error on dev nbd0, logical block 2, async page read [ 753.167671][ T8368] Buffer I/O error on dev nbd0, logical block 3, async page read [ 753.169052][ T8368] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.169155][ T8368] Buffer I/O error on dev nbd0, logical block 0, async page read [ 753.169649][ T8368] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 753.169725][ T8368] Buffer I/O error on dev nbd0, logical block 1, async page read [ 753.170518][ T8368] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.172085][ T8368] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.304634][ T9023] ldm_validate_partition_table(): Disk read failed. [ 753.354230][ T9023] Dev nbd0: unable to read RDB block 0 [ 753.435247][ T9023] nbd0: unable to read partition table [ 753.457259][T11727] block nbd0: NBD_DISCONNECT [ 753.459252][T11727] block nbd0: Send disconnect failed -32 [ 753.897823][ T5734] usb 5-1: device descriptor read/8, error -71 [ 753.916880][ T9023] ldm_validate_partition_table(): Disk read failed. [ 753.933264][ T9023] Dev nbd0: unable to read RDB block 0 [ 753.973979][ T9023] nbd0: unable to read partition table [ 754.344826][T11740] fuse: Unknown parameter 'user_i00000000000000000000' [ 754.355577][T11740] FAULT_INJECTION: forcing a failure. [ 754.355577][T11740] name failslab, interval 1, probability 0, space 0, times 0 [ 754.355612][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.0.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.355641][T11740] Tainted: [L]=SOFTLOCKUP [ 754.355649][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 754.355669][T11740] Call Trace: [ 754.355676][T11740] [ 754.355685][T11740] dump_stack_lvl+0x100/0x190 [ 754.355721][T11740] should_fail_ex.cold+0x5/0xa [ 754.355751][T11740] should_failslab+0xc2/0x120 [ 754.355778][T11740] kmem_cache_alloc_noprof+0x92/0x6a0 [ 754.355802][T11740] ? anon_vma_clone+0x2b3/0xca0 [ 754.355833][T11740] anon_vma_clone+0x2b3/0xca0 [ 754.355866][T11740] __split_vma+0x750/0x1de0 [ 754.355899][T11740] ? __pfx___split_vma+0x10/0x10 [ 754.355943][T11740] vma_modify+0x1ef4/0x29b0 [ 754.355984][T11740] ? __pfx_vma_modify+0x10/0x10 [ 754.356014][T11740] ? __lock_acquire+0x5c0/0x1f40 [ 754.356050][T11740] vma_modify_flags_uffd+0x312/0x470 [ 754.356077][T11740] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 754.356115][T11740] ? __pfx_vma_can_userfault+0x10/0x10 [ 754.356148][T11740] ? __pfx___might_resched+0x10/0x10 [ 754.356171][T11740] userfaultfd_register_range+0x4be/0x770 [ 754.356210][T11740] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 754.356246][T11740] ? vma_can_userfault+0x124/0x3f0 [ 754.356279][T11740] ? __pfx_vma_can_userfault+0x10/0x10 [ 754.356311][T11740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.356339][T11740] userfaultfd_register+0x900/0xe40 [ 754.356378][T11740] ? __pfx_userfaultfd_register+0x10/0x10 [ 754.356421][T11740] ? tomoyo_path_number_perm+0x188/0x580 [ 754.356447][T11740] userfaultfd_ioctl+0x2e6e/0x61d0 [ 754.356472][T11740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.356497][T11740] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 754.356516][T11740] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 754.356534][T11740] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 754.356560][T11740] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 754.356586][T11740] ? __fget_files+0x34/0x3d0 [ 754.356621][T11740] ? selinux_file_ioctl+0x13b/0x290 [ 754.356641][T11740] ? selinux_file_ioctl+0xb6/0x290 [ 754.356668][T11740] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 754.356690][T11740] ? __x64_sys_ioctl+0x18e/0x210 [ 754.356708][T11740] __x64_sys_ioctl+0x18e/0x210 [ 754.356730][T11740] do_syscall_64+0x123/0x790 [ 754.356758][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.356778][T11740] RIP: 0033:0x7f23aa59e159 [ 754.356796][T11740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.356816][T11740] RSP: 002b:00007f23ab447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.356838][T11740] RAX: ffffffffffffffda RBX: 00007f23aa825fa0 RCX: 00007f23aa59e159 [ 754.356852][T11740] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 754.356865][T11740] RBP: 00007f23aa63503b R08: 0000000000000000 R09: 0000000000000000 [ 754.356877][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.356889][T11740] R13: 00007f23aa826038 R14: 00007f23aa825fa0 R15: 00007ffcd5d51ef8 [ 754.356916][T11740] [ 754.816934][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 755.816788][ T30] audit: type=1400 audit(1789414422.932:692): avc: denied { write } for pid=11754 comm="syz.2.1553" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 755.900591][T11756] jffs2: notice: (11756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 755.903366][ T30] audit: type=1400 audit(1789414423.012:693): avc: denied { write } for pid=11754 comm="syz.2.1553" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 755.903507][ T30] audit: type=1400 audit(1789414423.012:694): avc: denied { add_name } for pid=11754 comm="syz.2.1553" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 755.903697][ T30] audit: type=1400 audit(1789414423.012:695): avc: denied { create } for pid=11754 comm="syz.2.1553" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 755.987041][ T30] audit: type=1400 audit(1789414423.092:696): avc: denied { create } for pid=11758 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 756.019582][ T30] audit: type=1400 audit(1789414423.132:697): avc: denied { sys_admin } for pid=11758 comm="syz.0.1555" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 756.206783][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 756.358960][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 756.366415][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.366828][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.476850][ T10] usb 1-1: config 0 descriptor?? [ 756.759583][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 756.762685][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 756.763707][ T10] pwc: send_video_command error -32 [ 756.763988][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -32 [ 756.765951][ T10] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -32 [ 756.862832][ T10] usb 1-1: USB disconnect, device number 47 [ 757.921554][T11775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1558'. [ 759.103905][T11788] fuse: Unknown parameter 'user_id00000000000000000000' [ 759.106567][T11788] FAULT_INJECTION: forcing a failure. [ 759.106567][T11788] name failslab, interval 1, probability 0, space 0, times 0 [ 759.106597][T11788] CPU: 0 UID: 0 PID: 11788 Comm: syz.3.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.106628][T11788] Tainted: [L]=SOFTLOCKUP [ 759.106638][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 759.106649][T11788] Call Trace: [ 759.106656][T11788] [ 759.106664][T11788] dump_stack_lvl+0x100/0x190 [ 759.106695][T11788] should_fail_ex.cold+0x5/0xa [ 759.106719][T11788] should_failslab+0xc2/0x120 [ 759.106743][T11788] kmem_cache_alloc_noprof+0x92/0x6a0 [ 759.106763][T11788] ? mas_preallocate+0xc22/0xee0 [ 759.106791][T11788] mas_preallocate+0xc22/0xee0 [ 759.106817][T11788] ? __pfx_mas_preallocate+0x10/0x10 [ 759.106847][T11788] ? anon_vma_name+0x5a/0x250 [ 759.106873][T11788] __split_vma+0x2f8/0x1de0 [ 759.106901][T11788] ? __pfx___split_vma+0x10/0x10 [ 759.106937][T11788] vma_modify+0x1ef4/0x29b0 [ 759.106969][T11788] ? __pfx_vma_modify+0x10/0x10 [ 759.106994][T11788] ? __lock_acquire+0x5c0/0x1f40 [ 759.107024][T11788] vma_modify_flags_uffd+0x312/0x470 [ 759.107051][T11788] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 759.107086][T11788] ? __pfx_vma_can_userfault+0x10/0x10 [ 759.107113][T11788] ? __pfx___might_resched+0x10/0x10 [ 759.107135][T11788] userfaultfd_register_range+0x4be/0x770 [ 759.107167][T11788] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 759.107198][T11788] ? vma_can_userfault+0x124/0x3f0 [ 759.107226][T11788] ? __pfx_vma_can_userfault+0x10/0x10 [ 759.107252][T11788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.107276][T11788] userfaultfd_register+0x900/0xe40 [ 759.107309][T11788] ? __pfx_userfaultfd_register+0x10/0x10 [ 759.107345][T11788] ? tomoyo_path_number_perm+0x188/0x580 [ 759.107367][T11788] userfaultfd_ioctl+0x2e6e/0x61d0 [ 759.107389][T11788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.107411][T11788] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 759.107427][T11788] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 759.107443][T11788] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 759.107465][T11788] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 759.107487][T11788] ? __fget_files+0x34/0x3d0 [ 759.107517][T11788] ? selinux_file_ioctl+0x13b/0x290 [ 759.107535][T11788] ? selinux_file_ioctl+0xb6/0x290 [ 759.107556][T11788] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 759.107574][T11788] ? __x64_sys_ioctl+0x18e/0x210 [ 759.107589][T11788] __x64_sys_ioctl+0x18e/0x210 [ 759.107614][T11788] do_syscall_64+0x123/0x790 [ 759.107641][T11788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.107659][T11788] RIP: 0033:0x7f6dd879e159 [ 759.107675][T11788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.107693][T11788] RSP: 002b:00007f6dd69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.107714][T11788] RAX: ffffffffffffffda RBX: 00007f6dd8a25fa0 RCX: 00007f6dd879e159 [ 759.107726][T11788] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 759.107736][T11788] RBP: 00007f6dd883503b R08: 0000000000000000 R09: 0000000000000000 [ 759.107746][T11788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.107756][T11788] R13: 00007f6dd8a26038 R14: 00007f6dd8a25fa0 R15: 00007fff1d1ddbf8 [ 759.107779][T11788] [ 759.621984][T11797] Option 'dnserror' to dns_resolver key: bad/missing value [ 759.726418][ T30] audit: type=1400 audit(1789414426.832:698): avc: denied { read } for pid=11794 comm="syz.1.1565" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 759.726450][ T30] audit: type=1400 audit(1789414426.842:699): avc: denied { open } for pid=11794 comm="syz.1.1565" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 759.742058][ T30] audit: type=1400 audit(1789414426.852:700): avc: denied { ioctl } for pid=11794 comm="syz.1.1565" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x7511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 760.406372][T11797] alloc_netdev: Unable to allocate device with zero queues [ 760.551458][T11806] comedi comedi0: Minor 3 could not be opened [ 761.352754][T11813] FAULT_INJECTION: forcing a failure. [ 761.352754][T11813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.352780][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.0.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.352796][T11813] Tainted: [L]=SOFTLOCKUP [ 761.352800][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 761.352807][T11813] Call Trace: [ 761.352811][T11813] [ 761.352816][T11813] dump_stack_lvl+0x100/0x190 [ 761.352837][T11813] should_fail_ex.cold+0x5/0xa [ 761.352854][T11813] _copy_from_user+0x2e/0xd0 [ 761.352867][T11813] copy_msghdr_from_user+0x9f/0x4c0 [ 761.352886][T11813] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 761.352906][T11813] ? lock_acquire+0x1d1/0x380 [ 761.352918][T11813] ? get_pid_task+0x2a/0x250 [ 761.352935][T11813] ___sys_sendmsg+0x106/0x1e0 [ 761.352954][T11813] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.352972][T11813] ? get_pid_task+0x106/0x250 [ 761.352991][T11813] ? find_held_lock+0x2b/0x80 [ 761.353015][T11813] __sys_sendmsg+0x160/0x210 [ 761.353029][T11813] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.353050][T11813] do_syscall_64+0x123/0x790 [ 761.353067][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.353079][T11813] RIP: 0033:0x7f23aa59e159 [ 761.353089][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.353100][T11813] RSP: 002b:00007f23ab426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.353112][T11813] RAX: ffffffffffffffda RBX: 00007f23aa826090 RCX: 00007f23aa59e159 [ 761.353119][T11813] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 761.353126][T11813] RBP: 00007f23ab426090 R08: 0000000000000000 R09: 0000000000000000 [ 761.353132][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.353139][T11813] R13: 00007f23aa826128 R14: 00007f23aa826090 R15: 00007ffcd5d51ef8 [ 761.353153][T11813] [ 761.354987][T11817] comedi comedi0: Minor 3 could not be opened [ 762.667188][T11821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 763.954513][ T30] audit: type=1400 audit(1789414431.062:701): avc: denied { mount } for pid=11820 comm="syz.3.1570" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 764.095307][T11820] ima: policy update failed [ 764.100771][ T30] audit: type=1802 audit(1789414431.212:702): pid=11820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1570" res=0 errno=0 [ 764.187372][ T30] audit: type=1400 audit(1789414431.302:703): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 764.504123][T11835] comedi comedi0: Minor 3 could not be opened [ 765.306894][T11832] FAULT_INJECTION: forcing a failure. [ 765.306894][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 765.308133][T11832] CPU: 0 UID: 0 PID: 11832 Comm: syz.0.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.308164][T11832] Tainted: [L]=SOFTLOCKUP [ 765.308171][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 765.308183][T11832] Call Trace: [ 765.308190][T11832] [ 765.308198][T11832] dump_stack_lvl+0x100/0x190 [ 765.308230][T11832] should_fail_ex.cold+0x5/0xa [ 765.308257][T11832] should_failslab+0xc2/0x120 [ 765.308282][T11832] __kmalloc_noprof+0xfc/0x840 [ 765.308301][T11832] ? rcu_is_watching+0x13/0xc0 [ 765.308326][T11832] ? tomoyo_realpath_from_path+0xb6/0x690 [ 765.308355][T11832] tomoyo_realpath_from_path+0xb6/0x690 [ 765.308384][T11832] tomoyo_path_number_perm+0x23c/0x580 [ 765.308402][T11832] ? tomoyo_path_number_perm+0x22e/0x580 [ 765.308422][T11832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 765.308467][T11832] ? hook_file_ioctl_common+0x140/0x440 [ 765.308504][T11832] security_file_ioctl+0xd3/0x230 [ 765.308527][T11832] __x64_sys_ioctl+0xb7/0x210 [ 765.308550][T11832] do_syscall_64+0x123/0x790 [ 765.308578][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.308598][T11832] RIP: 0033:0x7f23aa59e159 [ 765.308614][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.308631][T11832] RSP: 002b:00007f23ab426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.308651][T11832] RAX: ffffffffffffffda RBX: 00007f23aa826090 RCX: 00007f23aa59e159 [ 765.308664][T11832] RDX: 0000200000000c00 RSI: 00000000c2604111 RDI: 0000000000000004 [ 765.308675][T11832] RBP: 00007f23ab426090 R08: 0000000000000000 R09: 0000000000000000 [ 765.308687][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.308698][T11832] R13: 00007f23aa826128 R14: 00007f23aa826090 R15: 00007ffcd5d51ef8 [ 765.308724][T11832] [ 765.308786][T11832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.798151][T11852] fuse: Unknown parameter 'user_id00000000000000000000' [ 766.799040][T11852] FAULT_INJECTION: forcing a failure. [ 766.799040][T11852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.799072][T11852] CPU: 0 UID: 0 PID: 11852 Comm: syz.0.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.799099][T11852] Tainted: [L]=SOFTLOCKUP [ 766.799107][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 766.799118][T11852] Call Trace: [ 766.799125][T11852] [ 766.799134][T11852] dump_stack_lvl+0x100/0x190 [ 766.799169][T11852] should_fail_ex.cold+0x5/0xa [ 766.799198][T11852] _copy_from_user+0x2e/0xd0 [ 766.799222][T11852] __sys_bpf+0x2f5/0x4a30 [ 766.799242][T11852] ? plist_check_list+0x1b8/0x280 [ 766.799268][T11852] ? plist_check_list+0x190/0x280 [ 766.799290][T11852] ? __pfx___sys_bpf+0x10/0x10 [ 766.799308][T11852] ? find_held_lock+0x2b/0x80 [ 766.799334][T11852] ? futex_wake+0x4ea/0x5e0 [ 766.799367][T11852] ? futex_private_hash_put.part.0+0xdc/0x180 [ 766.799396][T11852] ? futex_private_hash_put+0x24/0x30 [ 766.799423][T11852] ? __pfx_futex_wake+0x10/0x10 [ 766.799455][T11852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 766.799502][T11852] ? __x64_sys_futex+0x34f/0x4d0 [ 766.799527][T11852] ? __x64_sys_futex+0x358/0x4d0 [ 766.799556][T11852] ? xfd_validate_state+0x129/0x190 [ 766.799581][T11852] ? __x64_sys_bpf+0xce/0x140 [ 766.799600][T11852] __x64_sys_bpf+0xce/0x140 [ 766.799622][T11852] ? do_syscall_64+0xae/0x790 [ 766.799650][T11852] do_syscall_64+0x123/0x790 [ 766.799678][T11852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.799697][T11852] RIP: 0033:0x7f23aa59e159 [ 766.799713][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.799731][T11852] RSP: 002b:00007f23ab447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 766.799750][T11852] RAX: ffffffffffffffda RBX: 00007f23aa825fa0 RCX: 00007f23aa59e159 [ 766.799761][T11852] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 766.799772][T11852] RBP: 00007f23aa63503b R08: 0000000000000000 R09: 0000000000000000 [ 766.799784][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.799797][T11852] R13: 00007f23aa826038 R14: 00007f23aa825fa0 R15: 00007ffcd5d51ef8 [ 766.799823][T11852] [ 771.550724][T11797] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 772.064853][T11867] overlay: Unknown parameter '/' [ 772.065412][ T30] audit: type=1400 audit(1789414439.172:704): avc: denied { mounton } for pid=11864 comm="syz.0.1581" path="/341/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 772.179679][T11866] FAULT_INJECTION: forcing a failure. [ 772.179679][T11866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.179702][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.0.1581 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.179717][T11866] Tainted: [L]=SOFTLOCKUP [ 772.179721][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 772.179728][T11866] Call Trace: [ 772.179732][T11866] [ 772.179737][T11866] dump_stack_lvl+0x100/0x190 [ 772.179757][T11866] should_fail_ex.cold+0x5/0xa [ 772.179773][T11866] _copy_from_user+0x2e/0xd0 [ 772.179786][T11866] copy_msghdr_from_user+0x9f/0x4c0 [ 772.179804][T11866] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 772.179825][T11866] ? lock_acquire+0x1d1/0x380 [ 772.179836][T11866] ? get_pid_task+0x2a/0x250 [ 772.179854][T11866] ___sys_sendmsg+0x106/0x1e0 [ 772.179872][T11866] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.179889][T11866] ? get_pid_task+0x106/0x250 [ 772.179909][T11866] ? find_held_lock+0x2b/0x80 [ 772.179933][T11866] __sys_sendmsg+0x160/0x210 [ 772.179947][T11866] ? __pfx___sys_sendmsg+0x10/0x10 [ 772.179967][T11866] do_syscall_64+0x123/0x790 [ 772.179984][T11866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.179996][T11866] RIP: 0033:0x7f23aa59e159 [ 772.180006][T11866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.180018][T11866] RSP: 002b:00007f23ab426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.180030][T11866] RAX: ffffffffffffffda RBX: 00007f23aa826090 RCX: 00007f23aa59e159 [ 772.180037][T11866] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 772.180044][T11866] RBP: 00007f23ab426090 R08: 0000000000000000 R09: 0000000000000000 [ 772.180051][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.180057][T11866] R13: 00007f23aa826128 R14: 00007f23aa826090 R15: 00007ffcd5d51ef8 [ 772.180071][T11866] [ 774.441665][T11889] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 775.496730][T11892] FAULT_INJECTION: forcing a failure. [ 775.496730][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 775.496769][T11892] CPU: 1 UID: 0 PID: 11892 Comm: syz.2.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.496798][T11892] Tainted: [L]=SOFTLOCKUP [ 775.496806][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 775.496819][T11892] Call Trace: [ 775.496827][T11892] [ 775.496835][T11892] dump_stack_lvl+0x100/0x190 [ 775.496867][T11892] should_fail_ex.cold+0x5/0xa [ 775.496896][T11892] should_failslab+0xc2/0x120 [ 775.496921][T11892] __kmalloc_noprof+0xfc/0x840 [ 775.496952][T11892] ? bpf_prepare_filter+0x77c/0x11e0 [ 775.496987][T11892] bpf_prepare_filter+0x77c/0x11e0 [ 775.497020][T11892] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 775.497050][T11892] ? __asan_memcpy+0x3c/0x60 [ 775.497070][T11892] ? kmemdup_noprof+0x49/0x60 [ 775.497105][T11892] __get_filter+0x1ff/0x2c0 [ 775.497134][T11892] sk_attach_filter+0x1c/0x150 [ 775.497160][T11892] sk_setsockopt+0x3a9b/0x5d80 [ 775.497190][T11892] ? __pfx_sk_setsockopt+0x10/0x10 [ 775.497215][T11892] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 775.497239][T11892] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 775.497271][T11892] ? find_held_lock+0x2b/0x80 [ 775.497304][T11892] ? selinux_socket_setsockopt+0x6a/0x80 [ 775.497328][T11892] do_sock_setsockopt+0x193/0x1d0 [ 775.497358][T11892] __sys_setsockopt+0x195/0x220 [ 775.497386][T11892] __x64_sys_setsockopt+0xbd/0x160 [ 775.497407][T11892] ? do_syscall_64+0xae/0x790 [ 775.497434][T11892] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.497457][T11892] do_syscall_64+0x123/0x790 [ 775.497484][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.497502][T11892] RIP: 0033:0x7f171bf9e159 [ 775.497519][T11892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.497538][T11892] RSP: 002b:00007f171cef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 775.497558][T11892] RAX: ffffffffffffffda RBX: 00007f171c225fa0 RCX: 00007f171bf9e159 [ 775.497571][T11892] RDX: 000000000000001a RSI: 0000000000000001 RDI: 000000000000000a [ 775.497583][T11892] RBP: 00007f171c03503b R08: 0000000000000010 R09: 0000000000000000 [ 775.497595][T11892] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.497607][T11892] R13: 00007f171c226038 R14: 00007f171c225fa0 R15: 00007ffce1e65dc8 [ 775.497633][T11892] [ 779.204047][ T30] audit: type=1400 audit(1789414446.312:705): avc: denied { write } for pid=11914 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 779.204455][ T30] audit: type=1400 audit(1789414446.312:706): avc: denied { read } for pid=11914 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 779.564025][T11919] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 783.455213][T11932] SELinux: syz.0.1602 (11932) wrote to user. This is no longer supported. [ 783.455931][ T30] audit: type=1400 audit(1789414450.562:707): avc: denied { create } for pid=11931 comm="syz.0.1602" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 783.656834][T11937] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 783.657034][T11937] CIFS: Attempting to mount //127.0.0.1/share [ 783.736623][T11937] CIFS: VFS: Error connecting to socket. Aborting operation. [ 783.736918][T11937] CIFS: VFS: cifs_mount failed w/return code = -111 [ 783.848543][ T5709] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 784.130135][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 784.140751][ T5709] usb 1-1: not running at top speed; connect to a high speed hub [ 784.140878][ T5709] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 784.231332][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.231378][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.237080][T11939] nbd0: detected capacity change from 0 to 63 [ 784.324989][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.325032][ T5709] usb 1-1: Product: syz [ 784.325084][ T5709] usb 1-1: Manufacturer: syz [ 784.325131][ T5709] usb 1-1: SerialNumber: syz [ 784.906734][ T5617] block nbd0: Receive control failed (result -104) [ 785.053093][ T30] audit: type=1400 audit(1789414452.162:708): avc: denied { mounton } for pid=11931 comm="syz.0.1602" path="/348/file0" dev="tmpfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 785.195896][T11950] comedi comedi0: Minor 3 could not be opened [ 785.266167][ T25] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 785.418759][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 785.418811][ T25] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 785.419861][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.422090][ T25] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 785.422137][ T25] usb 5-1: Product: syz [ 785.422152][ T25] usb 5-1: Manufacturer: syz [ 785.505063][ T25] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 785.505120][ T25] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 785.664547][ T5709] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.692202][ T30] audit: type=1400 audit(1789414452.802:709): avc: denied { unlink } for pid=5605 comm="syz-executor" name="file0" dev="tmpfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 785.735446][ T5695] usb 5-1: USB disconnect, device number 54 [ 785.924301][ T5709] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 785.944814][ T5709] usb 1-1: USB disconnect, device number 48 [ 786.008597][ T9023] udevd[9023]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.268149][ T5709] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 786.406178][ T5709] usb 1-1: device descriptor read/64, error -71 [ 786.549458][T11963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 786.549603][T11963] block device autoloading is deprecated and will be removed. [ 786.656791][ T5709] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 786.796170][ T5709] usb 1-1: device descriptor read/64, error -71 [ 786.876632][T11978] comedi comedi0: Minor 3 could not be opened [ 787.590749][ T5709] usb usb1-port1: attempt power cycle [ 787.890679][ T25] libceph: connect (1)[c::]:6789 error -101 [ 787.890780][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 787.946157][ T5709] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 787.967474][ T5709] usb 1-1: device descriptor read/8, error -71 [ 788.071200][T11988] ceph: No mds server is up or the cluster is laggy [ 788.206134][ T5709] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 788.226805][ T5709] usb 1-1: device descriptor read/8, error -71 [ 788.336465][ T5709] usb usb1-port1: unable to enumerate USB device [ 789.493362][ T30] audit: type=1400 audit(1789414456.592:710): avc: denied { write } for pid=11995 comm="syz.3.1618" name="subsystems" dev="configfs" ino=2640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 789.493409][ T30] audit: type=1400 audit(1789414456.612:711): avc: denied { write } for pid=11995 comm="syz.3.1618" name="ports" dev="configfs" ino=2641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 789.506296][ T30] audit: type=1400 audit(1789414456.622:712): avc: denied { write } for pid=11995 comm="syz.3.1618" name="subsystems" dev="configfs" ino=42715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 789.506551][ T30] audit: type=1400 audit(1789414456.622:713): avc: denied { create } for pid=11995 comm="syz.3.1618" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 789.509365][ T30] audit: type=1400 audit(1789414456.622:714): avc: denied { write } for pid=11995 comm="syz.3.1618" name="subsystems" dev="configfs" ino=42715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 789.511105][T11997] nvmet_tcp: address family 255 not supported [ 789.553446][T12005] comedi comedi0: Minor 3 could not be opened [ 789.932277][T12007] nvme_fabrics: unknown parameter or missing value 'data_diges' in ctrl creation request [ 791.678319][T12024] FAULT_INJECTION: forcing a failure. [ 791.678319][T12024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.678352][T12024] CPU: 0 UID: 0 PID: 12024 Comm: syz.2.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.678377][T12024] Tainted: [L]=SOFTLOCKUP [ 791.678384][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 791.678394][T12024] Call Trace: [ 791.678402][T12024] [ 791.678409][T12024] dump_stack_lvl+0x100/0x190 [ 791.678440][T12024] should_fail_ex.cold+0x5/0xa [ 791.678467][T12024] _copy_from_user+0x2e/0xd0 [ 791.678488][T12024] copy_msghdr_from_user+0x9f/0x4c0 [ 791.678517][T12024] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 791.678551][T12024] ? lock_acquire+0x1d1/0x380 [ 791.678570][T12024] ? get_pid_task+0x2a/0x250 [ 791.678598][T12024] ___sys_sendmsg+0x106/0x1e0 [ 791.678628][T12024] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.678656][T12024] ? get_pid_task+0x106/0x250 [ 791.678697][T12024] ? find_held_lock+0x2b/0x80 [ 791.678736][T12024] __sys_sendmsg+0x160/0x210 [ 791.678757][T12024] ? __pfx___sys_sendmsg+0x10/0x10 [ 791.678788][T12024] do_syscall_64+0x123/0x790 [ 791.678815][T12024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.678833][T12024] RIP: 0033:0x7f171bf9e159 [ 791.678848][T12024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.678864][T12024] RSP: 002b:00007f171cef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.678883][T12024] RAX: ffffffffffffffda RBX: 00007f171c225fa0 RCX: 00007f171bf9e159 [ 791.678893][T12024] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 791.678902][T12024] RBP: 00007f171cef6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.678911][T12024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.678920][T12024] R13: 00007f171c226038 R14: 00007f171c225fa0 R15: 00007ffce1e65dc8 [ 791.678944][T12024] [ 792.576246][ T5723] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 793.035627][ T5723] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 793.096949][ T5723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 793.097000][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 793.097025][ T5723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 793.253622][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.253649][ T5723] usb 4-1: Product: syz [ 793.253662][ T5723] usb 4-1: Manufacturer: syz [ 793.253677][ T5723] usb 4-1: SerialNumber: syz [ 793.283207][ T5723] usb 4-1: config 0 descriptor?? [ 793.285190][T12032] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 793.285285][T12032] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 793.286492][ T5723] usb 4-1: ucan: probing device on interface #0 [ 793.650162][T12046] comedi comedi0: Minor 3 could not be opened [ 793.973585][T12041] gtp0: entered promiscuous mode [ 793.973606][T12041] gtp0: entered allmulticast mode [ 794.054381][T12055] comedi comedi0: Minor 3 could not be opened [ 794.362687][T12063] CIFS: Attempting to mount //127.0.0.1/share [ 794.395037][T12063] CIFS: VFS: Error connecting to socket. Aborting operation. [ 794.395847][T12063] CIFS: VFS: cifs_mount failed w/return code = -111 [ 794.521843][ T5611] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 794.860375][ T5611] usb 1-1: Using ep0 maxpacket: 32 [ 794.996699][ T5611] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 795.045956][ T5611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 795.045985][ T5611] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 795.046008][ T5611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 795.051457][ T5723] usb 4-1: ucan: failed to retrieve device info [ 795.051490][ T5723] usb 4-1: ucan: probe failed; try to update the device firmware [ 795.186870][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.186894][ T5611] usb 1-1: Product: syz [ 795.186907][ T5611] usb 1-1: Manufacturer: syz [ 795.186920][ T5611] usb 1-1: SerialNumber: syz [ 795.390052][ T5611] usb 1-1: config 0 descriptor?? [ 795.590939][ T5723] usb 4-1: USB disconnect, device number 51 [ 795.604712][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.605082][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.790956][T12069] FAULT_INJECTION: forcing a failure. [ 795.790956][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 795.790990][T12069] CPU: 1 UID: 0 PID: 12069 Comm: syz.4.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.791015][T12069] Tainted: [L]=SOFTLOCKUP [ 795.791025][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 795.791036][T12069] Call Trace: [ 795.791042][T12069] [ 795.791050][T12069] dump_stack_lvl+0x100/0x190 [ 795.791083][T12069] should_fail_ex.cold+0x5/0xa [ 795.791110][T12069] should_failslab+0xc2/0x120 [ 795.791134][T12069] __kmalloc_noprof+0xfc/0x840 [ 795.791153][T12069] ? rcu_is_watching+0x13/0xc0 [ 795.791178][T12069] ? tomoyo_realpath_from_path+0xb6/0x690 [ 795.791215][T12069] tomoyo_realpath_from_path+0xb6/0x690 [ 795.791244][T12069] tomoyo_path_number_perm+0x23c/0x580 [ 795.791262][T12069] ? tomoyo_path_number_perm+0x22e/0x580 [ 795.791283][T12069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 795.791312][T12069] ? __lock_acquire+0x5c0/0x1f40 [ 795.791345][T12069] ? __fget_files+0x34/0x3d0 [ 795.791368][T12069] ? find_held_lock+0x2b/0x80 [ 795.791393][T12069] ? hook_file_ioctl_common+0x140/0x440 [ 795.791423][T12069] ? __fget_files+0x21f/0x3d0 [ 795.791450][T12069] security_file_ioctl+0xd3/0x230 [ 795.791474][T12069] __x64_sys_ioctl+0xb7/0x210 [ 795.791496][T12069] do_syscall_64+0x123/0x790 [ 795.791532][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.791551][T12069] RIP: 0033:0x7f89dbf9e159 [ 795.791567][T12069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.791585][T12069] RSP: 002b:00007f89dcdaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.791604][T12069] RAX: ffffffffffffffda RBX: 00007f89dc225fa0 RCX: 00007f89dbf9e159 [ 795.791616][T12069] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 795.791628][T12069] RBP: 00007f89dcdaa090 R08: 0000000000000000 R09: 0000000000000000 [ 795.791639][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.791650][T12069] R13: 00007f89dc226038 R14: 00007f89dc225fa0 R15: 00007ffe8a1849f8 [ 795.791677][T12069] [ 795.791703][T12069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.856951][ T5611] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 796.296138][ T44] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 796.392831][ T5611] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 796.514387][ T5611] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 796.514849][ T5611] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 796.667356][ T44] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 796.851428][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 796.851461][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 796.851485][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 796.920894][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.920921][ T44] usb 3-1: Product: syz [ 796.920936][ T44] usb 3-1: Manufacturer: syz [ 796.920949][ T44] usb 3-1: SerialNumber: syz [ 797.478360][ T5611] usb 1-1: USB disconnect, device number 53 [ 798.070274][ T44] usb 3-1: config 0 descriptor?? [ 798.070873][T12073] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 798.070966][T12073] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 798.108855][ T44] usb 3-1: ucan: probing device on interface #0 [ 798.212286][ T30] audit: type=1400 audit(1789414465.322:715): avc: denied { bind } for pid=12082 comm="syz.3.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 798.214007][T12081] jffs2: notice: (12081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 798.309328][ T44] usb 3-1: ucan: could not read protocol version, ret=-71 [ 798.309356][ T44] usb 3-1: ucan: probe failed; try to update the device firmware [ 798.327319][ T44] usb 3-1: USB disconnect, device number 46 [ 798.458328][ T5709] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 798.626498][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 798.634199][ T5709] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 798.637466][ T5709] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 798.637507][ T5709] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 798.637546][ T5709] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.637570][ T5709] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 798.644288][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.644314][ T5709] usb 5-1: Product: syz [ 798.644328][ T5709] usb 5-1: Manufacturer: syz [ 798.644341][ T5709] usb 5-1: SerialNumber: syz [ 798.660279][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 798.663728][ T5709] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input117 [ 798.887998][ T5709] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 798.888022][ T5709] (id 0x00) [ 799.857929][ T30] audit: type=1400 audit(1789414466.542:716): avc: denied { map } for pid=12091 comm="syz.3.1648" path="socket:[43391]" dev="sockfs" ino=43391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 799.857978][ T30] audit: type=1400 audit(1789414466.542:717): avc: denied { read } for pid=12091 comm="syz.3.1648" path="socket:[43391]" dev="sockfs" ino=43391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 799.919689][ T5709] rc_core: IR keymap rc-imon-pad not found [ 799.919708][ T5709] Registered IR keymap rc-empty [ 799.919768][ T5709] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 799.919786][ T5709] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 799.947597][ T5709] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 799.952596][ T5709] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input118 [ 799.965360][ T5709] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:55> initialized [ 800.081141][T12105] comedi comedi0: Minor 3 could not be opened [ 800.308287][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 800.456883][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 800.458095][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 800.458123][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 800.458147][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 800.460238][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.460263][ T10] usb 1-1: Product: syz [ 800.460278][ T10] usb 1-1: Manufacturer: syz [ 800.460293][ T10] usb 1-1: SerialNumber: syz [ 800.464856][ T10] usb 1-1: config 0 descriptor?? [ 800.537108][T12102] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 800.537165][T12102] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 800.538432][ T10] usb 1-1: ucan: probing device on interface #0 [ 801.312640][T12079] imon:send_packet: task interrupted [ 801.312714][T12079] imon:send_packet: packet tx failed (-512) [ 801.312916][T12079] imon:vfd_write: send packet #0 failed [ 801.560882][T12119] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 801.796057][ T5734] usb 5-1: USB disconnect, device number 55 [ 801.826904][ T30] audit: type=1400 audit(1789414468.932:718): avc: denied { write } for pid=12120 comm="syz.1.1656" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 801.875998][ T10] usb 1-1: ucan: failed to retrieve device info [ 801.876192][ T10] usb 1-1: ucan: probe failed; try to update the device firmware [ 802.588202][T12126] FAULT_INJECTION: forcing a failure. [ 802.588202][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 802.588235][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.2.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.588260][T12126] Tainted: [L]=SOFTLOCKUP [ 802.588267][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 802.588278][T12126] Call Trace: [ 802.588285][T12126] [ 802.588292][T12126] dump_stack_lvl+0x100/0x190 [ 802.588324][T12126] should_fail_ex.cold+0x5/0xa [ 802.588351][T12126] should_failslab+0xc2/0x120 [ 802.588375][T12126] __kmalloc_noprof+0xfc/0x840 [ 802.588394][T12126] ? rcu_is_watching+0x13/0xc0 [ 802.588422][T12126] ? tomoyo_realpath_from_path+0xb6/0x690 [ 802.588451][T12126] tomoyo_realpath_from_path+0xb6/0x690 [ 802.588480][T12126] tomoyo_path_number_perm+0x23c/0x580 [ 802.588498][T12126] ? tomoyo_path_number_perm+0x22e/0x580 [ 802.588518][T12126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 802.588546][T12126] ? __lock_acquire+0x5c0/0x1f40 [ 802.588578][T12126] ? __fget_files+0x34/0x3d0 [ 802.588602][T12126] ? find_held_lock+0x2b/0x80 [ 802.588628][T12126] ? hook_file_ioctl_common+0x140/0x440 [ 802.588658][T12126] ? __fget_files+0x21f/0x3d0 [ 802.588684][T12126] security_file_ioctl+0xd3/0x230 [ 802.588706][T12126] __x64_sys_ioctl+0xb7/0x210 [ 802.588728][T12126] do_syscall_64+0x123/0x790 [ 802.588757][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.588777][T12126] RIP: 0033:0x7f171bf9e159 [ 802.588793][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.588810][T12126] RSP: 002b:00007f171cef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.588829][T12126] RAX: ffffffffffffffda RBX: 00007f171c225fa0 RCX: 00007f171bf9e159 [ 802.588841][T12126] RDX: 0000200000000080 RSI: 00000000c018620b RDI: 0000000000000003 [ 802.588853][T12126] RBP: 00007f171cef6090 R08: 0000000000000000 R09: 0000000000000000 [ 802.588864][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.588875][T12126] R13: 00007f171c226038 R14: 00007f171c225fa0 R15: 00007ffce1e65dc8 [ 802.588901][T12126] [ 802.588966][T12126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 802.589188][ T30] audit: type=1400 audit(1789414469.702:719): avc: denied { ioctl } for pid=12125 comm="syz.2.1657" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 802.822001][T12124] CIFS: Attempting to mount //127.0.0.1/share [ 802.856260][T12124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 802.856284][T12124] CIFS: VFS: cifs_mount failed w/return code = -111 [ 802.903314][T12124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1659'. [ 803.148239][T12137] jffs2: notice: (12137) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 803.172408][ T5723] usb 1-1: USB disconnect, device number 54 [ 803.256437][ T5734] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 803.376809][ T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 803.422919][T12142] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.432584][ T5734] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 803.433656][ T5734] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 803.433683][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 803.433704][ T5734] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 803.445453][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.445480][ T5734] usb 4-1: Product: syz [ 803.445494][ T5734] usb 4-1: Manufacturer: syz [ 803.445507][ T5734] usb 4-1: SerialNumber: syz [ 803.466694][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.466740][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.517810][ T5734] usb 4-1: config 0 descriptor?? [ 803.518438][T12133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 803.518534][T12133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 803.520455][ T5734] usb 4-1: ucan: probing device on interface #0 [ 803.556154][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 803.556957][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 803.557954][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 803.557996][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.558017][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.558061][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.558083][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.558119][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.733382][ T5734] usb 4-1: ucan: could not read protocol version, ret=-71 [ 803.733408][ T5734] usb 4-1: ucan: probe failed; try to update the device firmware [ 803.759999][ T5734] usb 4-1: USB disconnect, device number 52 [ 803.962017][ T44] usb 2-1: usb_control_msg returned -32 [ 803.965216][ T44] usbtmc 2-1:16.0: can't read capabilities [ 805.099026][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.099228][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.291652][ T30] audit: type=1400 audit(1789414472.402:720): avc: denied { create } for pid=12160 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 805.296611][ T30] audit: type=1400 audit(1789414472.412:721): avc: denied { setopt } for pid=12160 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 805.339803][T12163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 805.369370][T12161] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 806.126117][T12175] CIFS: Attempting to mount //127.0.0.1/share [ 806.133070][T12175] CIFS: VFS: Error connecting to socket. Aborting operation. [ 806.133267][T12175] CIFS: VFS: cifs_mount failed w/return code = -111 [ 806.162210][ T5611] usb 2-1: USB disconnect, device number 43 [ 806.172842][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 806.173570][ T44] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 806.271094][T12175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1671'. [ 806.406416][ T5709] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 806.422697][ T44] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 806.460935][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 806.461007][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 806.461040][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 806.591217][ T5709] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 806.612426][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 806.660025][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.660064][ T44] usb 4-1: Product: syz [ 806.660113][ T44] usb 4-1: Manufacturer: syz [ 806.660273][ T44] usb 4-1: SerialNumber: syz [ 806.662801][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 806.662835][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 806.662868][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 806.809941][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.809975][ T5709] usb 1-1: Product: syz [ 806.810066][ T5709] usb 1-1: Manufacturer: syz [ 806.810144][ T5709] usb 1-1: SerialNumber: syz [ 806.927827][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.927857][ T10] usb 3-1: Product: syz [ 806.927871][ T10] usb 3-1: Manufacturer: syz [ 806.927883][ T10] usb 3-1: SerialNumber: syz [ 807.082438][ T5709] usb 1-1: config 0 descriptor?? [ 807.085920][ T44] usb 4-1: config 0 descriptor?? [ 807.108627][T12170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 807.108725][T12170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 807.115026][T12174] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 807.115140][T12174] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 807.152606][ T44] usb 4-1: ucan: probing device on interface #0 [ 807.153318][ T5709] usb 1-1: ucan: probing device on interface #0 [ 807.182709][ T30] audit: type=1400 audit(1789414474.292:722): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 807.194318][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.575671][T12187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 807.622227][ T5611] usb 3-1: USB disconnect, device number 47 [ 807.632420][ T44] usb 4-1: ucan: failed to retrieve device info [ 807.632435][ T44] usb 4-1: ucan: probe failed; try to update the device firmware [ 808.096093][ T44] usb 4-1: USB disconnect, device number 53 [ 808.319526][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 808.319927][ T10] ath9k_htc: Failed to initialize the device [ 808.421277][ T5709] usb 1-1: ucan: failed to retrieve device info [ 808.421315][ T5709] usb 1-1: ucan: probe failed; try to update the device firmware [ 809.279460][ T5611] usb 3-1: ath9k_htc: USB layer deinitialized [ 809.381459][ T5723] usb 1-1: USB disconnect, device number 55 [ 814.967161][T12225] No source specified [ 815.010810][ T30] audit: type=1400 audit(1789414482.122:723): avc: denied { wake_alarm } for pid=12224 comm="syz.2.1684" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 815.040104][ T30] audit: type=1400 audit(1789414482.132:724): avc: denied { read } for pid=12224 comm="syz.2.1684" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 815.040147][ T30] audit: type=1400 audit(1789414482.132:725): avc: denied { open } for pid=12224 comm="syz.2.1684" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 815.212467][ T2371] block nbd0: Possible stuck request ffff888028592140: control (read@0,1024B). Runtime 30 seconds [ 815.213663][ T2371] block nbd0: Possible stuck request ffff888028592300: control (read@1024,1024B). Runtime 30 seconds [ 815.213695][ T2371] block nbd0: Possible stuck request ffff8880285924c0: control (read@2048,1024B). Runtime 30 seconds [ 815.213717][ T2371] block nbd0: Possible stuck request ffff888028592680: control (read@3072,1024B). Runtime 30 seconds [ 815.723671][ T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 815.755162][T12227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1686'. [ 815.826234][T12237] FAULT_INJECTION: forcing a failure. [ 815.826234][T12237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.826257][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz.0.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.826272][T12237] Tainted: [L]=SOFTLOCKUP [ 815.826277][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 815.826284][T12237] Call Trace: [ 815.826288][T12237] [ 815.826293][T12237] dump_stack_lvl+0x100/0x190 [ 815.826313][T12237] should_fail_ex.cold+0x5/0xa [ 815.826329][T12237] _copy_from_user+0x2e/0xd0 [ 815.826342][T12237] move_addr_to_kernel+0x65/0x170 [ 815.826361][T12237] __sys_bind+0x11d/0x260 [ 815.826372][T12237] ? __pfx___sys_bind+0x10/0x10 [ 815.826382][T12237] ? __fget_files+0x21f/0x3d0 [ 815.826400][T12237] ? __pfx_ksys_write+0x10/0x10 [ 815.826415][T12237] __x64_sys_bind+0x72/0xb0 [ 815.826425][T12237] ? lockdep_hardirqs_on+0x7d/0x110 [ 815.826440][T12237] do_syscall_64+0x123/0x790 [ 815.826456][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.826470][T12237] RIP: 0033:0x7f23aa59e159 [ 815.826480][T12237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.826491][T12237] RSP: 002b:00007f23ab426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 815.826504][T12237] RAX: ffffffffffffffda RBX: 00007f23aa826090 RCX: 00007f23aa59e159 [ 815.826511][T12237] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000005 [ 815.826517][T12237] RBP: 00007f23ab426090 R08: 0000000000000000 R09: 0000000000000000 [ 815.826524][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.826531][T12237] R13: 00007f23aa826128 R14: 00007f23aa826090 R15: 00007ffcd5d51ef8 [ 815.826545][T12237] [ 815.886344][ T44] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 815.905843][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 815.905866][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 815.905880][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 815.948417][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.948444][ T44] usb 2-1: Product: syz [ 815.948453][ T44] usb 2-1: Manufacturer: syz [ 815.948461][ T44] usb 2-1: SerialNumber: syz [ 816.062599][ T44] usb 2-1: config 0 descriptor?? [ 816.067631][T12232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 816.067722][T12232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 816.115263][ T44] usb 2-1: ucan: probing device on interface #0 [ 816.295531][ T44] usb 2-1: ucan: could not read protocol version, ret=-71 [ 816.295558][ T44] usb 2-1: ucan: probe failed; try to update the device firmware [ 816.338526][ T44] usb 2-1: USB disconnect, device number 44 [ 816.838715][T12244] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 817.606503][ T5723] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 817.780642][ T5723] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 817.813526][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.813843][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.865971][ T5723] usb 1-1: config 0 descriptor?? [ 818.144593][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 818.144657][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 818.155246][ T5723] usb 1-1: USB disconnect, device number 56 [ 818.239221][ T30] audit: type=1400 audit(1789414485.352:726): avc: denied { mounton } for pid=12250 comm="syz.1.1692" path="/348/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=43999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 818.356134][ T44] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 818.436173][ T5611] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 818.509087][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 818.509107][ T44] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 818.509859][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.511043][ T44] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 818.511057][ T44] usb 4-1: Product: syz [ 818.511066][ T44] usb 4-1: Manufacturer: syz [ 818.568518][ T44] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 818.568579][ T44] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 818.607264][ T5611] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 818.608316][ T5611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 818.608345][ T5611] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 818.608369][ T5611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 818.612013][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.612039][ T5611] usb 5-1: Product: syz [ 818.612054][ T5611] usb 5-1: Manufacturer: syz [ 818.612069][ T5611] usb 5-1: SerialNumber: syz [ 818.647709][ T25] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 818.690474][ T5611] usb 5-1: config 0 descriptor?? [ 818.692653][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 818.692772][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 818.695743][ T5611] usb 5-1: ucan: probing device on interface #0 [ 818.736404][ T5734] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 818.772561][ T5709] usb 4-1: USB disconnect, device number 54 [ 818.807380][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 818.809547][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 818.811544][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.811588][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.854781][ T25] usb 1-1: config 0 descriptor?? [ 818.863434][ T25] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 818.877549][ T25] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 818.894770][ T5734] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 818.905847][ T5734] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 818.905874][ T5734] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 818.905891][ T5734] usb 2-1: config 4 has no interface number 0 [ 818.905941][ T5734] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.946767][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.946794][ T5734] usb 2-1: Product: syz [ 818.946809][ T5734] usb 2-1: Manufacturer: syz [ 818.946826][ T5734] usb 2-1: SerialNumber: syz [ 819.164694][ T5734] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 819.195524][ T5611] usb 5-1: ucan: failed to retrieve device info [ 819.195549][ T5611] usb 5-1: ucan: probe failed; try to update the device firmware [ 819.222481][ T5611] usb 5-1: USB disconnect, device number 56 [ 819.246280][ T5734] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 819.246320][ T5734] dib0700: firmware download failed at 7 with -22 [ 819.404386][ T30] audit: type=1400 audit(1789414486.512:727): avc: denied { execute } for pid=12260 comm="syz.3.1696" name="file0" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 819.404431][ T30] audit: type=1400 audit(1789414486.512:728): avc: denied { execute_no_trans } for pid=12260 comm="syz.3.1696" path="/343/file0" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 819.474056][T12261] FAULT_INJECTION: forcing a failure. [ 819.474056][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 819.474073][ T30] audit: type=1400 audit(1789414486.582:729): avc: denied { remount } for pid=12260 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 819.474091][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.3.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.474119][T12261] Tainted: [L]=SOFTLOCKUP [ 819.474126][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 819.474137][T12261] Call Trace: [ 819.474144][T12261] [ 819.474152][T12261] dump_stack_lvl+0x100/0x190 [ 819.474186][T12261] should_fail_ex.cold+0x5/0xa [ 819.474214][T12261] should_failslab+0xc2/0x120 [ 819.474241][T12261] __kmalloc_cache_noprof+0x91/0x6d0 [ 819.474272][T12261] ? alloc_fs_context+0x57/0xf40 [ 819.474307][T12261] alloc_fs_context+0x57/0xf40 [ 819.474344][T12261] path_mount+0xcf7/0x24c0 [ 819.474379][T12261] ? __pfx_path_mount+0x10/0x10 [ 819.474407][T12261] ? lockdep_hardirqs_on+0x7d/0x110 [ 819.474438][T12261] ? putname+0xb1/0x110 [ 819.474463][T12261] ? kmem_cache_free+0x127/0x6c0 [ 819.474503][T12261] ? __x64_sys_mount+0x293/0x310 [ 819.474531][T12261] __x64_sys_mount+0x293/0x310 [ 819.474562][T12261] ? __pfx___x64_sys_mount+0x10/0x10 [ 819.474600][T12261] do_syscall_64+0x123/0x790 [ 819.474641][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.474665][T12261] RIP: 0033:0x7f6dd879e159 [ 819.474683][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.474703][T12261] RSP: 002b:00007f6dd69f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 819.474724][T12261] RAX: ffffffffffffffda RBX: 00007f6dd8a25fa0 RCX: 00007f6dd879e159 [ 819.474739][T12261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 819.474751][T12261] RBP: 00007f6dd883503b R08: 0000200000000200 R09: 0000000000000000 [ 819.474765][T12261] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 819.474778][T12261] R13: 00007f6dd8a26038 R14: 00007f6dd8a25fa0 R15: 00007fff1d1ddbf8 [ 819.474806][T12261] [ 820.780522][ T10] usb 1-1: USB disconnect, device number 57 [ 820.781923][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 821.366175][ T30] audit: type=1400 audit(1789414488.412:730): avc: denied { open } for pid=12274 comm="syz.3.1701" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 821.643300][ T5611] usb 2-1: USB disconnect, device number 45 [ 822.056206][T12282] input: syz0 as /devices/virtual/input/input119 [ 822.062600][ T30] audit: type=1400 audit(1789414489.142:731): avc: denied { append } for pid=12279 comm="syz.1.1702" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.656002][ T5611] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 823.754911][T12296] overlayfs: missing 'lowerdir' [ 823.819828][ T5611] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 823.896840][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.896874][ T5611] usb 5-1: Product: syz [ 823.896961][ T5611] usb 5-1: Manufacturer: syz [ 823.896991][ T5611] usb 5-1: SerialNumber: syz [ 824.025776][ T5611] usb 5-1: config 0 descriptor?? [ 824.494391][ T30] audit: type=1400 audit(1789414491.602:732): avc: denied { connect } for pid=12299 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 824.668029][ T5611] usb 5-1: Firmware version (0.0) predates our first public release. [ 824.668055][ T5611] usb 5-1: Please update to version 0.2 or newer [ 824.668557][ T5611] usb 5-1: Firmware: build [ 824.894851][ T5611] usb 5-1: USB disconnect, device number 57 [ 824.918895][ T30] audit: type=1400 audit(1789414492.022:733): avc: denied { nlmsg_read } for pid=12310 comm="syz.1.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 825.035347][T12313] tipc: Started in network mode [ 825.035377][T12313] tipc: Node identity ac1414aa, cluster identity 4711 [ 825.073190][T12313] tipc: New replicast peer: 172.20.20.187 [ 825.085905][T12313] tipc: Enabled bearer , priority 10 [ 825.249628][ T30] audit: type=1400 audit(1789414492.362:734): avc: denied { write } for pid=12316 comm="syz.3.1707" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 825.250823][ T30] audit: type=1400 audit(1789414492.362:735): avc: denied { open } for pid=12316 comm="syz.3.1707" path="/348/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 825.521933][ T30] audit: type=1400 audit(1789414492.632:736): avc: denied { write } for pid=12322 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 825.539920][ T5617] Bluetooth: hci4: unknown advertising packet type: 0x72 [ 825.539960][ T5617] Bluetooth: hci4: Malformed LE Event: 0x02 [ 825.545616][ T30] audit: type=1400 audit(1789414492.642:737): avc: denied { write } for pid=12323 comm="syz.0.1717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 826.028112][T12329] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12329] [ 826.551341][ T30] audit: type=1400 audit(1789414493.142:738): avc: denied { read write } for pid=12326 comm="syz.1.1719" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 826.551388][ T30] audit: type=1400 audit(1789414493.142:739): avc: denied { open } for pid=12326 comm="syz.1.1719" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 826.627905][ T25] tipc: Node number set to 2886997162 [ 829.053437][T11167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 829.067322][T11167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 829.072229][T11167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 829.072990][T11167] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 829.073503][T11167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 829.104136][ T30] audit: type=1400 audit(1789414496.222:740): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 829.908833][T12364] capability: warning: `syz.1.1728' uses 32-bit capabilities (legacy support in use) [ 829.923394][T12364] program syz.1.1728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.269516][T12380] FAULT_INJECTION: forcing a failure. [ 830.269516][T12380] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.269551][T12380] CPU: 1 UID: 0 PID: 12380 Comm: syz.3.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.269580][T12380] Tainted: [L]=SOFTLOCKUP [ 830.269588][T12380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 830.269600][T12380] Call Trace: [ 830.269607][T12380] [ 830.269616][T12380] dump_stack_lvl+0x100/0x190 [ 830.269648][T12380] should_fail_ex.cold+0x5/0xa [ 830.269676][T12380] get_futex_key+0x1d0/0x14f0 [ 830.269706][T12380] ? __pfx_get_futex_key+0x10/0x10 [ 830.269740][T12380] futex_wake+0xf4/0x5e0 [ 830.269773][T12380] ? __pfx_futex_wake+0x10/0x10 [ 830.269804][T12380] ? kasan_quarantine_put+0x104/0x240 [ 830.269831][T12380] ? putname+0xb1/0x110 [ 830.269855][T12380] ? kmem_cache_free+0x127/0x6c0 [ 830.269890][T12380] do_futex+0x2b2/0x440 [ 830.269918][T12380] ? __pfx_do_futex+0x10/0x10 [ 830.269941][T12380] ? __pfx_do_sys_openat2+0x10/0x10 [ 830.269975][T12380] __x64_sys_futex+0x34f/0x4d0 [ 830.270001][T12380] ? __x64_sys_openat+0x12d/0x210 [ 830.270029][T12380] ? __pfx___x64_sys_futex+0x10/0x10 [ 830.270065][T12380] do_syscall_64+0x123/0x790 [ 830.270095][T12380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.270115][T12380] RIP: 0033:0x7f6dd879e159 [ 830.270132][T12380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.270151][T12380] RSP: 002b:00007f6dd69f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 830.270170][T12380] RAX: ffffffffffffffda RBX: 00007f6dd8a25fa8 RCX: 00007f6dd879e159 [ 830.270184][T12380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6dd8a25fac [ 830.270194][T12380] RBP: 00007f6dd8a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 830.270205][T12380] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 830.270217][T12380] R13: 00007f6dd8a26038 R14: 00007fff1d1ddb10 R15: 00007fff1d1ddbf8 [ 830.270242][T12380] [ 831.218923][ T5617] Bluetooth: hci5: command tx timeout [ 831.520277][T12393] overlayfs: missing 'lowerdir' [ 832.331303][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.331437][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.331540][T12344] bridge_slave_0: entered allmulticast mode [ 832.332937][T12344] bridge_slave_0: entered promiscuous mode [ 832.334948][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.335068][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.335153][T12344] bridge_slave_1: entered allmulticast mode [ 832.336414][T12344] bridge_slave_1: entered promiscuous mode [ 832.357929][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.360160][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.380180][T12344] team0: Port device team_slave_0 added [ 832.382291][T12344] team0: Port device team_slave_1 added [ 832.403044][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.403058][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.403077][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.404429][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.404439][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.404458][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.445573][ T30] audit: type=1400 audit(1789414499.552:741): avc: denied { create } for pid=12373 comm="syz.4.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 832.445618][ T30] audit: type=1400 audit(1789414499.552:742): avc: denied { ioctl } for pid=12373 comm="syz.4.1730" path="socket:[44816]" dev="sockfs" ino=44816 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 832.592153][T12344] hsr_slave_0: entered promiscuous mode [ 832.592965][T12344] hsr_slave_1: entered promiscuous mode [ 832.601444][T12344] debugfs: 'hsr0' already exists in 'hsr' [ 832.601465][T12344] Cannot create hsr debugfs directory [ 833.521803][ T5617] Bluetooth: hci5: command tx timeout [ 834.525837][T12408] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 834.651901][T12414] 0x000000000000-0x000000020000 : "" [ 834.695930][T12414] ftl_cs: FTL header not found. [ 835.336719][T12344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 835.358166][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 835.358927][T12344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 835.397133][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 835.397842][T12344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 835.535727][ T5617] Bluetooth: hci5: command tx timeout [ 836.552599][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.553342][T12344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 836.577113][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.746568][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.819849][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.837886][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.837967][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.853747][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.853826][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.900846][ T5617] Bluetooth: hci5: command tx timeout [ 837.900963][ T30] audit: type=1400 audit(1789414504.483:743): avc: denied { audit_write } for pid=12438 comm="syz.1.1748" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 838.297972][T12450] input: syz0 as /devices/virtual/input/input120 [ 839.785781][T12452] block device autoloading is deprecated and will be removed. [ 840.260469][T12471] key id 000004d2 not found [ 840.567317][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.775075][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 841.775303][ T5695] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 841.775319][ T5695] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 842.466564][T12491] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12491] [ 843.001750][T12344] veth0_vlan: entered promiscuous mode [ 843.027220][T12344] veth1_vlan: entered promiscuous mode [ 843.231407][T12344] veth0_macvtap: entered promiscuous mode [ 843.244392][T12344] veth1_macvtap: entered promiscuous mode [ 843.282252][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.292798][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.358878][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 843.589941][ T7777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.645247][ T3270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.645953][ T3270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.645984][ T3270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.935694][ T5695] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 843.935719][ T5695] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 844.001860][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 846.545781][ T5695] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 846.545806][ T5695] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 846.547916][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 846.577566][ T2371] block nbd0: Possible stuck request ffff888028592140: control (read@0,1024B). Runtime 60 seconds [ 846.577604][ T2371] block nbd0: Possible stuck request ffff888028592300: control (read@1024,1024B). Runtime 60 seconds [ 846.577627][ T2371] block nbd0: Possible stuck request ffff8880285924c0: control (read@2048,1024B). Runtime 60 seconds [ 846.577649][ T2371] block nbd0: Possible stuck request ffff888028592680: control (read@3072,1024B). Runtime 60 seconds [ 847.396251][T12530] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12530] [ 848.385409][T12535] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 848.386241][ T30] audit: type=1400 audit(1789414515.503:744): avc: denied { map } for pid=12533 comm="syz.0.1769" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 848.386488][ T30] audit: type=1400 audit(1789414515.503:745): avc: denied { execute } for pid=12533 comm="syz.0.1769" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 848.655214][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 848.659024][ T5695] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 848.659056][ T5695] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 849.649173][ T30] audit: type=1400 audit(1789414516.763:746): avc: denied { override_creds } for pid=12543 comm="syz.4.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 850.814890][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 850.815025][ T5695] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 850.815040][ T5695] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 852.898323][ T5617] Bluetooth: hci5: command 0x0c1a tx timeout [ 853.153987][ T5695] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 853.154013][ T5695] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 854.003941][T12557] program syz.0.1781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.021940][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.021961][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.245633][T12561] CIFS: Attempting to mount //127.0.0.1/share [ 854.312096][T12561] CIFS: VFS: Error connecting to socket. Aborting operation. [ 854.312443][T12561] CIFS: VFS: cifs_mount failed w/return code = -111 [ 855.322995][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.323016][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.368973][ T30] audit: type=1400 audit(1789414522.484:747): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/root/syzkaller.dazYGF/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 855.379627][T12566] xt_hashlimit: size too large, truncated to 1048576 [ 855.404960][ T30] audit: type=1400 audit(1789414522.494:748): avc: denied { getopt } for pid=12565 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 855.447335][ T30] audit: type=1400 audit(1789414522.564:749): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/root/syzkaller.dazYGF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 855.710792][ T30] audit: type=1400 audit(1789414522.824:750): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/root/syzkaller.dazYGF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 855.738820][ T30] audit: type=1400 audit(1789414522.854:751): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 855.738918][ T30] audit: type=1400 audit(1789414522.854:752): avc: denied { mount } for pid=12344 comm="syz-executor" name="/" dev="gadgetfs" ino=7563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 855.744019][ T30] audit: type=1400 audit(1789414522.854:753): avc: denied { mount } for pid=12344 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 855.748639][ T30] audit: type=1400 audit(1789414522.864:754): avc: denied { mounton } for pid=12344 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 859.136857][T12596] program syz.1.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.420737][T12601] program syz.4.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.534811][ T30] audit: type=1400 audit(1789414527.654:755): avc: denied { read } for pid=12602 comm="syz.4.1797" name="set_event" dev="tracefs" ino=3500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 861.089328][ T30] audit: type=1400 audit(1789414528.204:756): avc: denied { connect } for pid=12607 comm="syz.4.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 863.525287][ T30] audit: type=1400 audit(1789414530.644:757): avc: denied { map } for pid=12615 comm="syz.5.1801" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 864.468664][ T5695] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 864.512603][T12631] kvm: MWAIT instruction emulated as NOP! [ 864.656560][ T5695] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 864.660254][ T5695] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 864.660282][ T5695] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 864.660301][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.660348][ T5695] usb 4-1: config 0 has no interface number 0 [ 864.660379][ T5695] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 864.660399][ T5695] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 864.660421][ T5695] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 864.660445][ T5695] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 864.660481][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.668220][ T5695] usb 4-1: config 0 descriptor?? [ 864.693347][ T5695] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 864.895619][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.895664][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.951521][ T6420] usb 4-1: Failed to submit usb control message: -71 [ 864.951555][ T6420] usb 4-1: unable to send the bmi data to the device: -71 [ 864.951570][ T6420] usb 4-1: unable to get target info from device [ 864.951583][ T6420] usb 4-1: could not get target info (-71) [ 864.951817][ T6420] usb 4-1: could not probe fw (-71) [ 864.953844][ T10] usb 4-1: USB disconnect, device number 55 [ 865.050144][ T30] audit: type=1400 audit(1789414532.164:758): avc: denied { bind } for pid=12640 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 865.050370][ T30] audit: type=1400 audit(1789414532.164:759): avc: denied { name_bind } for pid=12640 comm="syz.1.1807" src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 865.051976][ T30] audit: type=1400 audit(1789414532.164:760): avc: denied { node_bind } for pid=12640 comm="syz.1.1807" saddr=::e0:0:0:0:1 src=20259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 865.463078][T12648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.523862][ T5695] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 866.303575][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 866.305633][ T5695] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 866.329342][ T5695] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 866.329371][ T5695] usb 1-1: config 0 has no interface number 0 [ 866.329407][ T5695] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.329428][ T5695] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 866.329451][ T5695] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 866.329474][ T5695] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 866.329494][ T5695] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.331276][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.331300][ T5695] usb 1-1: Product: syz [ 866.331314][ T5695] usb 1-1: Manufacturer: syz [ 866.331328][ T5695] usb 1-1: SerialNumber: syz [ 866.344614][T12653] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 866.434554][ T5695] usb 1-1: config 0 descriptor?? [ 866.444193][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input121 [ 867.108832][ T5724] usb 1-1: USB disconnect, device number 58 [ 868.178594][ T30] audit: type=1400 audit(1789414535.294:761): avc: denied { bind } for pid=12662 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 868.577062][T12675] /dev/nullb0: Can't open blockdev [ 869.351727][ T30] audit: type=1400 audit(1789414536.464:762): avc: denied { listen } for pid=12681 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 870.930429][ T5695] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 870.930568][ T5724] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 871.114989][ T30] audit: type=1400 audit(1789414538.235:763): avc: denied { create } for pid=12699 comm="syz.4.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 871.121855][ T30] audit: type=1400 audit(1789414538.235:764): avc: denied { ioctl } for pid=12699 comm="syz.4.1825" path="socket:[47562]" dev="sockfs" ino=47562 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 871.123609][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 871.143922][ T5724] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 871.145052][ T5724] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 871.145078][ T5724] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.145101][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 871.145157][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.146472][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 871.146504][ T5695] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 871.153046][ T5724] usb 4-1: config 0 descriptor?? [ 871.156741][ T5695] usb 2-1: string descriptor 0 read error: -22 [ 871.156837][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.176576][ T5724] hid-alps 0003:044E:120B.0009: failed read register (-32) [ 872.176668][ T5724] hid-alps 0003:044E:120B.0009: failed U1_DEV_CTRL_1 (-32) [ 872.179393][ T5724] hid-alps 0003:044E:120B.0009: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 872.244401][ T5695] usb 2-1: USB disconnect, device number 46 [ 872.347547][ T5611] usb 4-1: USB disconnect, device number 56 [ 872.379435][T12718] fido_id[12718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 873.219327][T12730] jffs2: notice: (12730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 873.351478][T12740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12740 comm=syz.0.1837 [ 873.449512][ T4244] IPVS: starting estimator thread 0... [ 873.544760][T12741] IPVS: using max 47 ests per chain, 112800 per kthread [ 873.800049][ T5709] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 873.945915][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 873.948854][ T5709] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 874.307728][T12767] overlayfs: failed to resolve './file0': -2 [ 874.382414][ T5709] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 874.382443][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.382459][ T5709] usb 1-1: config 0 has no interface number 0 [ 874.382487][ T5709] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 874.435029][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.435122][ T5709] usb 1-1: Product: syz [ 874.435159][ T5709] usb 1-1: Manufacturer: syz [ 874.435183][ T5709] usb 1-1: SerialNumber: syz [ 874.488228][ T5709] usb 1-1: config 0 descriptor?? [ 875.157459][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 875.158757][ T5709] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 875.549288][ T30] audit: type=1400 audit(1789414542.665:765): avc: denied { bind } for pid=12769 comm="syz.4.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 875.581170][ T30] audit: type=1400 audit(1789414542.695:766): avc: denied { write } for pid=12769 comm="syz.4.1848" path="socket:[48265]" dev="sockfs" ino=48265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 876.323107][ T30] audit: type=1400 audit(1789414543.165:767): avc: denied { write } for pid=12771 comm="syz.3.1851" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 876.323157][ T30] audit: type=1400 audit(1789414543.235:768): avc: denied { write } for pid=12771 comm="syz.3.1851" name="mjpeg" dev="configfs" ino=47766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 877.008393][ T30] audit: type=1400 audit(1789414544.125:769): avc: denied { mount } for pid=12787 comm="syz.5.1853" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 877.013519][ T30] audit: type=1400 audit(1789414544.135:770): avc: denied { search } for pid=12787 comm="syz.5.1853" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 877.013633][ T30] audit: type=1400 audit(1789414544.135:771): avc: denied { write } for pid=12787 comm="syz.5.1853" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 877.067614][ T30] audit: type=1400 audit(1789414544.135:772): avc: denied { open } for pid=12787 comm="syz.5.1853" path="/11/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 877.107633][ T2371] block nbd0: Possible stuck request ffff888028592140: control (read@0,1024B). Runtime 90 seconds [ 877.107674][ T2371] block nbd0: Possible stuck request ffff888028592300: control (read@1024,1024B). Runtime 90 seconds [ 877.107698][ T2371] block nbd0: Possible stuck request ffff8880285924c0: control (read@2048,1024B). Runtime 90 seconds [ 877.107720][ T2371] block nbd0: Possible stuck request ffff888028592680: control (read@3072,1024B). Runtime 90 seconds [ 877.135812][ T30] audit: type=1400 audit(1789414544.255:773): avc: denied { unmount } for pid=12344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 878.539951][ T5611] usb 1-1: USB disconnect, device number 59 [ 880.586406][ T30] audit: type=1400 audit(1789414547.705:774): avc: denied { write } for pid=12805 comm="syz.0.1860" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 880.590598][ T30] audit: type=1400 audit(1789414547.705:775): avc: denied { write } for pid=12805 comm="syz.0.1860" name="interface.ncm" dev="configfs" ino=48320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 880.590649][ T30] audit: type=1400 audit(1789414547.705:776): avc: denied { write } for pid=12805 comm="syz.0.1860" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 880.592897][ T30] audit: type=1400 audit(1789414547.705:777): avc: denied { write } for pid=12805 comm="syz.0.1860" name="interface.rndis" dev="configfs" ino=48325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 880.812815][ T5611] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 880.834796][T12810] jffs2: notice: (12810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 880.842610][ T30] audit: type=1400 audit(1789414547.955:778): avc: denied { write } for pid=12808 comm="syz.0.1861" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 880.962862][ T5611] usb 4-1: Using ep0 maxpacket: 32 [ 880.964981][ T5611] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 880.968150][ T5611] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 880.968256][ T5611] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.968327][ T5611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 880.968381][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.042136][ T5611] usb 4-1: config 0 descriptor?? [ 881.423271][ T30] audit: type=1400 audit(1789414548.515:779): avc: denied { checkpoint_restore } for pid=12812 comm="syz.1.1862" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 881.493348][ T30] audit: type=1400 audit(1789414548.615:780): avc: denied { write } for pid=12817 comm="syz.4.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 882.708694][ T5611] hid-alps 0003:044E:120B.000A: failed read register (-71) [ 882.708769][ T5611] hid-alps 0003:044E:120B.000A: failed U1_DEV_CTRL_1 (-71) [ 882.712205][ T5611] hid-alps 0003:044E:120B.000A: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 882.746020][ T30] audit: type=1400 audit(1789414549.865:781): avc: denied { create } for pid=12830 comm="syz.4.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 882.749901][ T30] audit: type=1400 audit(1789414549.865:782): avc: denied { write } for pid=12830 comm="syz.4.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 882.796136][ T5611] usb 4-1: USB disconnect, device number 57 [ 883.021777][T12834] fido_id[12834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 885.696662][ T30] audit: type=1400 audit(1789414552.815:783): avc: denied { bind } for pid=12864 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 885.697032][ T30] audit: type=1400 audit(1789414552.815:784): avc: denied { read } for pid=12864 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 885.758775][T12869] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 885.762332][ T30] audit: type=1400 audit(1789414552.875:785): avc: denied { ioctl } for pid=12864 comm="syz.0.1871" path="socket:[47859]" dev="sockfs" ino=47859 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 886.661444][T12866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1877'. [ 886.703300][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 891.131918][T12912] jffs2: notice: (12912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 891.160417][ T30] audit: type=1400 audit(1789414558.276:786): avc: denied { write } for pid=12907 comm="syz.0.1889" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 891.820242][T12916] jffs2: notice: (12916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 893.426200][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.463371][T12933] bridge_slave_1 (unregistering): left allmulticast mode [ 894.463400][T12933] bridge_slave_1 (unregistering): left promiscuous mode [ 894.465067][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.766839][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 895.766867][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 895.766895][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 895.840706][ T30] audit: type=1400 audit(1789414562.956:787): avc: denied { write } for pid=12959 comm="syz.0.1906" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 895.840827][T12960] LUN: removable file: (no medium) [ 895.870923][ T30] audit: type=1400 audit(1789414562.986:788): avc: denied { write } for pid=12959 comm="syz.0.1906" name="functions" dev="configfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 895.870959][ T30] audit: type=1400 audit(1789414562.986:789): avc: denied { remove_name } for pid=12959 comm="syz.0.1906" name="mass_storage.usb0" dev="configfs" ino=47976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 895.870980][ T30] audit: type=1400 audit(1789414562.986:790): avc: denied { rmdir } for pid=12959 comm="syz.0.1906" name="mass_storage.usb0" dev="configfs" ino=47976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 896.271278][T12966] sctp: [Deprecated]: syz.3.1908 (pid 12966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 896.271278][T12966] Use struct sctp_sack_info instead [ 897.780497][T12978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.444444][ T30] audit: type=1400 audit(1789414565.566:791): avc: denied { listen } for pid=12980 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 899.749853][T12998] /dev/nullb0: Can't open blockdev [ 902.948831][ T30] audit: type=1400 audit(1789414570.066:792): avc: denied { map } for pid=13006 comm="syz.5.1921" path="socket:[48676]" dev="sockfs" ino=48676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 902.950193][ T30] audit: type=1400 audit(1789414570.066:793): avc: denied { read } for pid=13006 comm="syz.5.1921" path="socket:[48676]" dev="sockfs" ino=48676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 904.139776][T13036] cgroup: Unknown subsys name 'smackfsfloor' [ 906.012750][T13059] nfs: Bad value for 'source' [ 906.101359][ T5734] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 906.271408][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 906.272164][ T5734] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 906.273408][ T5734] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 906.273438][ T5734] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.273464][ T5734] usb 6-1: config 0 interface 0 has no altsetting 0 [ 906.273491][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.280268][ T5734] usb 6-1: config 0 descriptor?? [ 906.939257][ T30] audit: type=1400 audit(1789414574.057:794): avc: denied { write } for pid=13067 comm="syz.1.1943" path="socket:[49243]" dev="sockfs" ino=49243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.125971][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 907.142519][ T8368] block nbd0: Possible stuck request ffff888028592140: control (read@0,1024B). Runtime 120 seconds [ 907.142554][ T8368] block nbd0: Possible stuck request ffff888028592300: control (read@1024,1024B). Runtime 120 seconds [ 907.142575][ T8368] block nbd0: Possible stuck request ffff8880285924c0: control (read@2048,1024B). Runtime 120 seconds [ 907.142596][ T8368] block nbd0: Possible stuck request ffff888028592680: control (read@3072,1024B). Runtime 120 seconds [ 907.230483][ T5734] usbhid 6-1:0.0: can't add hid device: -71 [ 907.230573][ T5734] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 908.600984][ T5734] usb 6-1: USB disconnect, device number 2 [ 909.667406][T13090] /dev/nullb0: Can't open blockdev [ 910.641789][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 912.002725][ T5723] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 912.065363][ T30] audit: type=1400 audit(1789414579.187:795): avc: denied { create } for pid=13114 comm="syz.5.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 912.090783][ T30] audit: type=1400 audit(1789414579.197:796): avc: denied { bind } for pid=13114 comm="syz.5.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 912.173411][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 912.174784][ T5723] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 912.178810][ T5723] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 912.178844][ T5723] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.178870][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 912.178900][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.193203][ T5723] usb 2-1: config 0 descriptor?? [ 913.282006][ T5723] usbhid 2-1:0.0: can't add hid device: -71 [ 913.282091][ T5723] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 914.410357][ T5723] usb 2-1: USB disconnect, device number 47 [ 914.486084][T13140] /dev/nullb0: Can't open blockdev [ 915.632668][ T30] audit: type=1400 audit(1789414582.747:797): avc: denied { connect } for pid=13150 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 917.429312][T13173] overlayfs: failed to resolve 'work': -2 [ 917.886527][ T25] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 918.035921][ T25] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 918.040025][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.040069][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 918.040096][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 918.040121][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 918.040142][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 918.044303][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 918.044327][ T25] usb 2-1: Product: syz [ 918.044339][ T25] usb 2-1: Manufacturer: syz [ 918.044357][ T25] usb 2-1: SerialNumber: syz [ 918.068732][T13183] jffs2: notice: (13183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 918.074217][ T25] usb 2-1: config 0 descriptor?? [ 918.211095][ T30] audit: type=1400 audit(1789414585.327:798): avc: denied { write } for pid=13182 comm="syz.5.1985" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 918.616625][ T30] audit: type=1400 audit(1789414585.347:799): avc: denied { map } for pid=13180 comm="syz.4.1984" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 919.085136][T13189] syz.4.1984 (13189): drop_caches: 2 [ 919.214287][ T25] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 919.214304][ T25] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 919.226942][ T25] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 919.226965][ T25] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 919.227157][ T25] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 919.370412][T13195] binder: 13192:13195 ioctl c0306201 0 returned -14 [ 919.853047][ T25] usb 2-1: USB disconnect, device number 48 [ 919.937914][T13203] overlayfs: failed to resolve 'work': -2 [ 920.691276][ T5723] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 920.759392][T13215] isp1760 pcspkr: error -ENXIO: IRQ index 0 not found [ 920.852413][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 920.852912][ T5723] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 920.854743][ T5723] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 920.854769][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.854786][ T5723] usb 5-1: config 0 has no interface number 0 [ 920.865420][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.865445][ T5723] usb 5-1: Product: syz [ 920.865458][ T5723] usb 5-1: Manufacturer: syz [ 920.865471][ T5723] usb 5-1: SerialNumber: syz [ 920.882025][ T5723] usb 5-1: config 0 descriptor?? [ 920.884113][ T5723] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 920.890055][ T5723] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 921.185550][T13226] ptp ptp0: new virtual clock ptp1 [ 921.185575][T13226] ptp ptp0: guarantee physical clock free running [ 921.242706][T13230] /dev/nullb0: Can't open blockdev [ 921.653197][T13241] overlayfs: failed to resolve 'work': -2 [ 922.750504][ T44] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 922.901713][ T44] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 922.902706][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.902745][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 922.902769][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 922.902794][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 922.902821][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 922.905802][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 922.905825][ T44] usb 4-1: Product: syz [ 922.905839][ T44] usb 4-1: Manufacturer: syz [ 922.905854][ T44] usb 4-1: SerialNumber: syz [ 922.914823][ T44] usb 4-1: config 0 descriptor?? [ 923.040481][ T30] audit: type=1400 audit(1789414590.167:800): avc: denied { read } for pid=13260 comm="syz.0.2013" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 923.122965][ T44] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 923.122990][ T44] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 923.235853][T13265] svc: failed to register lockdv1 RPC service (errno 111). [ 923.236091][T13265] lockd_up: makesock failed, error=-111 [ 923.323740][ T44] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 923.323766][ T44] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 923.323974][ T44] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 923.328073][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 923.347164][ T44] usb 4-1: USB disconnect, device number 58 [ 923.375874][ T5723] usb 5-1: USB disconnect, device number 58 [ 923.658572][T13276] overlayfs: failed to resolve 'upper': -2 [ 924.712873][T13284] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 924.715627][T13265] svc: failed to register nfsdv3 RPC service (errno 111). [ 924.719872][T13265] svc: failed to register nfsaclv3 RPC service (errno 111). [ 924.719891][T13265] failed to unregister tcp with rpcbind [ 924.758393][T13265] svc: failed to register nfsdv3 RPC service (errno 97). [ 924.758417][T13265] svc: failed to register nfsaclv3 RPC service (errno 97). [ 924.758430][T13265] failed to unregister tcp with rpcbind [ 924.857679][T13285] comedi comedi1: comedi_bond: 0:2 attached, 32 channels from 1 devices [ 924.859808][T13284] [ 924.870560][T13284] ============================================ [ 924.876716][T13284] WARNING: possible recursive locking detected [ 924.882877][T13284] syzkaller #0 Tainted: G L [ 924.888860][T13284] -------------------------------------------- [ 924.895007][T13284] syz.5.2020/13284 is trying to acquire lock: [ 924.901095][T13284] ffff8880338590f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 924.909978][T13284] [ 924.909978][T13284] but task is already holding lock: [ 924.917340][T13284] ffff8880338588f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 924.927060][T13284] [ 924.927060][T13284] other info that might help us debug this: [ 924.935152][T13284] Possible unsafe locking scenario: [ 924.935152][T13284] [ 924.942607][T13284] CPU0 [ 924.945887][T13284] ---- [ 924.949163][T13284] lock(&dev->mutex#4); [ 924.953420][T13284] lock(&dev->mutex#4); [ 924.957675][T13284] [ 924.957675][T13284] *** DEADLOCK *** [ 924.957675][T13284] [ 924.965826][T13284] May be due to missing lock nesting notation [ 924.965826][T13284] [ 924.974204][T13284] locks held by syz.5.2020/13284: 1, last CPU#0: [ 924.980553][T13284] #0: ffff8880338588f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 924.990748][T13284] [ 924.990748][T13284] stack backtrace: [ 924.996638][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.5.2020 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.007583][T13284] Tainted: [L]=SOFTLOCKUP [ 925.011906][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 925.021970][T13284] Call Trace: [ 925.025681][T13284] [ 925.028615][T13284] dump_stack_lvl+0x100/0x190 [ 925.033308][T13284] print_deadlock_bug.cold+0xbd/0xca [ 925.038609][T13284] __lock_acquire+0x13f4/0x1f40 [ 925.043471][T13284] lock_acquire+0x1d1/0x380 [ 925.047991][T13284] ? comedi_do_insn+0x2e/0x360 [ 925.052770][T13284] ? __pfx___might_resched+0x10/0x10 [ 925.058054][T13284] __mutex_lock+0x1a4/0x1bd0 [ 925.062661][T13284] ? comedi_do_insn+0x2e/0x360 [ 925.067437][T13284] ? comedi_do_insn+0x2e/0x360 [ 925.072216][T13284] ? kernel_text_address+0x8d/0x100 [ 925.077461][T13284] ? __pfx___mutex_lock+0x10/0x10 [ 925.082509][T13284] ? lock_acquire+0x1d1/0x380 [ 925.087201][T13284] ? comedi_dio_bitfield2+0xdb/0x420 [ 925.092499][T13284] ? __pfx___might_resched+0x10/0x10 [ 925.097789][T13284] ? rcu_is_watching+0x13/0xc0 [ 925.102543][T13284] ? __up_read+0x333/0x980 [ 925.106948][T13284] ? comedi_do_insn+0x2e/0x360 [ 925.111691][T13284] comedi_do_insn+0x2e/0x360 [ 925.116265][T13284] comedi_dio_bitfield2+0x3c0/0x420 [ 925.121444][T13284] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 925.127154][T13284] bonding_dio_insn_bits+0x2b9/0x570 [ 925.132432][T13284] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 925.138230][T13284] ? comedi_check_chanlist+0x27e/0x300 [ 925.143675][T13284] parse_insn+0x1326/0x19f0 [ 925.148172][T13284] ? __might_fault+0xc5/0x140 [ 925.152837][T13284] ? __pfx_parse_insn+0x10/0x10 [ 925.157686][T13284] do_insn_ioctl+0x152/0x4e0 [ 925.162264][T13284] comedi_unlocked_ioctl+0xf68/0x3310 [ 925.167637][T13284] ? tomoyo_path_number_perm+0x188/0x580 [ 925.173255][T13284] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 925.179059][T13284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.184963][T13284] ? do_vfs_ioctl+0x226/0x13e0 [ 925.189736][T13284] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 925.194837][T13284] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 925.201330][T13284] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 925.208168][T13284] ? __fget_files+0x34/0x3d0 [ 925.212752][T13284] ? selinux_file_ioctl+0x13b/0x290 [ 925.217936][T13284] ? selinux_file_ioctl+0xb6/0x290 [ 925.223040][T13284] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 925.228841][T13284] __x64_sys_ioctl+0x18e/0x210 [ 925.233602][T13284] do_syscall_64+0x123/0x790 [ 925.238180][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.244088][T13284] RIP: 0033:0x7ff38759e159 [ 925.248522][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.268139][T13284] RSP: 002b:00007ff3883b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.276556][T13284] RAX: ffffffffffffffda RBX: 00007ff387825fa0 RCX: 00007ff38759e159 [ 925.284512][T13284] RDX: 0000200000000400 RSI: 000000008028640c RDI: 0000000000000004 [ 925.292467][T13284] RBP: 00007ff38763503b R08: 0000000000000000 R09: 0000000000000000 [ 925.300421][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.308372][T13284] R13: 00007ff387826038 R14: 00007ff387825fa0 R15: 00007ffc10798568 [ 925.316333][T13284] [ 926.330910][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.330948][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.580254][ T4970] udevd[4970]: worker [8944] /devices/virtual/block/nbd0 is taking a long time