last executing test programs: 15.252946725s ago: executing program 3 (id=1206): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r4], 0x0, 0x105, 0x0, 0x1, 0x10201}, 0x28) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x5) 14.387699329s ago: executing program 3 (id=1211): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="001c001003000000000000000002000000", @ANYBLOB="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", @ANYBLOB="2000ea080a000100000000000000000005000c0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./config/nvmet/ports/1\x00', &(0x7f0000000100)='rootfs\x00', 0x2000, &(0x7f0000000140)='GPL\x00') r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x604141, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32=r9, @ANYRES64=r5, @ANYRES8=r7, @ANYRES16=r8, @ANYBLOB="66f2221c60377054d4439050a7fa142b318af216c2c00fcb86d24f5e8b3ef4800a5a91964900a38a50c36b59ad30b7c62fd4711894fa556a5f61edf9dd51f1d0ab602316ea26b588468b5e5a08e12286581a7f750f90565baaf955c08e440e467389dd6b8d9124097fe3b196815d23946d49176baa34b85d05493acc913d6d99cd0930c55a496489ce61455e4c25dedd6968c0147be80234603bc6343f19b16afa6b8ae3f36f75caffb2f822570a97c545"], 0x3c}}, 0x4084885) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400004c5f108b5e9f5f3a410d29b21ee3d3001000010428bd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="1b2e010001a001001400128009000100697069700000000004000280"], 0x34}}, 0x20004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000000280)='tcp', 0x3) openat(0xffffffffffffff9c, 0x0, 0x442, 0x166) 11.527513781s ago: executing program 0 (id=1215): mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="000000005b4eba7aeaccd2c62b2b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r5, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) r6 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, 0x0, 0x0) 11.489556871s ago: executing program 3 (id=1216): mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="000000005b4eba7aeaccd2c62b2b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r5, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) r6 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, 0x0, 0x0) 8.47106625s ago: executing program 3 (id=1217): timer_create(0x7, &(0x7f0000000040)={0x0, 0x33, 0x4, @thr={&(0x7f0000003d80), 0x0}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0xfcff, 0x200000000000000, 0x0}) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.919641008s ago: executing program 0 (id=1221): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r4], 0x0, 0x105, 0x0, 0x1, 0x10201}, 0x28) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x5) 6.381455998s ago: executing program 1 (id=1222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x0, &(0x7f00000010c0), &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.257841626s ago: executing program 4 (id=1223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4012, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) 4.972729523s ago: executing program 2 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006400000000000008000000000000000000000000000000002bca04dbbd00001a7a3659bf572d40fcdc8cccea04300877b80a7321501d64a9a2e87c7a373c8eefda6db98193e2bb"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x20) writev(r1, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}], 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="bfa20000000000000700000000ffffa300000000000007030080f0ff495c13d56c29ffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000000000085000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x49, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xaa, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0xcb, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x2008, 0x4c74, 0xffff7dff, 0x7, 0x3, 0xe, 0x1, 0x80008071, 0x4, 0x17, 0xffffffff, 0x6, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432f5, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x8, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c9368f, 0x40, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x101, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x8, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x9, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0xd5cf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x5, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x20000000, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x2, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0xa, 0x9, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, r3, 0x4004) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='9p\x80', &(0x7f0000000900)='./tracefs_dir\x00', 0xffffffffffffff9c) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) 4.610882734s ago: executing program 1 (id=1226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006400000000000008000000000000000000000000000000002bca04dbbd00001a7a3659bf572d40fcdc8cccea04300877b80a7321501d64a9a2e87c7a373c8eefda6db98193e2bb"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x20) writev(r1, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}], 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="bfa20000000000000700000000ffffa300000000000007030080f0ff495c13d56c29ffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000000000085000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x49, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xaa, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0xcb, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x2008, 0x4c74, 0xffff7dff, 0x7, 0x3, 0xe, 0x1, 0x80008071, 0x4, 0x17, 0xffffffff, 0x6, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432f5, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x8, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c9368f, 0x40, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x101, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x8, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x9, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0xd5cf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x5, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x20000000, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x2, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0xa, 0x9, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) 4.062467164s ago: executing program 0 (id=1227): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3.947981022s ago: executing program 4 (id=1228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0xfc, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.74892123s ago: executing program 4 (id=1229): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000000001000000000000"], 0x40}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x2000000000000135, &(0x7f00000000c0)=ANY=[@ANYBLOB="e5c6c07386e13e00", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.499349873s ago: executing program 0 (id=1230): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x711301, 0x0) write(r1, &(0x7f0000000000)='255\x00', 0x4) select(0x40, &(0x7f0000000100)={0x4, 0x0, 0x8000000000000000, 0x5, 0x9, 0x5, 0x8000000000000001, 0x9}, &(0x7f0000000140)={0x0, 0x6fb, 0x4, 0x7fff, 0x8, 0x10000, 0x9, 0x9}, &(0x7f0000000180)={0xdbba, 0x3, 0xfffffffffffff000, 0x10001, 0x757d, 0xb4, 0x4, 0x6}, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a310400000040000000030a010200000000000000000100ffff0900030073797a32000000001400048008000240000000a392000140000000050900010073790100000000002c000000050a1b000000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r3, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r3, 0x1000}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) 2.478605837s ago: executing program 2 (id=1231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) shutdown(0xffffffffffffffff, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1000}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x2aeca95b4210887f, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write(r6, &(0x7f0000000280)='tcp', 0x3) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) 2.468622037s ago: executing program 3 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006400000000000008000000000000000000000000000000002bca04dbbd00001a7a3659bf572d40fcdc8cccea04300877b80a7321501d64a9a2e87c7a373c8eefda6db98193e2bb"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) 2.38091997s ago: executing program 4 (id=1233): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.196995644s ago: executing program 1 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.736431956s ago: executing program 1 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x2000007b, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2df6607a027f331c", "746f14acd71651a1915685fd0e41be1a", "fcff1f19", "a3e75663d6d903d5"}, 0x28) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) 1.639969604s ago: executing program 2 (id=1236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x4, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.588304391s ago: executing program 0 (id=1237): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r4], 0x0, 0x105, 0x0, 0x1, 0x10201}, 0x28) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x5) 1.284380296s ago: executing program 2 (id=1238): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00V\x13\xdb\xbc', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) 1.280980482s ago: executing program 4 (id=1239): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = socket(0xa, 0x3, 0xff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008044}, 0x40044) close(r1) 719.569985ms ago: executing program 4 (id=1240): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 591.970148ms ago: executing program 2 (id=1241): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0xe}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xffffffffffffff50, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x8000000}}, @NETEM_LOSS_GE={0x0, 0x2, {0x80000000, 0x9, 0xe043, 0x6}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3}}]}}}]}, 0x9c}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x10, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x4, 0x1, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0xf, 0x4) 539.400402ms ago: executing program 1 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) bind$netlink(r0, &(0x7f0000000b40)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (fail_nth: 1) 340.727412ms ago: executing program 1 (id=1243): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15060b0000d700002800128008000100736974001c00028005000a00fe000000050005000600000006000800"], 0x48}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x4, 0x58, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x0, 0xfffffffe}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15060b0000d700002800128008000100736974001c00028005000a00fe000000050005000600000006000800"], 0x48}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x4, 0x58, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) (async) 269.719926ms ago: executing program 0 (id=1244): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x4285040, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x840000000002, 0x3, 0x100) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x20000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e2000dfffffffffffffff000000000000000000", @ANYRES32=0x0], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0182101, &(0x7f00000004c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d72646d612c706f7274563078303030303030303030303030346532332ca4d2f10500d800b56fa0404194242d7651367f4e82e5519c72d29efa8fcfc314cb37ade64120a72ac5e9d6f3d272e9e7b606229829d9a4799ff71597"]) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x121403) 188.322934ms ago: executing program 3 (id=1245): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002300)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9a1a0e1497511b7b457b7230000f6fb4db045d781479bd3f7a9979904c808eb8d10c0ac629e27b100d1e6c415892b350d17f504f1a567d00a69198e"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 0s ago: executing program 2 (id=1246): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) kernel console output (not intermixed with test programs): [ 477.914285][ T9003] _copy_from_user+0x2d/0xb0 [ 477.914311][ T9003] memdup_user+0x5e/0xd0 [ 477.914366][ T9003] strndup_user+0x68/0xd0 [ 477.914390][ T9003] __se_sys_mount+0xdf/0x420 [ 477.914410][ T9003] ? ksys_write+0x248/0x270 [ 477.914432][ T9003] ? __pfx___se_sys_mount+0x10/0x10 [ 477.914455][ T9003] ? __x64_sys_mount+0x20/0xc0 [ 477.914489][ T9003] do_syscall_64+0x166/0x520 [ 477.914511][ T9003] ? trace_irq_disable+0x3b/0x140 [ 477.914531][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.914550][ T9003] ? clear_bhb_loop+0x70/0xc0 [ 477.914571][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.914588][ T9003] RIP: 0033:0x7f69feade159 [ 477.914605][ T9003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.914620][ T9003] RSP: 002b:00007f69fccf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 477.914639][ T9003] RAX: ffffffffffffffda RBX: 00007f69fed66180 RCX: 00007f69feade159 [ 477.914652][ T9003] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000200 [ 477.914665][ T9003] RBP: 00007f69fccf4090 R08: 0000200000000340 R09: 0000000000000000 [ 477.914676][ T9003] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 477.914688][ T9003] R13: 00007f69fed66218 R14: 00007f69fed66180 R15: 00007fffc234a7a8 [ 477.914718][ T9003] [ 478.074239][ T5590] usb 2-1: Using ep0 maxpacket: 8 [ 478.075396][ T5845] usb 4-1: USB disconnect, device number 15 [ 478.080361][ T5590] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 478.112087][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.112114][ T5590] usb 2-1: Product: syz [ 478.112128][ T5590] usb 2-1: Manufacturer: syz [ 478.112140][ T5590] usb 2-1: SerialNumber: syz [ 478.136527][ T5590] usb 2-1: config 0 descriptor?? [ 478.181569][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 478.187768][ T37] audit: type=1800 audit(1788650553.092:1579): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124573 res=0 errno=0 [ 478.217747][ T37] audit: type=1800 audit(1788650553.132:1580): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=124605 res=0 errno=0 [ 478.239569][ T37] audit: type=1800 audit(1788650553.152:1581): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=124580 res=0 errno=0 [ 478.261879][ T37] audit: type=1800 audit(1788650553.172:1582): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=124581 res=0 errno=0 [ 478.451046][ T5590] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.540423][ T37] audit: type=1800 audit(1788650553.452:1583): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.876" name="new_id" dev="sysfs" ino=21100 res=0 errno=0 [ 478.677128][ T5590] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 478.691656][ T980] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 478.706473][ T980] lpc_ich 0000:00:00.0: No MFD cells added [ 478.722009][ T37] audit: type=1800 audit(1788650553.632:1584): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=124602 res=0 errno=0 [ 478.724126][ T37] audit: type=1800 audit(1788650553.642:1585): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=124603 res=0 errno=0 [ 478.731909][ T37] audit: type=1800 audit(1788650553.642:1586): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=124582 res=0 errno=0 [ 478.741346][ T37] audit: type=1800 audit(1788650553.652:1587): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=124604 res=0 errno=0 [ 478.763880][ T37] audit: type=1800 audit(1788650553.672:1588): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124625 res=0 errno=0 [ 478.855080][ T980] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 478.862224][ T980] lpc_ich 0000:00:01.0: No MFD cells added [ 479.038003][ T980] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 479.048748][ T980] lpc_ich 0000:00:05.0: No MFD cells added [ 479.249971][ T9017] nvmet: Invalid value 't' for trtype [ 479.434158][ T9015] nvme nvme0: rdma_resolve_addr failed (-19). [ 480.651370][ T9025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.965655][ T5735] usb 2-1: USB disconnect, device number 18 [ 482.705984][ T9047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.580474][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 483.580552][ T37] audit: type=1800 audit(1788650558.492:1602): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 483.630584][ T37] audit: type=1800 audit(1788650558.542:1603): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 483.756946][ T37] audit: type=1800 audit(1788650558.582:1604): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 483.756995][ T37] audit: type=1800 audit(1788650558.602:1605): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 483.848903][ T37] audit: type=1800 audit(1788650558.762:1606): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 483.914014][ T37] audit: type=1800 audit(1788650558.822:1607): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 483.986776][ T9059] netlink: 72 bytes leftover after parsing attributes in process `syz.0.889'. [ 485.247124][ T37] audit: type=1800 audit(1788650560.162:1608): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 485.427134][ T37] audit: type=1800 audit(1788650560.322:1609): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 485.531439][ T37] audit: type=1800 audit(1788650560.442:1610): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 485.832668][ T5845] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 486.136883][ T9076] FAULT_INJECTION: forcing a failure. [ 486.136883][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 486.137893][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.1.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.137918][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.137930][ T9076] Call Trace: [ 486.137939][ T9076] [ 486.137947][ T9076] dump_stack_lvl+0xe8/0x150 [ 486.137981][ T9076] should_fail_ex+0x46b/0x600 [ 486.138009][ T9076] should_failslab+0xa8/0x100 [ 486.138035][ T9076] ? __pmd_alloc+0xa4/0x5e0 [ 486.138055][ T9076] kmem_cache_alloc_noprof+0x9e/0x690 [ 486.138079][ T9076] ? __pmd_alloc+0xa4/0x5e0 [ 486.138105][ T9076] __pmd_alloc+0xa4/0x5e0 [ 486.138131][ T9076] handle_mm_fault+0x2198/0x28c0 [ 486.138158][ T9076] ? handle_mm_fault+0xeb/0x28c0 [ 486.138189][ T9076] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.138231][ T9076] ? lock_mm_and_find_vma+0xa7/0x340 [ 486.138258][ T9076] do_user_addr_fault+0x746/0x1340 [ 486.138337][ T9076] exc_page_fault+0x6a/0xc0 [ 486.138361][ T9076] asm_exc_page_fault+0x26/0x30 [ 486.138379][ T9076] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 486.138406][ T9076] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 34 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 486.138421][ T9076] RSP: 0018:ffffc90007977c10 EFLAGS: 00050206 [ 486.138438][ T9076] RAX: 00007ffffffff001 RBX: 0000000000001000 RCX: 0000000000001000 [ 486.138450][ T9076] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88803b9b2000 [ 486.138463][ T9076] RBP: 0000000000000000 R08: ffff88803b9b2fff R09: 1ffff110077365ff [ 486.138475][ T9076] R10: dffffc0000000000 R11: ffffed1007736600 R12: 0000000000000000 [ 486.138488][ T9076] R13: 0000000000000000 R14: ffff88803b9b2000 R15: 0000000000000000 [ 486.138517][ T9076] _copy_from_user+0x7a/0xb0 [ 486.138541][ T9076] mem_rw+0x3a1/0x600 [ 486.138587][ T9076] ? __pfx_mem_write+0x10/0x10 [ 486.138605][ T9076] vfs_write+0x29f/0xbb0 [ 486.138635][ T9076] ? __pfx_vfs_write+0x10/0x10 [ 486.138658][ T9076] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.138682][ T9076] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.138703][ T9076] ? mutex_lock_nested+0x152/0x1d0 [ 486.138727][ T9076] ? fdget_pos+0x252/0x320 [ 486.138755][ T9076] ksys_write+0x156/0x270 [ 486.138778][ T9076] ? __pfx_ksys_write+0x10/0x10 [ 486.138810][ T9076] do_syscall_64+0x166/0x520 [ 486.138831][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.138849][ T9076] ? clear_bhb_loop+0x70/0xc0 [ 486.138871][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.138889][ T9076] RIP: 0033:0x7fa78ccbe159 [ 486.138906][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.138920][ T9076] RSP: 002b:00007fa78aed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.138938][ T9076] RAX: ffffffffffffffda RBX: 00007fa78cf46180 RCX: 00007fa78ccbe159 [ 486.138951][ T9076] RDX: 00000000fffffd68 RSI: 0000000000000000 RDI: 0000000000000005 [ 486.138963][ T9076] RBP: 00007fa78aed4090 R08: 0000000000000000 R09: 0000000000000000 [ 486.138974][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.138985][ T9076] R13: 00007fa78cf46218 R14: 00007fa78cf46180 R15: 00007ffc6921f898 [ 486.139017][ T9076] [ 486.680277][ T5596] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 487.195654][ T37] audit: type=1800 audit(1788650562.082:1611): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 487.224871][ T5845] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 487.235497][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 487.235527][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 487.235549][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 487.238493][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.238516][ T5845] usb 3-1: Product: syz [ 487.238529][ T5845] usb 3-1: Manufacturer: syz [ 487.238543][ T5845] usb 3-1: SerialNumber: syz [ 487.263963][ T5596] usb 4-1: Using ep0 maxpacket: 32 [ 487.265524][ T5596] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 487.266979][ T5596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.267006][ T5596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.267040][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.433912][ T5845] usb 3-1: config 0 descriptor?? [ 487.445695][ T5596] usb 4-1: config 0 descriptor?? [ 487.501366][ T5596] hub 4-1:0.0: USB hub found [ 487.810668][ T5596] hub 4-1:0.0: 1 port detected [ 487.847518][ T5845] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 488.313438][ T9089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.563369][ T5845] usb 3-1: USB disconnect, device number 22 [ 488.627665][ T9086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 488.699256][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 488.699337][ T37] audit: type=1800 audit(1788650563.612:1630): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124912 res=0 errno=0 [ 488.891424][ T37] audit: type=1800 audit(1788650563.802:1631): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 489.030219][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 489.092297][ T9095] 9pnet_virtio: no channels available for device 127.0.0.1 [ 489.113074][ T37] audit: type=1800 audit(1788650563.962:1632): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 489.149582][ T37] audit: type=1800 audit(1788650564.062:1633): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 490.456933][ T37] audit: type=1800 audit(1788650565.362:1634): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 490.529646][ T37] audit: type=1800 audit(1788650565.442:1635): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 490.539803][ T5845] usb 4-1: USB disconnect, device number 16 [ 491.532820][ T37] audit: type=1800 audit(1788650566.442:1636): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 491.791409][ T9131] vivid-000: ================= START STATUS ================= [ 491.830720][ T9131] vivid-000: Generate PTS: true [ 491.843462][ T9131] vivid-000: Generate SCR: true [ 491.843540][ T9131] tpg source WxH: 1280x720 (Y'CbCr) [ 491.843608][ T9131] tpg field: 1 [ 491.843616][ T9131] tpg crop: (0,0)/1280x720 [ 491.843628][ T9131] tpg compose: (0,0)/1280x720 [ 491.843640][ T9131] tpg colorspace: 3 [ 491.843648][ T9131] tpg transfer function: 0/0 [ 491.843657][ T9131] tpg Y'CbCr encoding: 0/0 [ 491.843666][ T9131] tpg quantization: 0/0 [ 491.843675][ T9131] tpg RGB range: 0/1 [ 491.843683][ T9131] vivid-000: ================== END STATUS ================== [ 492.281448][ T37] audit: type=1800 audit(1788650567.192:1637): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 492.376471][ T9138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.181381][ T37] audit: type=1800 audit(1788650568.092:1638): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 493.243205][ T37] audit: type=1800 audit(1788650568.152:1639): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 493.273936][ T5845] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 493.505344][ T5845] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 493.577293][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 493.580488][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 493.580518][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 493.642362][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.642411][ T5845] usb 4-1: Product: syz [ 493.642420][ T5845] usb 4-1: Manufacturer: syz [ 493.642427][ T5845] usb 4-1: SerialNumber: syz [ 493.705658][ T5845] usb 4-1: config 0 descriptor?? [ 493.708385][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 493.708403][ T37] audit: type=1800 audit(1788650568.612:1645): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125095 res=0 errno=0 [ 493.745222][ T37] audit: type=1800 audit(1788650568.662:1646): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=125127 res=0 errno=0 [ 493.753937][ T37] audit: type=1800 audit(1788650568.662:1647): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125102 res=0 errno=0 [ 493.760542][ T37] audit: type=1800 audit(1788650568.672:1648): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125103 res=0 errno=0 [ 493.872033][ T37] audit: type=1800 audit(1788650568.782:1649): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 493.951505][ T37] audit: type=1800 audit(1788650568.862:1650): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 494.021983][ T5845] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 494.045543][ T37] audit: type=1800 audit(1788650568.952:1651): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=125124 res=0 errno=0 [ 494.048715][ T37] audit: type=1800 audit(1788650568.962:1652): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=125125 res=0 errno=0 [ 494.058068][ T37] audit: type=1800 audit(1788650568.972:1653): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=125104 res=0 errno=0 [ 494.064253][ T37] audit: type=1800 audit(1788650568.972:1654): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=125126 res=0 errno=0 [ 494.229638][ T5845] usb 4-1: USB disconnect, device number 17 [ 494.531577][ T9155] FAULT_INJECTION: forcing a failure. [ 494.531577][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 494.532817][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.0.916 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 494.532842][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.532853][ T9155] Call Trace: [ 494.532860][ T9155] [ 494.532868][ T9155] dump_stack_lvl+0xe8/0x150 [ 494.532901][ T9155] should_fail_ex+0x46b/0x600 [ 494.532927][ T9155] should_failslab+0xa8/0x100 [ 494.532953][ T9155] ? security_file_alloc+0x34/0x310 [ 494.532972][ T9155] kmem_cache_alloc_noprof+0x9e/0x690 [ 494.532993][ T9155] ? rcu_is_watching+0x16/0xb0 [ 494.533017][ T9155] ? security_file_alloc+0x34/0x310 [ 494.533035][ T9155] ? alloc_empty_file+0x5b/0x1d0 [ 494.533063][ T9155] security_file_alloc+0x34/0x310 [ 494.533084][ T9155] init_file+0x96/0x2d0 [ 494.533110][ T9155] alloc_empty_file+0x74/0x1d0 [ 494.533135][ T9155] alloc_file_pseudo+0x115/0x1e0 [ 494.533175][ T9155] ? __rcu_read_unlock+0x83/0xe0 [ 494.533198][ T9155] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 494.533232][ T9155] anon_inode_getfd+0xc8/0x200 [ 494.533297][ T9155] bpf_enable_stats+0xdc/0x140 [ 494.533324][ T9155] __sys_bpf+0xb34/0xd90 [ 494.533355][ T9155] ? __pfx___sys_bpf+0x10/0x10 [ 494.533375][ T9155] ? __schedule+0x16ef/0x5700 [ 494.533397][ T9155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 494.533443][ T9155] ? ksys_write+0x248/0x270 [ 494.533474][ T9155] __x64_sys_bpf+0xba/0xd0 [ 494.533499][ T9155] do_syscall_64+0x166/0x520 [ 494.533521][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.533539][ T9155] ? clear_bhb_loop+0x70/0xc0 [ 494.533561][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.533579][ T9155] RIP: 0033:0x7f3de732e159 [ 494.533597][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.533611][ T9155] RSP: 002b:00007f3de5565028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.533630][ T9155] RAX: ffffffffffffffda RBX: 00007f3de75b6090 RCX: 00007f3de732e159 [ 494.533644][ T9155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 494.533655][ T9155] RBP: 00007f3de5565090 R08: 0000000000000000 R09: 0000000000000000 [ 494.533666][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.533676][ T9155] R13: 00007f3de75b6128 R14: 00007f3de75b6090 R15: 00007ffceebaf198 [ 494.533707][ T9155] [ 495.663933][ T5845] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 496.056860][ T9173] FAULT_INJECTION: forcing a failure. [ 496.056860][ T9173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.079903][ T5845] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 496.090243][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 496.090276][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.090298][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 496.093195][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.093220][ T5845] usb 1-1: Product: syz [ 496.093233][ T5845] usb 1-1: Manufacturer: syz [ 496.093246][ T5845] usb 1-1: SerialNumber: syz [ 496.144500][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.3.922 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.144528][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.144539][ T9173] Call Trace: [ 496.144547][ T9173] [ 496.144556][ T9173] dump_stack_lvl+0xe8/0x150 [ 496.144588][ T9173] should_fail_ex+0x46b/0x600 [ 496.144616][ T9173] prepare_alloc_pages+0x223/0x650 [ 496.144646][ T9173] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 496.144675][ T9173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.144703][ T9173] ? __pfx_policy_nodemask+0x10/0x10 [ 496.144734][ T9173] ? unwind_get_return_address+0x4d/0x90 [ 496.144757][ T9173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 496.144815][ T9173] alloc_pages_mpol+0xd4/0x280 [ 496.144844][ T9173] alloc_pages_noprof+0xd2/0x2f0 [ 496.144872][ T9173] __pud_alloc+0x3a/0x460 [ 496.144898][ T9173] handle_mm_fault+0x2131/0x28c0 [ 496.144924][ T9173] ? handle_mm_fault+0xeb/0x28c0 [ 496.144955][ T9173] ? __pfx_handle_mm_fault+0x10/0x10 [ 496.144989][ T9173] ? __lock_acquire+0x6df/0x2e40 [ 496.145017][ T9173] ? lock_mm_and_find_vma+0xa7/0x340 [ 496.145043][ T9173] do_user_addr_fault+0x746/0x1340 [ 496.145078][ T9173] exc_page_fault+0x6a/0xc0 [ 496.145101][ T9173] asm_exc_page_fault+0x26/0x30 [ 496.145119][ T9173] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 496.145146][ T9173] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 496.145161][ T9173] RSP: 0018:ffffc9000aabfcb8 EFLAGS: 00050246 [ 496.145179][ T9173] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 496.145191][ T9173] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000aabfd60 [ 496.145203][ T9173] RBP: ffffc9000aabfe68 R08: ffffc9000aabfd67 R09: 1ffff92001557fac [ 496.145217][ T9173] R10: dffffc0000000000 R11: fffff52001557fad R12: 1ffff92001557fa4 [ 496.145229][ T9173] R13: 0000200000000000 R14: ffffc9000aabfd60 R15: 0000200000000000 [ 496.145278][ T9173] _copy_from_user+0x7a/0xb0 [ 496.145302][ T9173] vt_ioctl+0x13aa/0x20e0 [ 496.145326][ T9173] ? vt_ioctl+0x141/0x20e0 [ 496.145350][ T9173] ? __pfx_vt_ioctl+0x10/0x10 [ 496.145375][ T9173] ? __asan_memset+0x22/0x50 [ 496.145397][ T9173] ? smack_file_ioctl+0x265/0x370 [ 496.145418][ T9173] ? __pfx_smack_file_ioctl+0x10/0x10 [ 496.145448][ T9173] ? tty_jobctrl_ioctl+0x358/0xb50 [ 496.145471][ T9173] ? __fget_files+0x2a/0x420 [ 496.145493][ T9173] tty_ioctl+0x926/0xde0 [ 496.145518][ T9173] ? __pfx_tty_ioctl+0x10/0x10 [ 496.145536][ T9173] __se_sys_ioctl+0xff/0x170 [ 496.145560][ T9173] do_syscall_64+0x166/0x520 [ 496.145580][ T9173] ? trace_irq_disable+0x3b/0x140 [ 496.145601][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.145620][ T9173] ? clear_bhb_loop+0x70/0xc0 [ 496.145642][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.145665][ T9173] RIP: 0033:0x7f19a38fe159 [ 496.145682][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.145696][ T9173] RSP: 002b:00007f19a1b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.145714][ T9173] RAX: ffffffffffffffda RBX: 00007f19a3b85fa0 RCX: 00007f19a38fe159 [ 496.145733][ T9173] RDX: 0000200000000000 RSI: 0000000000004b52 RDI: 0000000000000003 [ 496.145745][ T9173] RBP: 00007f19a1b56090 R08: 0000000000000000 R09: 0000000000000000 [ 496.145756][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.145767][ T9173] R13: 00007f19a3b86038 R14: 00007f19a3b85fa0 R15: 00007ffc957b4528 [ 496.145798][ T9173] [ 496.720783][ T5845] usb 1-1: config 0 descriptor?? [ 497.351961][ T5845] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 497.431362][ T5845] usb 1-1: USB disconnect, device number 16 [ 497.486669][ T9180] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 497.532767][ T9186] FAULT_INJECTION: forcing a failure. [ 497.532767][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 497.532864][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.532885][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.532894][ T9186] Call Trace: [ 497.532902][ T9186] [ 497.532909][ T9186] dump_stack_lvl+0xe8/0x150 [ 497.532935][ T9186] should_fail_ex+0x46b/0x600 [ 497.532964][ T9186] should_failslab+0xa8/0x100 [ 497.532989][ T9186] ? do_getname+0x2e/0x250 [ 497.533012][ T9186] kmem_cache_alloc_noprof+0x9e/0x690 [ 497.533034][ T9186] ? do_getname+0x2e/0x250 [ 497.533056][ T9186] ? rt_mutex_slowunlock+0x219/0x460 [ 497.533081][ T9186] do_getname+0x2e/0x250 [ 497.533100][ T9186] ? getname_flags+0x11/0x20 [ 497.533125][ T9186] do_sys_openat2+0xcc/0x200 [ 497.533152][ T9186] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.533176][ T9186] ? ksys_write+0x248/0x270 [ 497.533197][ T9186] ? __pfx_ksys_write+0x10/0x10 [ 497.533220][ T9186] __x64_sys_openat+0x138/0x170 [ 497.533248][ T9186] do_syscall_64+0x166/0x520 [ 497.533268][ T9186] ? trace_irq_disable+0x3b/0x140 [ 497.533288][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.533306][ T9186] ? clear_bhb_loop+0x70/0xc0 [ 497.533327][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.533345][ T9186] RIP: 0033:0x7fa78ccbe159 [ 497.533363][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.533378][ T9186] RSP: 002b:00007fa78af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.533397][ T9186] RAX: ffffffffffffffda RBX: 00007fa78cf45fa0 RCX: 00007fa78ccbe159 [ 497.533411][ T9186] RDX: 0000000000082803 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 497.533423][ T9186] RBP: 00007fa78af16090 R08: 0000000000000000 R09: 0000000000000000 [ 497.533435][ T9186] R10: 000000000000008e R11: 0000000000000246 R12: 0000000000000001 [ 497.533446][ T9186] R13: 00007fa78cf46038 R14: 00007fa78cf45fa0 R15: 00007ffc6921f898 [ 497.533475][ T9186] [ 497.937250][ T9196] FAULT_INJECTION: forcing a failure. [ 497.937250][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.937332][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.2.931 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.937354][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.937364][ T9196] Call Trace: [ 497.937371][ T9196] [ 497.937380][ T9196] dump_stack_lvl+0xe8/0x150 [ 497.937411][ T9196] should_fail_ex+0x46b/0x600 [ 497.937437][ T9196] _copy_from_user+0x2d/0xb0 [ 497.937460][ T9196] __se_sys_io_uring_register+0x1bc/0x1a20 [ 497.937488][ T9196] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 497.937520][ T9196] ? ksys_write+0x202/0x270 [ 497.937558][ T9196] do_syscall_64+0x166/0x520 [ 497.937579][ T9196] ? trace_irq_disable+0x3b/0x140 [ 497.937600][ T9196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.937619][ T9196] ? clear_bhb_loop+0x70/0xc0 [ 497.937640][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.937658][ T9196] RIP: 0033:0x7f69feade159 [ 497.937675][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.937690][ T9196] RSP: 002b:00007f69fcd36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 497.937709][ T9196] RAX: ffffffffffffffda RBX: 00007f69fed65fa0 RCX: 00007f69feade159 [ 497.937722][ T9196] RDX: 00002000000003c0 RSI: 000000000000001f RDI: ffffffffffffffff [ 497.937735][ T9196] RBP: 00007f69fcd36090 R08: 0000000000000000 R09: 0000000000000000 [ 497.937746][ T9196] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 497.937757][ T9196] R13: 00007f69fed66038 R14: 00007f69fed65fa0 R15: 00007fffc234a7a8 [ 497.937787][ T9196] [ 498.130625][ T9194] netlink: 144 bytes leftover after parsing attributes in process `syz.4.932'. [ 498.828804][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 498.828874][ T37] audit: type=1800 audit(1788650573.742:1681): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 498.855110][ T5845] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 499.024703][ T5845] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 499.027885][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.027914][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.027936][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 499.030594][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.030617][ T5845] usb 1-1: Product: syz [ 499.030630][ T5845] usb 1-1: Manufacturer: syz [ 499.030643][ T5845] usb 1-1: SerialNumber: syz [ 499.118832][ T5845] usb 1-1: config 0 descriptor?? [ 499.119669][ T37] audit: type=1800 audit(1788650574.022:1682): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125375 res=0 errno=0 [ 499.175490][ T37] audit: type=1800 audit(1788650574.092:1683): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=125407 res=0 errno=0 [ 499.208955][ T37] audit: type=1800 audit(1788650574.122:1684): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125382 res=0 errno=0 [ 499.229670][ T37] audit: type=1800 audit(1788650574.142:1685): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125383 res=0 errno=0 [ 499.306795][ T37] audit: type=1800 audit(1788650574.222:1686): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 499.354121][ T5845] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 499.372793][ T37] audit: type=1800 audit(1788650574.282:1687): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=125404 res=0 errno=0 [ 499.398632][ T37] audit: type=1800 audit(1788650574.312:1688): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=125405 res=0 errno=0 [ 499.422042][ T37] audit: type=1800 audit(1788650574.332:1689): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=125384 res=0 errno=0 [ 499.436559][ T37] audit: type=1800 audit(1788650574.352:1690): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 499.523947][ T36] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 499.586393][ T980] usb 1-1: USB disconnect, device number 17 [ 499.675044][ T36] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 499.685623][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.685654][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.685677][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 499.688459][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.688483][ T36] usb 4-1: Product: syz [ 499.688496][ T36] usb 4-1: Manufacturer: syz [ 499.688509][ T36] usb 4-1: SerialNumber: syz [ 499.807165][ T36] usb 4-1: config 0 descriptor?? [ 500.003987][ T5720] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 500.025175][ T36] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 500.155513][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 500.161072][ T5720] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 500.163574][ T5720] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 500.163599][ T5720] usb 5-1: config 0 has no interface number 0 [ 500.163642][ T5720] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 500.163665][ T5720] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.163686][ T5720] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.222358][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.222425][ T5720] usb 5-1: Product: syz [ 500.222438][ T5720] usb 5-1: Manufacturer: syz [ 500.222450][ T5720] usb 5-1: SerialNumber: syz [ 500.253436][ T36] usb 4-1: USB disconnect, device number 18 [ 500.261602][ T5720] usb 5-1: config 0 descriptor?? [ 500.268819][ T9215] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.297179][ T9222] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 501.177834][ T9228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.581598][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.581961][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.891948][ T5720] usb-storage 5-1:0.20: USB Mass Storage device detected [ 501.941158][ T5720] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 501.954364][ T5720] scsi host1: usb-storage 5-1:0.20 [ 502.020665][ T5720] usb 5-1: USB disconnect, device number 11 [ 502.406219][ T9241] netlink: 108 bytes leftover after parsing attributes in process `syz.1.946'. [ 502.552173][ T9244] netlink: 144 bytes leftover after parsing attributes in process `syz.3.947'. [ 504.018108][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 504.018272][ T37] audit: type=1800 audit(1788650578.922:1731): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.950" name="addr_trtype" dev="configfs" ino=20045 res=0 errno=0 [ 505.605556][ T37] audit: type=1800 audit(1788650580.522:1732): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 505.704869][ T37] audit: type=1800 audit(1788650580.612:1733): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 505.744133][ T37] audit: type=1800 audit(1788650580.662:1734): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 505.779778][ T37] audit: type=1800 audit(1788650580.692:1735): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 505.815636][ T37] audit: type=1800 audit(1788650580.732:1736): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 505.842303][ T9272] hpfs: Bad magic ... probably not HPFS [ 505.867418][ T37] audit: type=1800 audit(1788650580.782:1737): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 506.213952][ T5590] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 506.249747][ T37] audit: type=1800 audit(1788650581.122:1738): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 506.952569][ T9289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.490056][ T5590] usb 1-1: unable to get BOS descriptor or descriptor too short [ 507.498198][ T5590] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 507.502590][ T5590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.502615][ T5590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.502660][ T5590] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.566860][ T5590] usb 1-1: language id specifier not provided by device, defaulting to English [ 507.576619][ T37] audit: type=1800 audit(1788650582.492:1739): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 507.602361][ T5590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 507.610518][ T5590] usb 1-1: Product: syz [ 507.610537][ T5590] usb 1-1: Manufacturer: syz [ 507.762016][ T37] audit: type=1800 audit(1788650582.672:1740): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 507.850241][ T5590] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 508.095980][ T9308] netlink: 144 bytes leftover after parsing attributes in process `syz.2.963'. [ 509.075595][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 509.075630][ T37] audit: type=1800 audit(1788650583.752:1743): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 509.075676][ T37] audit: type=1800 audit(1788650583.762:1744): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 509.075714][ T37] audit: type=1800 audit(1788650583.892:1745): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125880 res=0 errno=0 [ 509.075752][ T37] audit: type=1800 audit(1788650583.902:1746): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=125911 res=0 errno=0 [ 509.075789][ T37] audit: type=1800 audit(1788650583.902:1747): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125887 res=0 errno=0 [ 509.075825][ T37] audit: type=1800 audit(1788650583.902:1748): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125888 res=0 errno=0 [ 509.333883][ T37] audit: type=1800 audit(1788650584.192:1749): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 509.517613][ T37] audit: type=1800 audit(1788650584.432:1750): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 509.574044][ T5590] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 509.603966][ T5590] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 509.614206][ T5590] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 509.623990][ T5590] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 509.624152][ T5590] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 509.633915][ T37] audit: type=1800 audit(1788650584.542:1751): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 509.698607][ T5590] usb 1-1: USB disconnect, device number 18 [ 509.707791][ T37] audit: type=1800 audit(1788650584.602:1752): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=125909 res=0 errno=0 [ 510.423925][ T5720] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 510.596500][ T5720] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 510.608630][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.613820][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.613880][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.669937][ T5720] usb 2-1: config 0 descriptor?? [ 512.098538][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108502][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108533][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108556][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108580][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108604][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108628][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108651][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108676][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 512.108700][ T5720] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 513.471473][ T9354] input: syz0 as /devices/virtual/input/input22 [ 513.569658][ T5720] kye 0003:0458:0138.0002: hidraw0: USB HID v7f.fd Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 513.596985][ T5720] usb 2-1: USB disconnect, device number 19 [ 513.670848][ T9359] FAULT_INJECTION: forcing a failure. [ 513.670848][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 513.672441][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.0.981 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.672464][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.672475][ T9359] Call Trace: [ 513.672483][ T9359] [ 513.672491][ T9359] dump_stack_lvl+0xe8/0x150 [ 513.672522][ T9359] should_fail_ex+0x46b/0x600 [ 513.672548][ T9359] should_failslab+0xa8/0x100 [ 513.672574][ T9359] ? security_file_alloc+0x34/0x310 [ 513.672593][ T9359] kmem_cache_alloc_noprof+0x9e/0x690 [ 513.672615][ T9359] ? rcu_is_watching+0x16/0xb0 [ 513.672636][ T9359] ? security_file_alloc+0x34/0x310 [ 513.672655][ T9359] ? alloc_empty_file+0x5b/0x1d0 [ 513.672682][ T9359] security_file_alloc+0x34/0x310 [ 513.672702][ T9359] init_file+0x96/0x2d0 [ 513.672727][ T9359] alloc_empty_file+0x74/0x1d0 [ 513.672750][ T9359] alloc_file_pseudo+0x115/0x1e0 [ 513.672776][ T9359] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 513.672798][ T9359] ? security_inode_alloc+0xd5/0x310 [ 513.672826][ T9359] ? inode_init_always_gfp+0x999/0xd40 [ 513.672854][ T9359] sock_alloc_file+0xb8/0x2f0 [ 513.672879][ T9359] do_accept+0x3ab/0x760 [ 513.672904][ T9359] ? __pfx_do_accept+0x10/0x10 [ 513.672944][ T9359] __sys_accept4+0x139/0x230 [ 513.672966][ T9359] ? __pfx___sys_accept4+0x10/0x10 [ 513.672986][ T9359] ? __pfx_ksys_write+0x10/0x10 [ 513.673012][ T9359] __x64_sys_accept4+0x9a/0xb0 [ 513.673034][ T9359] do_syscall_64+0x166/0x520 [ 513.673055][ T9359] ? trace_irq_disable+0x3b/0x140 [ 513.673076][ T9359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.673094][ T9359] ? clear_bhb_loop+0x70/0xc0 [ 513.673115][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.673133][ T9359] RIP: 0033:0x7f3de732e159 [ 513.673149][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.673163][ T9359] RSP: 002b:00007f3de5586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 513.673185][ T9359] RAX: ffffffffffffffda RBX: 00007f3de75b5fa0 RCX: 00007f3de732e159 [ 513.673198][ T9359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 513.673209][ T9359] RBP: 00007f3de5586090 R08: 0000000000000000 R09: 0000000000000000 [ 513.673219][ T9359] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 513.673230][ T9359] R13: 00007f3de75b6038 R14: 00007f3de75b5fa0 R15: 00007ffceebaf198 [ 513.673258][ T9359] [ 514.054462][ T5590] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 515.016714][ T5590] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.40 [ 515.039621][ T5590] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.039686][ T5590] usb 5-1: config 1 interface 0 has no altsetting 0 [ 515.156916][ T5590] usb 5-1: string descriptor 0 read error: -22 [ 515.157040][ T5590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.293955][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 515.302779][ T37] audit: type=1800 audit(1788650590.192:1780): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126182 res=0 errno=0 [ 515.314951][ T37] audit: type=1800 audit(1788650590.192:1781): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=126113 res=0 errno=0 [ 515.435302][ T37] audit: type=1800 audit(1788650590.352:1782): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=126211 res=0 errno=0 [ 515.597759][ T37] audit: type=1800 audit(1788650590.512:1783): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=126189 res=0 errno=0 [ 515.603931][ T37] audit: type=1800 audit(1788650590.512:1784): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=126190 res=0 errno=0 [ 515.612968][ T37] audit: type=1800 audit(1788650590.522:1785): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=126191 res=0 errno=0 [ 516.296438][ T9383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.489193][ T9375] fido_id[9375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 516.523453][ T37] audit: type=1800 audit(1788650591.432:1786): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126240 res=0 errno=0 [ 516.650328][ T5590] usbhid 5-1:1.0: can't add hid device: -32 [ 516.656446][ T5590] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 516.674051][ T37] audit: type=1800 audit(1788650591.582:1787): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 516.790355][ T37] audit: type=1800 audit(1788650591.702:1788): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 516.864448][ T37] audit: type=1800 audit(1788650591.772:1789): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 517.647938][ T9410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.386085][ T5720] usb 5-1: USB disconnect, device number 12 [ 519.536907][ T9424] vivid-000: ================= START STATUS ================= [ 519.542902][ T9424] vivid-000: Generate PTS: true [ 519.542930][ T9424] vivid-000: Generate SCR: true [ 519.542950][ T9424] tpg source WxH: 1280x720 (Y'CbCr) [ 519.542962][ T9424] tpg field: 1 [ 519.542970][ T9424] tpg crop: (0,0)/1280x720 [ 519.542982][ T9424] tpg compose: (0,0)/1280x720 [ 519.542995][ T9424] tpg colorspace: 3 [ 519.543002][ T9424] tpg transfer function: 0/0 [ 519.543011][ T9424] tpg Y'CbCr encoding: 0/0 [ 519.543020][ T9424] tpg quantization: 0/0 [ 519.543029][ T9424] tpg RGB range: 0/1 [ 519.543037][ T9424] vivid-000: ================== END STATUS ================== [ 520.758637][ T9434] input: syz0 as /devices/virtual/input/input23 [ 520.768238][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 520.771309][ T37] audit: type=1800 audit(1788650595.682:1798): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 520.803512][ T37] audit: type=1800 audit(1788650595.712:1799): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 520.895582][ T37] audit: type=1800 audit(1788650595.742:1800): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126336 res=0 errno=0 [ 520.895660][ T37] audit: type=1800 audit(1788650595.742:1801): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=126351 res=0 errno=0 [ 520.895691][ T37] audit: type=1800 audit(1788650595.742:1802): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=126354 res=0 errno=0 [ 520.895723][ T37] audit: type=1800 audit(1788650595.742:1803): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=126353 res=0 errno=0 [ 520.895756][ T37] audit: type=1800 audit(1788650595.742:1804): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=126352 res=0 errno=0 [ 520.895800][ T37] audit: type=1800 audit(1788650595.752:1805): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=126343 res=0 errno=0 [ 520.895833][ T37] audit: type=1800 audit(1788650595.752:1806): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=126346 res=0 errno=0 [ 520.895867][ T37] audit: type=1800 audit(1788650595.752:1807): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=126339 res=0 errno=0 [ 522.530664][ T9439] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd3": -EINTR [ 526.663867][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 526.664287][ T37] audit: type=1800 audit(1788650601.572:1817): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 527.095098][ T37] audit: type=1800 audit(1788650602.012:1818): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 527.150793][ T37] audit: type=1800 audit(1788650602.062:1819): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 527.211388][ T9469] vivid-000: ================= START STATUS ================= [ 527.211450][ T9469] vivid-000: Generate PTS: true [ 527.211472][ T9469] vivid-000: Generate SCR: true [ 527.211492][ T9469] tpg source WxH: 1280x720 (Y'CbCr) [ 527.211505][ T9469] tpg field: 1 [ 527.211511][ T9469] tpg crop: (0,0)/1280x720 [ 527.211521][ T9469] tpg compose: (0,0)/1280x720 [ 527.211531][ T9469] tpg colorspace: 3 [ 527.211538][ T9469] tpg transfer function: 0/0 [ 527.211547][ T9469] tpg Y'CbCr encoding: 0/0 [ 527.211555][ T9469] tpg quantization: 0/0 [ 527.211564][ T9469] tpg RGB range: 0/1 [ 527.211572][ T9469] vivid-000: ================== END STATUS ================== [ 527.373895][ T37] audit: type=1800 audit(1788650602.282:1820): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 527.620466][ T9474] nvme nvme0: rdma_resolve_addr failed (-19). [ 527.711521][ T37] audit: type=1800 audit(1788650602.622:1821): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 527.793612][ T37] audit: type=1800 audit(1788650602.672:1822): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 528.437364][ T37] audit: type=1800 audit(1788650603.352:1823): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 528.567696][ T37] audit: type=1800 audit(1788650603.482:1824): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 528.758894][ T37] audit: type=1800 audit(1788650603.672:1825): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 528.925548][ T9497] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 528.934854][ T9494] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 528.940645][ T37] audit: type=1800 audit(1788650603.852:1826): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 529.014577][ T9502] FAULT_INJECTION: forcing a failure. [ 529.014577][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.014675][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.2.1018 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.014694][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.014702][ T9502] Call Trace: [ 529.014708][ T9502] [ 529.014715][ T9502] dump_stack_lvl+0xe8/0x150 [ 529.014743][ T9502] should_fail_ex+0x46b/0x600 [ 529.014765][ T9502] _copy_to_user+0x31/0xb0 [ 529.014786][ T9502] simple_read_from_buffer+0xe1/0x170 [ 529.014806][ T9502] proc_fail_nth_read+0x1be/0x230 [ 529.014826][ T9502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.014845][ T9502] ? rw_verify_area+0x250/0x4d0 [ 529.014862][ T9502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.014879][ T9502] vfs_read+0x219/0xa90 [ 529.014905][ T9502] ? __pfx_vfs_read+0x10/0x10 [ 529.014921][ T9502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.014941][ T9502] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 529.014960][ T9502] ? mutex_lock_nested+0x152/0x1d0 [ 529.014981][ T9502] ? fdget_pos+0x252/0x320 [ 529.015005][ T9502] ksys_read+0x156/0x270 [ 529.015023][ T9502] ? __pfx_ksys_read+0x10/0x10 [ 529.015048][ T9502] do_syscall_64+0x166/0x520 [ 529.015064][ T9502] ? trace_irq_disable+0x3b/0x140 [ 529.015081][ T9502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.015096][ T9502] ? clear_bhb_loop+0x70/0xc0 [ 529.015112][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.015125][ T9502] RIP: 0033:0x7f69fea9e98e [ 529.015138][ T9502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.015150][ T9502] RSP: 002b:00007f69fcd35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.015177][ T9502] RAX: ffffffffffffffda RBX: 00007f69fcd366c0 RCX: 00007f69fea9e98e [ 529.015187][ T9502] RDX: 000000000000000f RSI: 00007f69fcd360a0 RDI: 0000000000000003 [ 529.015197][ T9502] RBP: 00007f69fcd36090 R08: 0000000000000000 R09: 0000000000000000 [ 529.015206][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.015215][ T9502] R13: 00007f69fed66038 R14: 00007f69fed65fa0 R15: 00007fffc234a7a8 [ 529.015239][ T9502] [ 530.009507][ T9499] bond2: (slave macvlan1): making interface the new active one [ 530.034007][ T9499] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 531.711236][ T9518] vivid-000: ================= START STATUS ================= [ 531.717299][ T9518] vivid-000: Generate PTS: true [ 531.717513][ T9518] vivid-000: Generate SCR: true [ 531.717565][ T9518] tpg source WxH: 1280x720 (Y'CbCr) [ 531.717591][ T9518] tpg field: 1 [ 531.717616][ T9518] tpg crop: (0,0)/1280x720 [ 531.717649][ T9518] tpg compose: (0,0)/1280x720 [ 531.717675][ T9518] tpg colorspace: 3 [ 531.717699][ T9518] tpg transfer function: 0/0 [ 531.717709][ T9518] tpg Y'CbCr encoding: 0/0 [ 531.717718][ T9518] tpg quantization: 0/0 [ 531.717739][ T9518] tpg RGB range: 0/1 [ 531.717763][ T9518] vivid-000: ================== END STATUS ================== [ 532.129738][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 532.129819][ T37] audit: type=1800 audit(1788650607.042:1832): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 532.189637][ T37] audit: type=1800 audit(1788650607.102:1833): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 532.229651][ T37] audit: type=1800 audit(1788650607.142:1834): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 532.261711][ T37] audit: type=1800 audit(1788650607.172:1835): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 532.379441][ T37] audit: type=1800 audit(1788650607.292:1836): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 533.611442][ T9537] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1026'. [ 533.839448][ T37] audit: type=1800 audit(1788650608.752:1837): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 533.965150][ T37] audit: type=1800 audit(1788650608.872:1838): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126757 res=0 errno=0 [ 534.028517][ T9526] nvme nvme0: rdma_resolve_addr failed (-19). [ 534.317538][ T37] audit: type=1800 audit(1788650609.222:1839): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 534.439064][ T37] audit: type=1800 audit(1788650609.352:1840): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 534.522545][ T37] audit: type=1800 audit(1788650609.432:1841): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 534.957712][ T9548] input: syz0 as /devices/virtual/input/input24 [ 537.521783][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 537.528075][ T37] audit: type=1800 audit(1788650612.432:1850): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=126803 res=0 errno=0 [ 537.585282][ T37] audit: type=1800 audit(1788650612.502:1851): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126831 res=0 errno=0 [ 537.731584][ T37] audit: type=1800 audit(1788650612.642:1852): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=126804 res=0 errno=0 [ 537.904761][ T37] audit: type=1800 audit(1788650612.822:1853): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 537.983519][ T37] audit: type=1800 audit(1788650612.892:1854): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 538.057705][ T9568] vivid-000: ================= START STATUS ================= [ 538.057778][ T9568] vivid-000: Generate PTS: true [ 538.057802][ T9568] vivid-000: Generate SCR: true [ 538.057821][ T9568] tpg source WxH: 1280x720 (Y'CbCr) [ 538.057833][ T9568] tpg field: 1 [ 538.057840][ T9568] tpg crop: (0,0)/1280x720 [ 538.057853][ T9568] tpg compose: (0,0)/1280x720 [ 538.057865][ T9568] tpg colorspace: 3 [ 538.057872][ T9568] tpg transfer function: 0/0 [ 538.057881][ T9568] tpg Y'CbCr encoding: 0/0 [ 538.057890][ T9568] tpg quantization: 0/0 [ 538.057899][ T9568] tpg RGB range: 0/1 [ 538.058018][ T9568] vivid-000: ================== END STATUS ================== [ 538.066037][ T37] audit: type=1800 audit(1788650612.972:1855): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 538.223240][ T37] audit: type=1800 audit(1788650613.132:1856): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 538.294660][ T37] audit: type=1800 audit(1788650613.202:1857): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 538.367370][ T37] audit: type=1800 audit(1788650613.282:1858): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 538.383920][ T1252] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 539.460149][ T37] audit: type=1800 audit(1788650614.362:1859): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 539.507287][ T1252] usb 1-1: device descriptor read/64, error -71 [ 540.015852][ T9596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1040'. [ 540.738214][ T9614] size and base must be multiples of 4 kiB [ 540.738297][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.1.1044 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.738321][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.738332][ T9614] Call Trace: [ 540.738340][ T9614] [ 540.738348][ T9614] dump_stack_lvl+0xe8/0x150 [ 540.738383][ T9614] mtrr_add+0xd5/0x100 [ 540.738412][ T9614] mtrr_ioctl+0xca4/0x13c0 [ 540.738437][ T9614] ? smk_tskacc+0x2fb/0x370 [ 540.738467][ T9614] ? __pfx_mtrr_ioctl+0x10/0x10 [ 540.738490][ T9614] ? smack_file_ioctl+0x265/0x370 [ 540.738520][ T9614] ? __rcu_read_unlock+0x83/0xe0 [ 540.738541][ T9614] ? __fget_files+0x2a/0x420 [ 540.738557][ T9614] ? __fget_files+0x3a8/0x420 [ 540.738569][ T9614] ? __fget_files+0x2a/0x420 [ 540.738581][ T9614] ? __pfx_mtrr_ioctl+0x10/0x10 [ 540.738603][ T9614] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 540.738621][ T9614] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 540.738639][ T9614] __se_sys_ioctl+0xff/0x170 [ 540.738659][ T9614] do_syscall_64+0x166/0x520 [ 540.738675][ T9614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.738689][ T9614] ? clear_bhb_loop+0x70/0xc0 [ 540.738705][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.738719][ T9614] RIP: 0033:0x7fa78ccbe159 [ 540.738733][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.738744][ T9614] RSP: 002b:00007fa78aed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.738762][ T9614] RAX: ffffffffffffffda RBX: 00007fa78cf46180 RCX: 00007fa78ccbe159 [ 540.738773][ T9614] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 540.738782][ T9614] RBP: 00007fa78cd55024 R08: 0000000000000000 R09: 0000000000000000 [ 540.738791][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.738800][ T9614] R13: 00007fa78cf46218 R14: 00007fa78cf46180 R15: 00007ffc6921f898 [ 540.738823][ T9614] [ 541.760475][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 542.843026][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 542.848392][ T37] audit: type=1800 audit(1788650617.752:1870): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 543.936308][ T5590] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 543.991061][ T37] audit: type=1800 audit(1788650618.902:1871): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 544.107004][ T5590] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 544.119074][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 544.120802][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 544.120830][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 544.152305][ T5590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.162862][ T5590] usb 5-1: Product: syz [ 544.162884][ T5590] usb 5-1: Manufacturer: syz [ 544.162897][ T5590] usb 5-1: SerialNumber: syz [ 544.197155][ T5590] usb 5-1: config 0 descriptor?? [ 544.282965][ T37] audit: type=1800 audit(1788650619.192:1872): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 544.303924][ T37] audit: type=1800 audit(1788650619.202:1873): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126860 res=0 errno=0 [ 544.340168][ T37] audit: type=1800 audit(1788650619.242:1874): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=126892 res=0 errno=0 [ 544.366571][ T37] audit: type=1800 audit(1788650619.282:1875): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=126867 res=0 errno=0 [ 544.389509][ T37] audit: type=1800 audit(1788650619.282:1876): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=126868 res=0 errno=0 [ 544.414503][ T5590] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 544.433549][ T37] audit: type=1800 audit(1788650619.342:1877): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=126889 res=0 errno=0 [ 544.469947][ T37] audit: type=1800 audit(1788650619.382:1878): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=126890 res=0 errno=0 [ 544.486648][ T9642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1054'. [ 544.487348][ T37] audit: type=1800 audit(1788650619.402:1879): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=126869 res=0 errno=0 [ 544.615298][ T5590] usb 5-1: USB disconnect, device number 13 [ 544.906714][ T9641] nvme nvme0: rdma_resolve_addr failed (-19). [ 545.302702][ T9654] size and base must be multiples of 4 kiB [ 545.302740][ T9654] CPU: 1 UID: 0 PID: 9654 Comm: syz.4.1056 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.302763][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.302774][ T9654] Call Trace: [ 545.302782][ T9654] [ 545.302791][ T9654] dump_stack_lvl+0xe8/0x150 [ 545.302824][ T9654] mtrr_add+0xd5/0x100 [ 545.302853][ T9654] mtrr_ioctl+0xca4/0x13c0 [ 545.302878][ T9654] ? smk_tskacc+0x2fb/0x370 [ 545.302917][ T9654] ? __pfx_mtrr_ioctl+0x10/0x10 [ 545.302941][ T9654] ? smack_file_ioctl+0x265/0x370 [ 545.302975][ T9654] ? __fget_files+0x2a/0x420 [ 545.302993][ T9654] ? __fget_files+0x3a8/0x420 [ 545.303011][ T9654] ? __fget_files+0x2a/0x420 [ 545.303029][ T9654] ? __pfx_mtrr_ioctl+0x10/0x10 [ 545.303057][ T9654] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 545.303083][ T9654] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 545.303108][ T9654] __se_sys_ioctl+0xff/0x170 [ 545.303134][ T9654] do_syscall_64+0x166/0x520 [ 545.303163][ T9654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.303183][ T9654] ? clear_bhb_loop+0x70/0xc0 [ 545.303205][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.303230][ T9654] RIP: 0033:0x7fe985c9e159 [ 545.303244][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.303257][ T9654] RSP: 002b:00007fe983eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.303273][ T9654] RAX: ffffffffffffffda RBX: 00007fe985f26180 RCX: 00007fe985c9e159 [ 545.303284][ T9654] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 545.303294][ T9654] RBP: 00007fe985d35024 R08: 0000000000000000 R09: 0000000000000000 [ 545.303304][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.303313][ T9654] R13: 00007fe985f26218 R14: 00007fe985f26180 R15: 00007fff217c10d8 [ 545.303336][ T9654] [ 546.262082][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 546.433978][ T5596] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 546.539854][ T9668] FAULT_INJECTION: forcing a failure. [ 546.539854][ T9668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.543384][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.3.1062 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 546.543411][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.543423][ T9668] Call Trace: [ 546.543431][ T9668] [ 546.543438][ T9668] dump_stack_lvl+0xe8/0x150 [ 546.543471][ T9668] should_fail_ex+0x46b/0x600 [ 546.543497][ T9668] _copy_from_user+0x2d/0xb0 [ 546.543520][ T9668] ___sys_sendmsg+0x1c6/0x360 [ 546.543543][ T9668] ? __lock_acquire+0x6df/0x2e40 [ 546.543570][ T9668] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.543627][ T9668] ? __fget_files+0x2a/0x420 [ 546.543645][ T9668] ? __fget_files+0x3a8/0x420 [ 546.543672][ T9668] __x64_sys_sendmsg+0x1b7/0x290 [ 546.543698][ T9668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.543744][ T9668] do_syscall_64+0x166/0x520 [ 546.543762][ T9668] ? trace_irq_disable+0x3b/0x140 [ 546.543781][ T9668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.543798][ T9668] ? clear_bhb_loop+0x70/0xc0 [ 546.543825][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.543842][ T9668] RIP: 0033:0x7f19a38fe159 [ 546.543859][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.543874][ T9668] RSP: 002b:00007f19a1b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.543894][ T9668] RAX: ffffffffffffffda RBX: 00007f19a3b85fa0 RCX: 00007f19a38fe159 [ 546.543907][ T9668] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 546.543918][ T9668] RBP: 00007f19a1b56090 R08: 0000000000000000 R09: 0000000000000000 [ 546.543930][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.543941][ T9668] R13: 00007f19a3b86038 R14: 00007f19a3b85fa0 R15: 00007ffc957b4528 [ 546.543971][ T9668] [ 546.594749][ T5596] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 546.597169][ T5596] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 546.597203][ T5596] usb 3-1: can't read configurations, error -61 [ 546.769667][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 546.830262][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 546.914012][ T5596] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 547.064828][ T5596] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 547.081176][ T5596] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 547.081214][ T5596] usb 3-1: can't read configurations, error -61 [ 547.082341][ T5596] usb usb3-port1: attempt power cycle [ 547.203911][ T5590] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 547.354885][ T5590] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 547.365533][ T5590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.365588][ T5590] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.365629][ T5590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.454211][ T5596] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 547.493918][ T5596] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 547.511087][ T5596] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 547.518873][ T5596] usb 3-1: can't read configurations, error -61 [ 547.673915][ T5596] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 547.696655][ T5596] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 547.726357][ T5596] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 547.734197][ T5596] usb 3-1: can't read configurations, error -61 [ 547.761410][ T5596] usb usb3-port1: unable to enumerate USB device [ 548.077439][ T5590] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 548.112952][ T5590] dvb_usb_af9035 4-1:1.0: probe with driver dvb_usb_af9035 failed with error -71 [ 548.167768][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 548.167899][ T37] audit: type=1800 audit(1788650623.072:1902): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 548.233544][ T5590] usb 4-1: USB disconnect, device number 19 [ 548.877507][ T37] audit: type=1800 audit(1788650623.792:1903): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 549.085635][ T37] audit: type=1800 audit(1788650623.982:1904): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 549.187325][ T37] audit: type=1800 audit(1788650624.092:1905): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 549.385438][ T37] audit: type=1800 audit(1788650624.302:1906): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 549.472155][ T37] audit: type=1800 audit(1788650624.362:1907): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 549.603715][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 549.610060][ T37] audit: type=1800 audit(1788650624.512:1908): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 549.709073][ T37] audit: type=1800 audit(1788650624.622:1909): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 549.760090][ T9710] veth1_to_bond: entered allmulticast mode [ 550.318735][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 550.326965][ T37] audit: type=1800 audit(1788650625.232:1910): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 550.433832][ T37] audit: type=1800 audit(1788650625.342:1911): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 550.815101][ T5590] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 550.837443][ T9719] input: syz0 as /devices/virtual/input/input25 [ 550.857810][ T9713] bond0: (slave bond_slave_1): Releasing backup interface [ 550.888351][ T9713] bond_slave_1 (unregistering): left promiscuous mode [ 550.888438][ T9713] bond_slave_1 (unregistering): left allmulticast mode [ 550.974633][ T5590] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 550.985168][ T5590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 550.991308][ T5590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.991336][ T5590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 551.022255][ T5590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.023856][ T5590] usb 4-1: Product: syz [ 551.023872][ T5590] usb 4-1: Manufacturer: syz [ 551.023884][ T5590] usb 4-1: SerialNumber: syz [ 551.076628][ T5590] usb 4-1: config 0 descriptor?? [ 551.313910][ T5845] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 551.359262][ T5590] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 551.515231][ T6882] usb 4-1: USB disconnect, device number 20 [ 551.524837][ T5845] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 551.535791][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 551.542591][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.542619][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 551.647484][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.657098][ T5845] usb 3-1: Product: syz [ 551.657117][ T5845] usb 3-1: Manufacturer: syz [ 551.657130][ T5845] usb 3-1: SerialNumber: syz [ 552.519157][ T5845] usb 3-1: config 0 descriptor?? [ 553.099973][ T5845] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 553.172999][ T5845] usb 3-1: USB disconnect, device number 27 [ 553.240526][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 553.807971][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 553.808042][ T37] audit: type=1800 audit(1788650628.722:1948): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 553.913500][ T37] audit: type=1800 audit(1788650628.822:1949): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 553.948272][ T9751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 554.570850][ T37] audit: type=1800 audit(1788650629.482:1950): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 554.667090][ T37] audit: type=1800 audit(1788650629.572:1951): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 554.741534][ T37] audit: type=1800 audit(1788650629.652:1952): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 554.772956][ T37] audit: type=1800 audit(1788650629.682:1953): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1087" name="addr_trtype" dev="configfs" ino=20787 res=0 errno=0 [ 554.880578][ T9760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 555.019209][ T37] audit: type=1800 audit(1788650629.932:1954): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1089" name="addr_trtype" dev="configfs" ino=21683 res=0 errno=0 [ 555.062971][ T5845] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 555.121820][ T9765] input: syz0 as /devices/virtual/input/input26 [ 555.127743][ T37] audit: type=1800 audit(1788650630.042:1955): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128144 res=0 errno=0 [ 555.154554][ T37] audit: type=1800 audit(1788650630.072:1956): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=128159 res=0 errno=0 [ 555.156918][ T37] audit: type=1800 audit(1788650630.072:1957): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=128162 res=0 errno=0 [ 555.214498][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 555.215341][ T5845] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 555.243628][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.243708][ T5845] usb 3-1: Product: syz [ 555.243723][ T5845] usb 3-1: Manufacturer: syz [ 555.243941][ T5845] usb 3-1: SerialNumber: syz [ 555.328113][ T5845] usb 3-1: config 0 descriptor?? [ 555.353126][ T5845] usb-storage 3-1:0.0: USB Mass Storage device detected [ 555.443596][ T5845] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 556.897535][ T5845] usb 3-1: USB disconnect, device number 28 [ 558.122475][ T6882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 558.473929][ T6882] usb 5-1: Using ep0 maxpacket: 16 [ 558.481079][ T6882] usb 5-1: New USB device found, idVendor=19d2, idProduct=1594, bcdDevice=1e.1c [ 558.483054][ T6882] usb 5-1: config 3 has an invalid interface number: 194 but max is 1 [ 558.483080][ T6882] usb 5-1: config 3 has an invalid interface number: 59 but max is 1 [ 558.483097][ T6882] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 558.483113][ T6882] usb 5-1: config 3 has no interface number 0 [ 558.483126][ T6882] usb 5-1: config 3 has no interface number 1 [ 558.483174][ T6882] usb 5-1: config 3 interface 194 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 558.483195][ T6882] usb 5-1: config 3 interface 194 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 558.483215][ T6882] usb 5-1: config 3 interface 194 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 558.483234][ T6882] usb 5-1: config 3 interface 194 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 558.483270][ T6882] usb 5-1: config 3 interface 59 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 558.483291][ T6882] usb 5-1: config 3 interface 59 altsetting 9 endpoint 0x9 has invalid maxpacket 520, setting to 64 [ 558.483315][ T6882] usb 5-1: config 3 interface 59 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 558.483333][ T6882] usb 5-1: config 3 interface 59 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 558.483355][ T6882] usb 5-1: config 3 interface 194 has no altsetting 0 [ 558.483371][ T6882] usb 5-1: config 3 interface 59 has no altsetting 0 [ 558.540323][ T6882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.540349][ T6882] usb 5-1: Product: Є [ 558.540362][ T6882] usb 5-1: Manufacturer: ࠊ [ 558.540374][ T6882] usb 5-1: SerialNumber: п [ 558.937260][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 558.937333][ T37] audit: type=1800 audit(1788650633.852:1987): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 558.949144][ T6882] option 5-1:3.194: GSM modem (1-port) converter detected [ 558.956061][ T9800] input: syz0 as /devices/virtual/input/input27 [ 559.006494][ T37] audit: type=1800 audit(1788650633.922:1988): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 559.063205][ T37] audit: type=1800 audit(1788650633.972:1989): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 559.159175][ T6882] cdc_wdm 5-1:3.59: skipping garbage [ 559.160787][ T6882] cdc_wdm 5-1:3.59: probe with driver cdc_wdm failed with error -22 [ 559.196717][ T37] audit: type=1800 audit(1788650634.112:1990): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128353 res=0 errno=0 [ 559.223225][ T37] audit: type=1800 audit(1788650634.122:1991): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=128368 res=0 errno=0 [ 559.246806][ T37] audit: type=1800 audit(1788650634.152:1992): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=128398 res=0 errno=0 [ 559.307555][ T37] audit: type=1800 audit(1788650634.212:1993): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=128397 res=0 errno=0 [ 559.307596][ T37] audit: type=1800 audit(1788650634.212:1994): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=128369 res=0 errno=0 [ 559.307626][ T37] audit: type=1800 audit(1788650634.212:1995): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=128360 res=0 errno=0 [ 559.307656][ T37] audit: type=1800 audit(1788650634.212:1996): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=128363 res=0 errno=0 [ 559.320048][ T6882] usb 5-1: USB disconnect, device number 14 [ 559.341313][ T6882] option 5-1:3.194: device disconnected [ 559.583883][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 559.723175][ T9] usb 2-1: device descriptor read/64, error -71 [ 559.750585][ T9816] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 560.056457][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 560.213918][ T9] usb 2-1: device descriptor read/64, error -71 [ 560.301368][ T9820] input: syz0 as /devices/virtual/input/input28 [ 560.330710][ T9] usb usb2-port1: attempt power cycle [ 560.377708][ T9822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.465694][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 561.485668][ T9] usb 2-1: device descriptor read/8, error -71 [ 561.577374][ T9825] syz.0.1105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 561.744277][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 561.773320][ T9] usb 2-1: device descriptor read/8, error -71 [ 561.887663][ T9] usb usb2-port1: unable to enumerate USB device [ 563.399633][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.399785][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.651819][ T9850] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 564.703074][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 564.703149][ T37] audit: type=1800 audit(1788650639.612:2040): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 565.181628][ T37] audit: type=1800 audit(1788650640.092:2041): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 565.312091][ T37] audit: type=1800 audit(1788650640.222:2042): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 565.370868][ T37] audit: type=1326 audit(1788650640.282:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa78ccbdf57 code=0x7ffc0000 [ 565.370970][ T37] audit: type=1326 audit(1788650640.282:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa78cc7ae51 code=0x7ffc0000 [ 565.371010][ T37] audit: type=1326 audit(1788650640.282:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa78ccbef49 code=0x7ffc0000 [ 565.371340][ T37] audit: type=1326 audit(1788650640.282:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa78cc7aebb code=0x7ffc0000 [ 565.371381][ T37] audit: type=1326 audit(1788650640.282:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ccbe159 code=0x7ffc0000 [ 565.371417][ T37] audit: type=1326 audit(1788650640.282:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78ccbe159 code=0x7ffc0000 [ 565.378874][ T37] audit: type=1326 audit(1788650640.292:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.1.1113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa78cc7a5ac code=0x7ffc0000 [ 565.904116][ T9872] input: syz0 as /devices/virtual/input/input29 [ 566.749657][ T5590] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 567.237316][ T5590] usb 2-1: Invalid ep0 maxpacket: 16 [ 567.425896][ T5590] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 567.584057][ T5590] usb 2-1: Invalid ep0 maxpacket: 16 [ 567.585167][ T5590] usb usb2-port1: attempt power cycle [ 568.032442][ T9901] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 569.755476][ T37] kauditd_printk_skb: 85 callbacks suppressed [ 569.755540][ T37] audit: type=1800 audit(1788650644.662:2135): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 569.890069][ T37] audit: type=1800 audit(1788650644.802:2136): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 570.168199][ T9918] size and base must be multiples of 4 kiB [ 570.168266][ T9918] CPU: 1 UID: 0 PID: 9918 Comm: syz.0.1130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 570.168289][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.168300][ T9918] Call Trace: [ 570.168308][ T9918] [ 570.168317][ T9918] dump_stack_lvl+0xe8/0x150 [ 570.168353][ T9918] mtrr_add+0xd5/0x100 [ 570.168384][ T9918] mtrr_ioctl+0xca4/0x13c0 [ 570.168408][ T9918] ? smk_tskacc+0x2fb/0x370 [ 570.168440][ T9918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 570.168463][ T9918] ? smack_file_ioctl+0x265/0x370 [ 570.168497][ T9918] ? __fget_files+0x2a/0x420 [ 570.168517][ T9918] ? __fget_files+0x3a8/0x420 [ 570.168533][ T9918] ? __fget_files+0x2a/0x420 [ 570.168550][ T9918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 570.168577][ T9918] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 570.168605][ T9918] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 570.168630][ T9918] __se_sys_ioctl+0xff/0x170 [ 570.168657][ T9918] do_syscall_64+0x166/0x520 [ 570.168679][ T9918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.168698][ T9918] ? clear_bhb_loop+0x70/0xc0 [ 570.168717][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.168731][ T9918] RIP: 0033:0x7f3de732e159 [ 570.168746][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.168758][ T9918] RSP: 002b:00007f3de5544028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.168774][ T9918] RAX: ffffffffffffffda RBX: 00007f3de75b6180 RCX: 00007f3de732e159 [ 570.168784][ T9918] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 570.168793][ T9918] RBP: 00007f3de73c5024 R08: 0000000000000000 R09: 0000000000000000 [ 570.168801][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.168809][ T9918] R13: 00007f3de75b6218 R14: 00007f3de75b6180 R15: 00007ffceebaf198 [ 570.168831][ T9918] [ 570.560611][ T37] audit: type=1800 audit(1788650645.472:2137): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 571.119208][ T37] audit: type=1800 audit(1788650646.032:2138): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 571.147372][ T37] audit: type=1800 audit(1788650646.062:2139): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 571.267584][ T37] audit: type=1800 audit(1788650646.182:2140): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 571.644250][ T37] audit: type=1800 audit(1788650646.472:2141): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 572.002275][ T37] audit: type=1800 audit(1788650646.912:2142): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 572.105226][ T37] audit: type=1800 audit(1788650647.022:2143): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 573.130283][ T37] audit: type=1800 audit(1788650648.042:2144): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 573.725578][ T9950] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 573.903855][ T5735] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 574.055268][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 574.056130][ T5735] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 574.057671][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.057698][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.057719][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 574.057755][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.327555][ T5735] usb 1-1: config 0 descriptor?? [ 575.554997][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 575.602198][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.611095][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.659046][ T37] audit: type=1800 audit(1788650650.472:2154): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 575.727089][ T37] audit: type=1800 audit(1788650650.642:2155): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 575.898813][ T37] audit: type=1800 audit(1788650650.802:2156): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128743 res=0 errno=0 [ 575.905609][ T5735] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 575.915097][ T5735] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 576.502015][ T5735] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:6) [ 577.688976][ T37] audit: type=1800 audit(1788650652.552:2157): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 578.822789][ T37] audit: type=1800 audit(1788650653.722:2158): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 579.959506][ T5735] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 580.107037][ T5735] usb 1-1: USB disconnect, device number 21 [ 580.269869][ T37] audit: type=1800 audit(1788650655.182:2159): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 580.816204][ T37] audit: type=1800 audit(1788650655.732:2160): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 581.171053][ T9985] fido_id[9985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 581.252727][ T37] audit: type=1800 audit(1788650656.162:2161): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 581.334148][ T9992] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.462089][ T37] audit: type=1800 audit(1788650656.372:2162): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 581.568447][ T37] audit: type=1800 audit(1788650656.482:2163): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 581.940710][ T37] audit: type=1800 audit(1788650656.842:2164): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1152" name="addr_trtype" dev="configfs" ino=21227 res=0 errno=0 [ 582.954403][ T37] audit: type=1800 audit(1788650657.862:2165): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 583.363588][ T37] audit: type=1800 audit(1788650658.272:2166): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 584.020794][ T37] audit: type=1800 audit(1788650658.932:2167): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 584.981148][ T37] audit: type=1800 audit(1788650659.892:2168): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 585.186724][T10014] capability: warning: `syz.3.1155' uses deprecated v2 capabilities in a way that may be insecure [ 585.187382][ T37] audit: type=1800 audit(1788650660.102:2169): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 585.503548][T10022] vivid-000: ================= START STATUS ================= [ 585.503622][T10022] vivid-000: Generate PTS: true [ 585.503644][T10022] vivid-000: Generate SCR: true [ 585.503661][T10022] tpg source WxH: 1280x720 (Y'CbCr) [ 585.503672][T10022] tpg field: 1 [ 585.503679][T10022] tpg crop: (0,0)/1280x720 [ 585.503689][T10022] tpg compose: (0,0)/1280x720 [ 585.503701][T10022] tpg colorspace: 3 [ 585.503708][T10022] tpg transfer function: 0/0 [ 585.503717][T10022] tpg Y'CbCr encoding: 0/0 [ 585.503848][T10022] tpg quantization: 0/0 [ 585.503858][T10022] tpg RGB range: 0/1 [ 585.503866][T10022] vivid-000: ================== END STATUS ================== [ 585.806056][T10027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.819196][T10014] kAFS: unable to lookup cell '(' [ 585.838677][T10027] IPv6: NLM_F_CREATE should be set when creating new route [ 585.898960][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 585.899042][ T37] audit: type=1800 audit(1788650660.802:2173): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 586.022477][ T37] audit: type=1800 audit(1788650660.932:2174): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 586.226727][ T37] audit: type=1800 audit(1788650661.132:2175): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 586.965496][ T37] audit: type=1800 audit(1788650661.882:2176): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 587.379953][ T37] audit: type=1800 audit(1788650662.282:2177): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 587.445670][ T37] audit: type=1800 audit(1788650662.342:2178): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 587.533874][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 587.876247][ T980] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 587.883427][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 587.883457][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.883477][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 587.892852][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.892878][ T980] usb 4-1: Product: syz [ 587.892890][ T980] usb 4-1: Manufacturer: syz [ 587.892902][ T980] usb 4-1: SerialNumber: syz [ 587.911779][ T980] usb 4-1: config 0 descriptor?? [ 587.914401][ T37] audit: type=1800 audit(1788650662.832:2179): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 588.356251][ T37] audit: type=1800 audit(1788650663.262:2180): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128898 res=0 errno=0 [ 588.815460][ T37] audit: type=1800 audit(1788650663.732:2181): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=128930 res=0 errno=0 [ 588.822903][ T37] audit: type=1800 audit(1788650663.732:2182): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=128905 res=0 errno=0 [ 588.860043][ T980] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 588.963556][ T5590] usb 4-1: USB disconnect, device number 21 [ 590.132710][T10039] 9pnet_fd: p9_fd_create_tcp (10039): problem connecting socket to 127.0.0.1 [ 591.470423][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 591.470503][ T37] audit: type=1800 audit(1788650666.372:2194): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 591.910202][ T37] audit: type=1800 audit(1788650666.822:2195): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 591.961355][ T37] audit: type=1800 audit(1788650666.872:2196): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 592.014047][T10091] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1175'. [ 592.089781][ T37] audit: type=1800 audit(1788650667.002:2197): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 592.316863][ T37] audit: type=1800 audit(1788650667.232:2198): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 593.653198][ T37] audit: type=1800 audit(1788650668.562:2199): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 593.766968][ T37] audit: type=1800 audit(1788650668.682:2200): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 593.815416][ T37] audit: type=1800 audit(1788650668.732:2201): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 593.838265][T10113] tc_dump_action: action bad kind [ 594.043223][ T37] audit: type=1800 audit(1788650668.952:2202): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 594.117846][ T37] audit: type=1800 audit(1788650669.032:2203): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 594.460366][T10130] input: syz0 as /devices/virtual/input/input30 [ 594.543881][ T5596] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 594.696088][ T5596] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 594.697559][ T5596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 594.697592][ T5596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.697613][ T5596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 594.700966][ T5596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.700990][ T5596] usb 5-1: Product: syz [ 594.701003][ T5596] usb 5-1: Manufacturer: syz [ 594.701015][ T5596] usb 5-1: SerialNumber: syz [ 594.736386][ T5596] usb 5-1: config 0 descriptor?? [ 595.224373][T10134] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 595.521323][ T5596] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 595.592171][ T5596] usb 5-1: USB disconnect, device number 15 [ 595.949293][T10144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1190'. [ 597.762891][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 597.762980][ T37] audit: type=1800 audit(1788650672.672:2232): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 597.857276][ T37] audit: type=1800 audit(1788650672.772:2233): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 599.018882][ T37] audit: type=1800 audit(1788650673.932:2234): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 599.080838][ T37] audit: type=1800 audit(1788650673.992:2235): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 599.277532][ T37] audit: type=1800 audit(1788650674.192:2236): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 599.368463][ T37] audit: type=1800 audit(1788650674.282:2237): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 599.713853][ T5596] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 599.902928][ T5596] usb 3-1: unable to get BOS descriptor or descriptor too short [ 599.911724][ T5596] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 599.925729][ T5596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.928566][ T5596] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.952065][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.954770][ T5596] usb 3-1: Product: syz [ 599.954787][ T5596] usb 3-1: Manufacturer: syz [ 599.954801][ T5596] usb 3-1: SerialNumber: syz [ 599.999019][ T37] audit: type=1800 audit(1788650674.912:2238): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129222 res=0 errno=0 [ 600.125875][ T37] audit: type=1800 audit(1788650674.952:2239): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=129254 res=0 errno=0 [ 600.125969][ T37] audit: type=1800 audit(1788650674.962:2240): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=129229 res=0 errno=0 [ 600.126005][ T37] audit: type=1800 audit(1788650674.962:2241): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=129230 res=0 errno=0 [ 600.230478][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 600.563175][T10172] fuse: Bad value for 'user_id' [ 600.565363][T10172] fuse: Bad value for 'user_id' [ 601.346515][T10193] trusted_key: encrypted_key: master key parameter is missing [ 601.415066][T10192] input: syz0 as /devices/virtual/input/input31 [ 601.699029][T10195] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 602.584367][ T5596] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 602.609269][ T5596] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 603.128590][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 603.129038][ T37] audit: type=1800 audit(1788650678.042:2261): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 603.181084][ T37] audit: type=1800 audit(1788650678.092:2262): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 604.694556][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 605.146657][ T5596] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 605.253282][ T37] audit: type=1800 audit(1788650680.162:2263): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=129251 res=0 errno=0 [ 605.276841][ T37] audit: type=1800 audit(1788650680.162:2264): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=129252 res=0 errno=0 [ 605.282304][ T37] audit: type=1800 audit(1788650680.192:2265): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=129231 res=0 errno=0 [ 605.283131][ T37] audit: type=1800 audit(1788650680.192:2266): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=129253 res=0 errno=0 [ 605.344730][ T5596] usb 3-1: USB disconnect, device number 29 [ 605.543817][ T37] audit: type=1800 audit(1788650680.452:2267): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 605.559095][ T37] audit: type=1800 audit(1788650680.472:2268): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 605.641575][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 605.652159][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.710169][ T37] audit: type=1800 audit(1788650680.622:2269): pid=10231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1213" name="addr_trtype" dev="configfs" ino=22373 res=0 errno=0 [ 605.737602][T10231] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 605.878714][ T37] audit: type=1800 audit(1788650680.792:2270): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 608.819902][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 608.826034][ T37] audit: type=1800 audit(1788650683.732:2272): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 608.909676][ T37] audit: type=1800 audit(1788650683.822:2273): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 609.112692][ T37] audit: type=1800 audit(1788650684.022:2274): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 609.162678][ T37] audit: type=1800 audit(1788650684.072:2275): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 611.005627][ T37] audit: type=1800 audit(1788650685.912:2276): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 611.092517][ T37] audit: type=1800 audit(1788650686.002:2277): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 611.415221][ T37] audit: type=1800 audit(1788650686.332:2278): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 611.693949][ T980] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 611.862069][ T980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 611.865798][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.865827][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.865861][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.887852][ T980] usb 4-1: config 0 descriptor?? [ 611.890626][ T37] audit: type=1800 audit(1788650686.802:2279): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129444 res=0 errno=0 [ 611.912163][ T37] audit: type=1800 audit(1788650686.822:2280): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=129473 res=0 errno=0 [ 611.925486][ T37] audit: type=1800 audit(1788650686.832:2281): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=129451 res=0 errno=0 [ 612.135745][T10269] 9pnet_fd: p9_fd_create_tcp (10269): problem connecting socket to 127.0.0.1 [ 612.306948][T10271] binder: 10270:10271 ioctl c0306201 200000000480 returned -14 [ 612.685564][ T980] hid_parser_main: 219 callbacks suppressed [ 612.686077][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686144][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686172][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686197][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686223][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686247][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.686272][ T980] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 612.734546][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 612.760343][ T980] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 612.833802][ T980] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 612.833903][ T980] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 612.860377][ T980] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -5 [ 612.895832][ T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 612.908039][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 612.908071][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 612.908092][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 612.910584][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.910607][ T31] usb 3-1: Product: syz [ 612.910620][ T31] usb 3-1: Manufacturer: syz [ 612.910634][ T31] usb 3-1: SerialNumber: syz [ 612.972266][ T31] usb 3-1: config 0 descriptor?? [ 613.013847][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 613.184463][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 613.185672][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.185700][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.185720][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 613.187965][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.187987][ T9] usb 2-1: Product: syz [ 613.188000][ T9] usb 2-1: Manufacturer: syz [ 613.188012][ T9] usb 2-1: SerialNumber: syz [ 613.197036][ T9] usb 2-1: config 0 descriptor?? [ 613.262537][ T31] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 613.408514][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 614.449497][ T31] usb 3-1: USB disconnect, device number 30 [ 614.570557][ T980] usb 2-1: USB disconnect, device number 27 [ 614.691974][ T5735] usb 4-1: USB disconnect, device number 22 [ 614.805970][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 614.806045][ T37] audit: type=1800 audit(1788650689.722:2315): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15080 res=0 errno=0 [ 614.851735][ T37] audit: type=1800 audit(1788650689.762:2316): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14957 res=0 errno=0 [ 614.878222][ T37] audit: type=1800 audit(1788650689.792:2317): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15203 res=0 errno=0 [ 614.898816][ T37] audit: type=1800 audit(1788650689.812:2318): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14711 res=0 errno=0 [ 615.024938][T10308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 615.076300][ T37] audit: type=1800 audit(1788650689.992:2319): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1231" name="addr_trtype" dev="configfs" ino=22476 res=0 errno=0 [ 615.109165][ T37] audit: type=1800 audit(1788650690.022:2320): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 615.203898][ T5735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 615.401992][ T5735] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 615.403399][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 615.403427][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.403447][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 615.431598][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.431623][ T5735] usb 4-1: Product: syz [ 615.431637][ T5735] usb 4-1: Manufacturer: syz [ 615.431649][ T5735] usb 4-1: SerialNumber: syz [ 615.503235][ T37] audit: type=1800 audit(1788650690.412:2321): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14834 res=0 errno=0 [ 615.506604][ T5735] usb 4-1: config 0 descriptor?? [ 615.509233][ T37] audit: type=1800 audit(1788650690.422:2322): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129869 res=0 errno=0 [ 615.532684][ T37] audit: type=1800 audit(1788650690.442:2323): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=129901 res=0 errno=0 [ 615.557140][ T37] audit: type=1800 audit(1788650690.462:2324): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=129876 res=0 errno=0 [ 615.742348][ T5735] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 616.402956][ T5735] usb 4-1: USB disconnect, device number 23 [ 616.732064][T10333] FAULT_INJECTION: forcing a failure. [ 616.732064][T10333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.732149][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.1.1242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.732168][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.732176][T10333] Call Trace: [ 616.732182][T10333] [ 616.732189][T10333] dump_stack_lvl+0xe8/0x150 [ 616.732218][T10333] should_fail_ex+0x46b/0x600 [ 616.732254][T10333] _copy_from_user+0x2d/0xb0 [ 616.732278][T10333] __sys_bind+0x1cc/0x410 [ 616.732303][T10333] ? __pfx___sys_bind+0x10/0x10 [ 616.732332][T10333] ? __pfx_ksys_write+0x10/0x10 [ 616.732361][T10333] __x64_sys_bind+0x7a/0x90 [ 616.732382][T10333] do_syscall_64+0x166/0x520 [ 616.732401][T10333] ? trace_irq_disable+0x3b/0x140 [ 616.732423][T10333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.732440][T10333] ? clear_bhb_loop+0x70/0xc0 [ 616.732462][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.732478][T10333] RIP: 0033:0x7fa78ccbe159 [ 616.732496][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.732511][T10333] RSP: 002b:00007fa78af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 616.732530][T10333] RAX: ffffffffffffffda RBX: 00007fa78cf45fa0 RCX: 00007fa78ccbe159 [ 616.732543][T10333] RDX: 000000000000000c RSI: 0000200000000b40 RDI: 0000000000000003 [ 616.732554][T10333] RBP: 00007fa78af16090 R08: 0000000000000000 R09: 0000000000000000 [ 616.732566][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.732576][T10333] R13: 00007fa78cf46038 R14: 00007fa78cf45fa0 R15: 00007ffc6921f898 [ 616.732610][T10333] [ 616.991771][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'. [ 617.431261][ T27] [ 617.433697][ T27] ====================================================== [ 617.440712][ T27] WARNING: possible circular locking dependency detected [ 617.447760][ T27] syzkaller #0 Not tainted [ 617.452163][ T27] ------------------------------------------------------ [ 617.459163][ T27] migration/1/27 is trying to acquire lock: [ 617.465037][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 617.473690][ T27] [ 617.473690][ T27] but task is already holding lock: [ 617.481042][ T27] ffff888064688b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 617.490521][ T27] [ 617.490521][ T27] which lock already depends on the new lock. [ 617.490521][ T27] [ 617.500907][ T27] [ 617.500907][ T27] the existing dependency chain (in reverse order) is: [ 617.509927][ T27] [ 617.509927][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 617.517326][ T27] _raw_spin_lock+0x2e/0x40 [ 617.522358][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 617.528348][ T27] rt_spin_lock+0x165/0x400 [ 617.533381][ T27] finish_wait+0xbe/0x1e0 [ 617.538222][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 617.544384][ T27] try_check_zero+0x2c8/0x4c0 [ 617.549573][ T27] process_srcu+0x148/0x16f0 [ 617.554674][ T27] process_scheduled_works+0xc3d/0x1630 [ 617.560853][ T27] worker_thread+0xa47/0xfb0 [ 617.565957][ T27] kthread+0x38b/0x470 [ 617.570537][ T27] ret_from_fork+0x514/0xb70 [ 617.575658][ T27] ret_from_fork_asm+0x1a/0x30 [ 617.580930][ T27] [ 617.580930][ T27] -> #0 (_T->lock){....}-{2:2}: [ 617.587952][ T27] __lock_acquire+0x15ff/0x2e40 [ 617.593307][ T27] lock_acquire+0x115/0x350 [ 617.598312][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 617.604034][ T27] rt_spin_trylock+0x56/0x2b0 [ 617.609230][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 617.614594][ T27] kvfree_call_rcu+0xa4/0x430 [ 617.619785][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 617.625677][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 617.632096][ T27] select_fallback_rq+0x11e/0x200 [ 617.637629][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 617.643513][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 617.649063][ T27] smpboot_thread_fn+0x565/0xa70 [ 617.654529][ T27] kthread+0x38b/0x470 [ 617.659112][ T27] ret_from_fork+0x514/0xb70 [ 617.664213][ T27] ret_from_fork_asm+0x1a/0x30 [ 617.669483][ T27] [ 617.669483][ T27] other info that might help us debug this: [ 617.669483][ T27] [ 617.679702][ T27] Possible unsafe locking scenario: [ 617.679702][ T27] [ 617.687177][ T27] CPU0 CPU1 [ 617.692525][ T27] ---- ---- [ 617.697886][ T27] lock(&p->pi_lock); [ 617.701951][ T27] lock(_T->lock); [ 617.708329][ T27] lock(&p->pi_lock); [ 617.714897][ T27] lock(_T->lock); [ 617.718685][ T27] [ 617.718685][ T27] *** DEADLOCK *** [ 617.718685][ T27] [ 617.726804][ T27] locks held by migration/1/27: 2, last CPU#1: [ 617.733029][ T27] #0: ffff888064688b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 617.742935][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 617.753451][ T27] [ 617.753451][ T27] stack backtrace: [ 617.759322][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 617.769021][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.779147][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 617.787549][ T27] Call Trace: [ 617.790814][ T27] [ 617.793732][ T27] dump_stack_lvl+0xe8/0x150 [ 617.798315][ T27] print_circular_bug+0x2e2/0x300 [ 617.803330][ T27] check_noncircular+0x12f/0x150 [ 617.808257][ T27] __lock_acquire+0x15ff/0x2e40 [ 617.813099][ T27] ? __asan_memset+0x22/0x50 [ 617.817674][ T27] ? __enqueue_entity+0x30a/0xc60 [ 617.822686][ T27] lock_acquire+0x115/0x350 [ 617.827172][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 617.832014][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 617.837290][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 617.842476][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 617.847312][ T27] rt_spin_trylock+0x56/0x2b0 [ 617.851980][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 617.856818][ T27] kvfree_call_rcu+0xa4/0x430 [ 617.861477][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 617.866570][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 617.871937][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 617.877824][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 617.883794][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 617.889675][ T27] select_fallback_rq+0x11e/0x200 [ 617.894682][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 617.900645][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 617.905998][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.911181][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 617.917142][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 617.922156][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 617.927165][ T27] smpboot_thread_fn+0x565/0xa70 [ 617.932088][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 617.937106][ T27] kthread+0x38b/0x470 [ 617.941173][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 617.946627][ T27] ? __pfx_kthread+0x10/0x10 [ 617.951242][ T27] ret_from_fork+0x514/0xb70 [ 617.955832][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 617.960990][ T27] ? __switch_to+0xc89/0x1420 [ 617.965683][ T27] ? __pfx_kthread+0x10/0x10 [ 617.970275][ T27] ret_from_fork_asm+0x1a/0x30 [ 617.975033][ T27]